Privacybeleid
GRWOOTS SHIPPING POLICY
This Privacy Policy explains how we collect, use, share and protect your personal information when you visit https://grwoots.com (the "Site"), place an order, or contact us.
Who We Are
The Site is operated by GRWOOTS LLC, doing business as GRWOOTS®, a limited liability company registered in Wyoming, United States.
Address: 30 N Gould St, Ste N1, Sheridan, WY 82801, United States Email: info@grwoots.com Phone: +1 (307) 317-4207
For customers in the United Kingdom and the European Economic Area, GRWOOTS LLC is the data controller of your personal information.
Where We Operate
GRWOOTS® ships worldwide. This policy applies to every visitor and customer, in every country, without exception.
The current list of countries available for purchase is shown in the country/region selector on our Site and at checkout. We add and remove countries from time to time; this policy applies automatically to any country available there, and to visitors browsing from anywhere else.
Sections 10 to 15 set out rights that apply in specific regions. If your country is not named in any of those sections, Section 15 applies to you — you still have the right to access, correct, and delete your personal information.
Information We Collect
Information you give us
Name, email address, phone number
Shipping and billing address
Order and subscription history
Messages you send us through our contact form or by email
Marketing preferences and newsletter sign-ups
Photographs, only if you choose to send them to us in support of a claim or review
Payment information
Card payments are processed by our payment providers (including Shopify Payments, PayPal, Apple Pay, Google Pay and Shop Pay). We do not receive or store your full card number. We receive only confirmation of payment and limited details such as the last four digits and card type.
Information collected automatically
Device and browser type, operating system, language
IP address and approximate location (country/region level)
Pages viewed, products viewed, time on site, referring website
Cookie and similar identifiers
Cookies and Tracking Technologies
We use cookies and similar technologies to run the Site, remember your cart, understand how the Site is used, and measure and improve our advertising.
We use tracking tools from the following providers:
Shopify — store operation, cart, checkout and fraud prevention
Google Analytics — site analytics
Google Ads / Google tag — advertising measurement
Meta (Facebook and Instagram) Pixel — advertising measurement
TikTok Pixel and Events API — advertising measurement
Snapchat Pixel — advertising measurement
Pinterest Tag — advertising measurement
You can manage cookies through the cookie banner on our Site and through your browser settings. If you are in the United Kingdom or the EEA, non-essential cookies are only set where you have given consent, and you may withdraw consent at any time.
You can also opt out directly with these providers:
Google Analytics: https://tools.google.com/dlpage/gaoptout
Google Ads personalisation: https://www.google.com/settings/ads/anonymous
Meta (Facebook and Instagram) ads: https://www.facebook.com/settings/?tab=ads
Digital Advertising Alliance (multiple networks): https://optout.aboutads.info
Shopify privacy information: https://www.shopify.com/legal/privacy
How We Use Your Information — and Our Legal Bases
| Purpose | Legal basis (UK/EU) |
|---|---|
| Process and deliver your order, manage returns and refunds | Performance of a contract |
| Manage subscriptions and recurring deliveries | Performance of a contract |
| Provide customer support | Performance of a contract / legitimate interests |
| Send order and shipping notifications | Performance of a contract |
| Send marketing emails and newsletters | Consent (you may unsubscribe at any time) |
| Advertising, retargeting and measurement | Consent (via cookie banner) |
| Site analytics and improving our products | Legitimate interests / consent where required |
| Fraud prevention and site security | Legitimate interests / legal obligation |
| Accounting, tax and record-keeping | Legal obligation |
Who We Share Your Information With
We do not sell your personal information. We share it only with parties who help us run the business:
Shopify Inc. — e-commerce platform hosting our Site and checkout
Payment providers — Shopify Payments, PayPal and other providers you choose at checkout
Shipping, fulfilment and logistics partners — to pick, pack, ship and deliver your order, and to provide tracking. The specific carrier depends on your destination country.
Customs and border authorities — where required to clear your parcel for import
Email and customer-service providers — to send order updates and respond to your messages
Analytics and advertising providers — as listed in Section 4
Professional advisers, accountants and auditors
Law enforcement or regulators — where we are legally required to do so
International Transfers of Your Information
We are based in the United States, and our service providers and shipping partners operate in several countries, including outside the United Kingdom and the EEA.
Where we transfer personal information out of the United Kingdom or the EEA, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.
Where we transfer personal information out of any other country with a data-export requirement, we rely on the transfer mechanism recognised under that country's law.
