Privacy Policy

Last updated: September 26, 2026

GrindGALLERY respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains, in general terms, how personal information may be collected, used, stored, and shared when you visit or interact with this website, make a purchase, contact us, or otherwise use our services.

This website is operated using Shopify and may rely on Shopify and other service providers to provide the technical and commercial functionality necessary to operate the store.

Information We May Collect

Depending on how you interact with the website, we may process information that you voluntarily provide or that is generated through your use of the store.

This may include:

• Contact information, such as your name and email address.

• Billing and shipping information where necessary to process an order.

• Order and transaction information.

• Communications you send to us.

• Technical information relating to your device, browser, IP address, or interaction with the website.

• Other information reasonably necessary to operate the store or provide the services requested by you.

Payment information may be processed by payment providers and other service providers involved in completing your transaction.

How We Use Personal Information

Personal information may be processed where necessary to:

• Process and fulfil orders.

• Provide customer support.

• Communicate with you regarding purchases or requests.

• Operate, maintain, secure, and improve the website.

• Prevent fraud, misuse, or unlawful activity.

• Comply with applicable legal obligations.

• Carry out other activities where you have provided consent or where another lawful basis applies.

We aim to process only the information reasonably necessary for these purposes.

Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, personal information may be processed on one or more of the following grounds:

• To perform a contract or take steps requested before entering into a contract.

• To comply with a legal obligation.

• Based on our legitimate interests, where those interests are not overridden by your rights and freedoms.

• With your consent, where consent is required.

The legal basis applicable to a particular processing activity will depend on the circumstances and the nature of your interaction with the store.

Service Providers

We may use third-party service providers where reasonably necessary to operate the website and provide our services.

These may include providers involved in:

• Ecommerce infrastructure.

• Payment processing.

• Order fulfilment and delivery.

• Website hosting and technical services.

• Customer support.

• Security and fraud prevention.

• Analytics or other store functionality, where applicable.

These providers may process personal information only to the extent necessary for the services they provide and subject to their own legal and contractual obligations.

Cookies and Similar Technologies

The website may use cookies or similar technologies where necessary for its operation, security, functionality, preferences, analytics, or other permitted purposes.

Where required by applicable law, non-essential cookies or similar technologies will be subject to the appropriate consent mechanism.

You may also be able to manage certain preferences through your browser or the privacy controls made available on the website.

Sharing of Personal Information

We do not disclose personal information unnecessarily.

Information may be shared where reasonably necessary with service providers involved in operating the store, fulfilling orders, processing payments, providing technical services, or complying with legal requirements.

We may also disclose information where required by law, legal process, or a valid request from a competent authority.

International Processing

Some of the service providers used to operate the website may process information in countries other than the country in which you are located.

Where applicable, such processing will be handled in accordance with the data protection requirements that apply to the relevant transfer.

Data Retention

Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, including where retention is required for legal, accounting, security, contractual, or dispute-resolution purposes.

Retention periods may vary depending on the type of information and the reason it is processed.

Your Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to request:

• Access to your personal information.

• Correction of inaccurate information.

• Deletion of certain information.

• Restriction of certain processing.

• Objection to certain processing.

• Portability of your information, where applicable.

• Withdrawal of consent where processing is based on consent.

You may also have the right to lodge a complaint with the competent data protection authority.

Requests may be subject to verification and to limitations or exceptions provided by applicable law.

Security

We take reasonable measures intended to protect personal information.

However, no electronic transmission, storage system, or online service can be guaranteed to be completely secure.

Children's Privacy

The website and its services are not intentionally directed at children where they are not legally permitted to use them.

We do not knowingly seek to collect personal information from children in circumstances where doing so would not be permitted by applicable law.

Third-Party Services and Links

The website may contain links to or integrations with third-party websites or services.

Their privacy practices are governed by their own policies, and we are not responsible for how independent third parties process information outside our services.

Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to the website, our practices, service providers, or applicable legal requirements.

The version published on this page will indicate the date of the latest update.