Privacy Policy

Last updated: 5 June 2025

This privacy policy applies to all services of Gracewood London, reachable via support@gracewoodlondon.com and located at Oeverloper 9, 8532 BG Lemmer, the Netherlands. We respect the privacy of our customers and handle the personal information you provide to us confidentially and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Data We Collect

We collect personal data that you provide to us when placing an order, creating an account, or contacting our customer service, including:

  • Full name
  • Delivery and billing details
  • Email address
  • Phone number
  • Payment details (processed via our payment providers, not stored on our servers)
  • IP address and device/browser data
  • Order and transaction history
  • Data about your activity and behaviour on our website (via cookies)

2. Purposes of Processing

We use your personal data for the following purposes:

  • Processing, dispatching, and invoicing your orders.
  • Providing customer service and support.
  • Sending order updates, tracking information, and relevant communications.
  • Improving our services, website, and product range.
  • Preventing and detecting fraud and misuse.
  • Sending marketing communications, only where you have given your consent.

3. Legal Bases

We process your data on the basis of the following legal grounds under the UK GDPR:

  • Performance of a contract — to fulfil your order.
  • Consent — for example, for marketing communications.
  • Legal obligation — such as tax record-keeping requirements.
  • Legitimate interests — such as fraud prevention and improving our services.

4. Sharing Data with Third Parties

Your data is only shared with third parties to the extent necessary for our services, including:

  • Our payment providers: [Payment Providers]
  • Our shipping and delivery partners: [Shipping Services]
  • Our supplier(s) for the processing and dispatch of your order.
  • Providers of analytics and marketing services (where applicable and in accordance with your cookie preferences).

Where required, data processing agreements are in place with all these parties. We never sell your data to third parties.

As part of our fulfilment process, some orders are shipped directly from a supplier outside the UK (China). This means your data may be transferred to a country outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as the use of the International Data Transfer Agreement (IDTA) or equivalent protections approved by the UK Information Commissioner's Office (ICO).

5. Retention Period

We do not retain your data longer than necessary for the purposes for which it was collected, or for as long as required by law. For example, financial and transaction records are retained for 6 years in accordance with HMRC requirements.

6. Cookies

Our website uses cookies to improve functionality, analyse visitor behaviour, and support marketing. Please refer to our separate Cookie Policy at gracewoodlondon.com for more information. You can adjust your preferences at any time via the cookie banner or your browser settings.

7. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. All payments are processed via a secure SSL connection.

8. Your Rights

Under the UK GDPR, you have the following rights:

  • The right to access your personal data.
  • The right to rectify inaccurate or incomplete data.
  • The right to erasure ('right to be forgotten').
  • The right to restrict processing.
  • The right to data portability.
  • The right to object to processing based on legitimate interests.
  • The right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at support@gracewoodlondon.com. We will respond to your request within one calendar month.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO), reachable at www.ico.org.uk or by calling 0303 123 1113.

9. Contact

Gracewood London — Oeverloper 9, 8532 BG Lemmer, the Netherlands — support@gracewoodlondon.com