You may request a copy of the safeguards we use by emailing info@grwoots.com.
How Long We Keep Your Information
Order and transaction records: retained for as long as required by tax and accounting law (generally up to 7 years)
Customer account and subscription data: retained while your account is active, then deleted or anonymised
Marketing contact data: retained until you unsubscribe or ask us to delete it
Support correspondence: generally retained for up to 3 years
Cookie and analytics data: retained according to each provider's retention settings
Security
We use technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls, and payment processing by PCI-DSS compliant providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights — United Kingdom and European Union
If you are in the United Kingdom or the EEA, you have the right to:
Access the personal information we hold about you
Rectify information that is inaccurate or incomplete
Erase your information ("right to be forgotten")
Restrict how we process your information
Object to processing based on our legitimate interests, and to direct marketing at any time
Data portability — receive your information in a machine-readable format
Withdraw consent at any time, without affecting processing carried out before withdrawal
Not be subject to decisions based solely on automated processing that have legal or similarly significant effects
To exercise any of these rights, email info@grwoots.com. We will respond within one month. We do not charge a fee for these requests.
Right to complain: you also have the right to lodge a complaint with your local data protection authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). In the EEA, you may complain to the supervisory authority in your country of residence.
Your Rights — United States
Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware and others), you may have the right to:
Know what personal information we collect, use and disclose
Request a copy of your personal information
Request deletion of your personal information
Correct inaccurate personal information
Opt out of the sale or sharing of personal information, and of targeted advertising
Not be discriminated against for exercising these rights
We do not sell personal information for money. However, the use of advertising cookies described in Section 4 may be considered "sharing" or "targeted advertising" under some state laws. You can opt out through our cookie banner or by emailing info@grwoots.com.
To make a request, email info@grwoots.com with the subject line "Privacy Request". We may need to verify your identity before we can act.
Your Rights — Switzerland and Other European Countries
If you are in Switzerland, you have equivalent rights under the Swiss Federal Act on Data Protection (FADP), including access, rectification, erasure and objection. Contact us at info@grwoots.com, and you may also contact the Federal Data Protection and Information Commissioner (FDPIC).
If you are in the United Kingdom, Norway, Iceland, Liechtenstein or an EEA country, Section 10 applies to you.
Your Rights — Canada, Australia and New Zealand
If you are in Canada, you have rights under PIPEDA (and provincial equivalents) to access and correct your personal information, and may complain to the Office of the Privacy Commissioner of Canada.
If you are in Australia, you have rights under the Privacy Act 1988 to access and correct your personal information, and may complain to the Office of the Australian Information Commissioner (OAIC).
If you are in New Zealand, you have rights under the Privacy Act 2020 and may complain to the Office of the Privacy Commissioner.
Contact us at info@grwoots.com to exercise these rights.
Your Rights — Middle East, Asia, Africa and Latin America
If you are in a country with a national data protection law — including but not limited to the United Arab Emirates, Saudi Arabia, Qatar, Kuwait, Oman, Bahrain, Israel, Türkiye, India, Japan, South Korea, Singapore, Thailand, Indonesia, South Africa, Nigeria, Kenya, Brazil, Mexico, Argentina and Chile — you have rights under that law, which generally include the right to access, correct, and request deletion of your personal information, and to object to direct marketing.
Contact us at info@grwoots.com and we will honour your request in line with your national law.
Your Rights — Everywhere Else
Wherever you live, and whether or not your country appears above, you may ask us to:
Tell you what personal information we hold about you
Correct it if it is wrong
Delete it
Stop sending you marketing
Email info@grwoots.com and we will act on your request. We apply this as a matter of policy, not only where a law requires it.
Marketing Communications
You can unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by emailing info@grwoots.com. You will still receive transactional messages about orders you have placed, such as order confirmations and shipping notifications.
Children's Privacy
Our Site and products are not directed at children. We do not knowingly collect personal information from anyone under 16, and our products are intended for adults aged 18 and over. If you believe a child has provided us with personal information, contact us at info@grwoots.com and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the bottom of this page. If the changes are significant, we will notify you by email or by a notice on the Site.
Contact Us
For any questions about this Privacy Policy or your personal information, please contact us:
GRWOOTS LLC (dba GRWOOTS®) 30 N Gould St, Ste N1 Sheridan, WY 82801, United States
Email: info@grwoots.com Phone: +1 (307) 317-4207 Web: https://grwoots.com
Last updated: August 6, 2026