Privacy policy
Privacy Policy
Last updated: 8 October 2026
1. Who we are
This website is operated by Greyson & Reid [bedrijfsnaam], [adres], [KvK-nummer]. We are responsible for your personal data ("data controller"). If you have any questions about this policy or your data, contact us at info@greysonandreid.com.
2. What data we collect
- Contact and order details: your name, email address, phone number, delivery and billing address, and the products you order.
- Payment details: payments are processed securely by Shopify Payments and PayPal. We never see or store your full card details.
- Website usage: your IP address, device and browser type, and how you use our website, collected through cookies and similar technologies (see section 6).
- Messages: anything you send us by email or through our contact form.
- Newsletter: your email address, if you sign up.
3. Why we use your data, and on what basis
- To process and deliver your order, handle returns and answer your questions. Basis: performance of our contract with you.
- To keep records for tax and accounting. Basis: legal obligation.
- To prevent fraud and keep our website secure. Basis: our legitimate interests.
- To send you our newsletter or offers. Basis: your consent. You can unsubscribe at any time using the link in every email.
- To measure and improve our website and advertising, using analytics and advertising cookies. Basis: your consent, which you give or refuse through our cookie banner.
4. Who we share your data with
We only share your data where needed for the purposes above:
- Shopify, which hosts our website and store.
- Shopify Payments and PayPal, to process your payment.
- Our production and fulfilment partner, which receives your name, delivery address and order details to prepare and ship your order.
- Delivery and tracking providers, to deliver your parcel and send you tracking updates.
- Meta (Facebook and Instagram), through the Meta Pixel and Conversions API, to measure and improve our advertising. Only with your consent.
- Authorities, if we are legally required to.
We never sell your personal data.
5. Transfers outside the UK
Some of these providers, including our fulfilment partner, are based outside the UK [land invullen, bijvoorbeeld China of de EU]. Where your data is transferred outside the UK, we rely on appropriate safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or standard contractual clauses.
6. Cookies
We use:
- Essential cookies, needed for the website to work, such as your shopping cart. These are always on.
- Analytics and advertising cookies, such as the Meta Pixel, to understand how visitors use our site and to measure our ads. These are only used if you accept them in our cookie banner.
You can change your choice at any time through the cookie settings on our website or in your browser.
7. How long we keep your data
- Order and payment records: 6 years, to meet tax and accounting requirements.
- Customer service messages: up to 2 years after your last contact.
- Newsletter data: until you unsubscribe.
8. How we protect your data
Our website runs on Shopify, which uses SSL encryption and secure servers. Access to your data is limited to the people and providers who need it to process your order.
9. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data deleted, unless we must keep it by law;
- restrict or object to how we use your data, including for marketing;
- receive your data in a portable format;
- withdraw your consent at any time.
To use any of these rights, email info@greysonandreid.com. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
