Privacy Policy

00

Overview

Grael ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using our website and purchasing our products, you agree to the collection and use of information as described in this policy. We will never sell your personal data to third parties.

01

Information We Collect

When you interact with Grael, we may collect the following types of information:

• Account information — name and email address provided when you create an account
• Order information — items purchased, billing and shipping address, payment details (processed securely via our payment partner)
• Contact information — messages sent through our support form
• Usage data — pages visited, browser type, device type, and IP address collected automatically via cookies
• Saved preferences — items saved to your wishlist or cart, stored locally in your browser

02

How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders, including sending order confirmations and shipping updates
• Maintain and secure your account
• Respond to customer service requests and support enquiries
• Send transactional emails related to your purchases
• Improve our website, products, and overall customer experience
• Comply with legal obligations

03

Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. Cookies help us remember your preferences and understand how you use the site.

• Essential cookies — required for the site to function, including your session and cart
• Analytics cookies — help us understand site traffic and improve our content (e.g., page views, time on site)

You can disable cookies in your browser settings at any time, though this may affect certain features of the site.

04

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your data only with trusted service providers who assist us in operating our website and fulfilling orders, under strict confidentiality agreements:

• Payment processors (to handle transactions securely)
• Shipping and logistics partners (to deliver your orders)
• Email service providers (to send order and support communications)

We may also disclose your information if required by law or to protect the rights, property, or safety of Grael, our customers, or others.

05

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are kept for a minimum of 7 years for accounting and legal compliance purposes.

Account information is retained until you request deletion. To delete your account and associated data, contact us at the address below.

06

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data ("right to be forgotten")
• Withdraw consent for marketing communications at any time
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at:

07

Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Payment information is encrypted and processed by our payment partner — we do not store card details on our servers.

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

08

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

Continued use of our website after any changes constitutes acceptance of the updated policy.

09

Contact

If you have any questions about this Privacy Policy or how we handle your data, please reach out: