Groove&Grain · Policies

Privacy Policy

This privacy policy explains how Groove&Grain (groovegrain.co.uk) collects, uses, stores and protects your personal data, in accordance with the UK GDPR and the Data Protection Act 2018.

1.Data controller

The data controller is Groove&Grain, 112 Notting Hill Gate, London W11 3QW, United Kingdom. For any question about your data: contact.groove.and.grain@gmail.com.

2.Data we collect

We collect the data you provide to us and the data needed for the website to work properly:

• Identity and contact details: surname, first name, email address, phone number.
• Delivery and billing: postal address.
• Orders: order history and details.
• Payment data: processed directly by our secure payment providers; we do not store any full card details.
• Browsing data: cookies, IP address, pages visited.

3.Purposes and legal bases

• Processing and delivering your orders (performance of a contract).
• Providing customer service and order follow-up (performance of a contract).
• Meeting our legal and accounting obligations (legal obligation).
• Sending you our news and offers, with your consent (consent).
• Improving the website and measuring traffic (legitimate interest / consent for non-essential cookies).

4.Recipients and processors

Your data is only shared with the service providers that are strictly necessary: website host, carriers, payment providers and email marketing tools. We never sell your data to third parties.

5.Data retention

Your data is kept for as long as necessary for the purpose for which it was collected: for the duration of our commercial relationship, then archived in accordance with legal retention periods (in particular 10 years for accounting records). Marketing data is kept until you withdraw your consent.

6.Your rights

Under the UK GDPR, you have the right to access, rectify, erase, object to, restrict the processing of and port your data. To exercise these rights, write to us at contact.groove.and.grain@gmail.com. You can also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7.Cookies

This website uses cookies that are necessary for it to work, as well as analytics and personalisation cookies. You can accept, refuse or manage non-essential cookies at any time through the consent banner and your browser settings.

8.Security

We implement appropriate technical and organisational measures (encrypted connection, restricted access) to protect your data against any unauthorised access, alteration or disclosure.