Privacy Policy

Last updated: July 2026

GRPD ('we', 'us', 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data when you visit wearegrpd.com or make a purchase from us.

1. Information we collect

• Name and email address
• Billing and delivery address
• Payment information (processed securely by our payment provider; we do not store card details)
• Order history and preferences
• Device and browsing data (via cookies)
• Any information you provide when contacting us

2. How we use your information

• Process and fulfil your orders
• Send order confirmations, shipping updates and tracking information
• Respond to your enquiries
• Send marketing emails (only with your consent; you can unsubscribe at any time)
• Improve our website and customer experience
• Comply with legal obligations

3. Legal basis for processing

• Contractual necessity: to fulfil orders you have placed with us
• Legitimate interests: to improve our services and communicate with customers
• Consent: for marketing communications (you may withdraw this at any time)
• Legal obligation: where required by law

4. Sharing your information

We do not sell or rent your personal data to third parties. We may share your data with:

• Delivery and fulfilment partners (to ship your order)
• Payment processors (to handle transactions securely)
• Email marketing platforms (only if you have opted in)
• Analytics providers (to help us understand how our website is used)

5. Cookies

Our website uses cookies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. See our Cookie Policy for more detail.

6. Data retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Customer order data is typically retained for 7 years in accordance with applicable tax and accounting law.

7. Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain types of processing
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at info@wearegrpd.com.

8. Security

Our website uses SSL encryption and we work with payment providers who are PCI DSS compliant. We do not store payment card details on our systems.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

10. Contact

For any questions about this Privacy Policy, please contact us at info@wearegrpd.com.