Privacy policy

Last updated: 24 November 2025

At GRAND London ("we", "us", "our"), we are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you visit our website or place an order. By using our site, you agree to the practices outlined below.

Who We Are

GRAND London is the data controller responsible for your personal information under UK and EU data protection law.

Address: 18 College Street, Petersfield GU31 4AD, United Kingdom

What Information We Collect

We collect personal information either directly from you or automatically through your interaction with our site.

Information you provide:

Name, email address, and phone number
Billing and shipping addresses
Purchase history and order details
Messages and customer service enquiries

Information collected automatically:

IP address, browser type, and device data
Pages visited and time spent on site
Cookies and similar tracking tools (see below)

This data is collected when you browse the site, place an order, create an account, or contact our customer service team.

How We Use Your Information

We use your personal data for:

Fulfilling orders and processing payments
Sending order confirmations, updates, and receipts
Providing customer service and returns assistance
Managing marketing communications (only with your consent)
Improving site performance and fraud prevention
Meeting legal obligations (e.g. accounting or reporting requirements)

We process data under the following lawful bases: contractual necessity, legal obligation, legitimate interest, and consent. You can withdraw consent at any time by clicking "unsubscribe" in emails or contacting us directly.

Who We Share Your Information With

We only share your data with trusted service providers necessary to operate our store:

Shopify – our e-commerce platform, which hosts our store and processes all transactions
Payment processors – to securely handle payments (we do not store full card details)
Delivery partners – used to deliver your order within the United Kingdom
Email marketing platforms (e.g. Klaviyo) – if you subscribe to updates
Analytics providers (e.g. Google Analytics) – to understand site performance

All service providers process data under strict data processing agreements (DPAs) in compliance with GDPR requirements.

International Data Transfers

Some service providers (including Shopify, Klaviyo, and Google) operate globally and may process data outside the European Economic Area. All such transfers are protected using EU-approved safeguards, including Standard Contractual Clauses.

Cookies

Cookies help our site function and enhance your experience.

We use:

Essential cookies – required for site functionality (e.g. checkout)
Analytics cookies – track performance and traffic
Preference cookies – remember settings and preferences
Marketing cookies – used only with your consent to show relevant promotions

You can manage cookie preferences via your browser settings. Disabling certain cookies may affect site functionality.

Data Security

We apply appropriate technical and organisational safeguards to protect your data from loss, misuse, or unauthorised access. While no system is 100% secure, we follow industry best practices to ensure your information is handled safely.

How Long We Keep Your Data

We retain personal data only as long as necessary:

Order and account data: Kept for up to 7 years to comply with UK tax and accounting obligations. After that, the data is securely deleted or anonymised
Marketing data: Retained until you unsubscribe or request deletion
Analytics data: Stored in anonymised form for site performance analysis

Your Rights

Under GDPR and UK data protection law, you have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Withdraw consent (for marketing or cookies)
Receive a copy of your data in a portable format
File a complaint with the Information Commissioner's Office (ICO) if you're not satisfied

We respond to all data rights requests within 30 days.

Children's Privacy

Our website is not intended for individuals under 16 years of age. We do not knowingly collect or store personal data from children.

Changes to This Policy

We may update this policy to reflect changes in how we handle data or comply with legal requirements. Any changes will take effect immediately upon publication on this page. We encourage you to review this policy regularly.

Contact Us

If you have questions about this policy or wish to exercise your data rights:

Email: support@grandlondon.uk

Phone: +44 7763 952201

Customer Service: Monday to Friday: 9:00 – 17:00 (GMT)

We aim to respond within 24 hours on working days.