Privacy policy

Last updated: November 12, 2024

This Privacy Policy describes how Grailz ("we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from grailz.co (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected under this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for legal and regulatory reasons. Any updates will be posted on our Site with an updated "Last updated" date.

How We Collect and Use Your Personal Information

To provide the Services, we collect and may have collected over the past 12 months personal information about you from various sources. The information we collect and use varies depending on how you interact with us.

In addition to specific uses outlined below, we may use information to communicate with you, provide or improve the Services, comply with legal obligations, enforce our terms, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we collect depend on your interactions with our Site and Services.

Information We Collect Directly from You

When using our Services, you may provide information directly, including:

  • Contact details: Name, address, phone number, and email.

  • Order information: Name, billing and shipping address, payment confirmation, email address, and phone number.

  • Account information: Username, password, security questions, and other security details.

  • Customer support information: Details provided in communications with us, such as messages sent through our Services.

Please note: Certain features of our Services may require providing specific information. Choosing not to provide this information may limit access to certain features.

Information We Collect Automatically (Usage Data)

We may also automatically collect data about your interaction with the Services ("Usage Data"). To do this, we use cookies, pixels, and similar technologies ("Cookies"). Usage Data includes details such as device information, browser type, IP address, network connection, and your interactions with the Site.

Information We Obtain from Third Parties

We may obtain information from third parties, including:

  • Support for our Site and Services through vendors like Shopify.

  • Payment processors for processing payments (e.g., credit or debit card details, billing address).

Any third-party information is treated according to this Privacy Policy. For more details, see the "Third-Party Websites and Links" section.

How We Use Your Personal Information

Providing Products and Services

We use your information to fulfill our contract with you, including processing payments, managing orders, notifying you about your account, arranging shipping, and facilitating returns or exchanges.

Marketing and Advertising

Your information may be used for marketing and promotional purposes, including sending communications via email, text, or postal mail, and tailoring advertising on our Site and other platforms. If you reside in the EEA, the legal basis for these activities is our legitimate interest in promoting our products.

Security and Fraud Prevention

We use your information to detect, investigate, or address potential fraudulent or malicious activities. For EEA residents, the legal basis for this processing is our legitimate interest in maintaining a secure Site.

Service Improvement and Communication

Your information helps us improve our Services and provide customer support, which aligns with our legitimate interest in responding to your needs and maintaining a positive user experience.

Cookies

We use Cookies to power and improve our Site and Services, run analytics, and enhance user interactions. You can set your browser to remove or reject Cookies, but this may impact the functionality of certain features.

Our website recognizes the Global Privacy Control (GPC) signal, which allows you to opt out of certain information uses or disclosures. Visit

https://www.globalprivacycontrol.org for more details.

How We Disclose Personal Information

In specific instances, we may disclose your information to third parties for business, contract, or legal purposes. These instances include:

  • Service providers such as IT managers, payment processors, data analysts, and shipping providers.

  • Business and marketing partners for advertising purposes.

  • Affiliates within our corporate structure.

We do not disclose sensitive personal information without consent or for inferring characteristics about you.

User-Generated Content

Content you post (e.g., product reviews) is public and accessible by anyone. We are not responsible for the privacy or security of public information or how third parties may use it.

Third-Party Websites and Links

Our Site may link to third-party websites. We are not responsible for the privacy or security of information on these platforms, and our links do not imply endorsements of third-party content.

Children's Data

Our Services are not intended for children, and we do not knowingly collect data from children. If you believe a child has shared information with us, contact us for deletion.

Security and Retention of Your Information

While we implement measures to protect your data, no security system is foolproof. We recommend not sharing sensitive information via unsecured channels. Data retention depends on factors such as account status, legal obligations, or dispute resolution.

Your Rights

Depending on your location, you may have rights over your data, including:

  • Access/Know: Request access to the data we hold about you.

  • Delete: Request deletion of your data.

  • Correct: Request corrections to inaccurate data.

  • Opt-Out: Opt out of "sale" or "sharing" of data or targeted advertising.

To exercise these rights, please contact us using the information provided below.

Complaints

For complaints about data handling, please contact us. Depending on your location, you may also file a complaint with a local data protection authority.

International Users

We may transfer, store, and process your data outside your country of residence. For transfers from Europe, we rely on mechanisms like the European Commission’s Standard Contractual Clauses.

Contact

If you have questions about our privacy practices or want to exercise your rights, please email us at support@grailz.co