Last updated: June 2025
At GRACÉA, we take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it. GRACÉA is a trading brand of ClydeWise Ltd., a company registered in Scotland (Company No. SC851801), with registered address in Glasgow, Scotland.
If you have any questions about this policy or how we handle your data, you can reach us at hello@gracea.co.uk at any time.
When you visit our website or place an order, we collect certain information about you. This includes your name, email address, delivery address, billing address, phone number, and payment information. Payment details are processed securely through our payment provider and are never stored on our own servers.
We also collect information automatically when you browse our site. This includes your IP address, browser type, the pages you visit, how long you spend on each page, and the device you are using. This data is collected through cookies and similar tracking technologies, which are explained in more detail in our Cookie Policy.
If you contact us by email or through any contact form, we will keep a record of that correspondence.
We use your personal information to process and fulfil your orders, send order confirmations and shipping updates, respond to your questions or requests, and handle any returns or refund requests you raise with us.
With your consent, we may also send you emails about new products, promotions, and updates from GRACÉA. You can unsubscribe from these at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.
We use browsing data to understand how customers use our website, improve the shopping experience, and identify any technical issues.
We process your personal data on the following legal grounds. For order fulfilment, we process your data because it is necessary to perform the contract between us. For marketing communications, we rely on your consent. For improving our website and services, we rely on our legitimate interests as a business, provided those interests do not override your rights.
We do not sell your personal data to third parties. We share your information only where necessary to run our business. This includes our payment processor, our shipping partners (Royal Mail and DPD), our website platform provider (Shopify), and our email marketing platform.
All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.
We may also disclose your information if required to do so by law or in response to a valid request from a public authority.
We keep your personal data for as long as necessary to fulfil the purposes described in this policy. Order records are kept for up to 7 years to comply with HMRC accounting requirements. If you request deletion of your account or data, we will action this promptly, subject to any legal retention obligations.
Under UK GDPR, you have the following rights regarding your personal data. You have the right to access the information we hold about you. You have the right to correct any inaccurate information. You have the right to request deletion of your data in certain circumstances. You have the right to object to or restrict certain types of processing. You have the right to data portability, meaning you can request a copy of your data in a structured format. You have the right to withdraw consent at any time where we rely on consent as our legal basis.
To exercise any of these rights, please contact us at hello@gracea.co.uk. We will respond within 30 days. If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Our website may contain links to third party websites. We are not responsible for the privacy practices of those sites and we encourage you to read their privacy policies before providing any personal information.
We may update this policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.