1. Information We Collect
We may collect and process the following information:
Information You Provide
- Name, company name, billing and shipping addresses
- Email address and phone number
- Payment details (processed securely through third-party providers)
- Account registration details (username, password)
- Any information submitted via our contact forms or email
Information Collected Automatically
- IP address, browser type, operating system
- Website usage data (pages visited, time spent, referral source)
- Cookies and tracking technologies (see Section 7)
- c) Business Information (Wholesale Accounts)
- VAT numbers or company registration details
- Purchase history and order preferences
2. How We Use Your Information
We use your information for:
Processing and fulfilling orders
Managing wholesale accounts and business relationships
Providing customer support and responding to enquiries
Sending order confirmations, invoices, and shipping updates
Marketing communications (only if you have opted-in)
Fraud prevention and compliance with legal obligations
Improving our website, products, and services
3. Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
Contract: to process your orders and manage your account
Consent: when you sign up for marketing communications
Legitimate Interests: to improve our services and prevent fraud
Legal Obligation: to comply with accounting and tax laws
4. Sharing Your Information
We do not sell or rent your personal information. However, we may share it with:
Payment processors (e.g., PayPal, Stripe)
Shipping and logistics providers (e.g., Royal Mail, courier services)
IT service providers (hosting, website management, analytics)
Professional advisors (accountants, legal representatives)
Government bodies, where required by law
5. International Data Transfers
If your data is transferred outside the UK (e.g., cloud hosting providers), we ensure appropriate safeguards are in place, such as UK GDPR-approved Standard Contractual Clauses (SCCs).
6. Data Retention
We retain personal data only as long as necessary:
Customer and order records: up to 6 years (for tax/accounting purposes)
Marketing data: until you withdraw consent
Wholesale account details: while the account remains active
7. Cookies & Tracking
We use cookies and similar technologies to:
Enable site functionality (shopping cart, login)
Analyse website traffic and performance
Personalise user experience
You can manage cookies through your browser settings. For more details, see our Cookie Policy.
8. Your Rights (UK GDPR)
You have the right to:
Access your personal data (subject access request)
Request correction of inaccurate data
Request erasure of your data (right to be forgotten)
Restrict processing in certain circumstances
Object to processing for marketing purposes
Data portability (receive a copy in machine-readable format)
To exercise your rights, contact us at: [Insert Email Address]
9. Security
We use appropriate technical and organisational measures to protect your data, including:
Encrypted payment processing
SSL certificates for secure browsing
Limited access to personal data by authorised staff only
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, so we encourage you to read their policies separately.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Grunes Blatt
MK40 1TF – UNITED KINGDOM
Email: info@grunesblatt.co.uk
Phone: +44 1234 631052
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk