This privacy policy explains how we process your personal data when you use our website (https://www.grandmatter.com) (“Website”) and/or our online store (http://grandoriginals.com) (“Online Store”) (collectively the “Websites”) in order to provide you with our online services including our online store for buying products (“in order to provide you with our online marketplace for buying and selling products (“Services”). If you have any questions or comments about this privacy policy, please let us know by email to hello@grandmatter.com.

You can also contact us by email to hello@grandmatter.com if you would like to object to any processing of your personal data.

The Services are operated by Grand Matter Ltd, a company registered in England and Wales under Company Number 10674402 (“we”, “us", “our"). We are the “data controller” (i.e. the company which decides why and how your personal data should be processed) under data protection law.

1. How we use your personal data

Providing the Services to you
We will only use your personal data when the law allows us to. We may collect, process and retain personal information about you such as your name, address, email address and telephone number in order to enter into and/or perform the contract with you to provide you with the Services, such as:

• registering you with an account on our Websites;
• facilitating the buying and selling process on our Online Store;
• processing online payments using a third party provider;
• notifying you about any changes to our terms or Services; and
• managing our relationship with you.
  

Your enquiries
If you contact us about our Services, the emails you send may include information about you, such as your name, address, email address, telephone number, and your enquiry. We use this information to respond to your enquiries.  

• In line with the legitimate interest we have in promoting our business and offering customer services, we will process your enquiries to provide you with information about our marketplace.
• This might include replying to your enquiry, or sending you our newsletter if you ask to be added to our mailing list.
• We may also process enquiries to take steps you ask of us with a view to entering into and/or performing a contract with you to provide you with our services. 
• You are under no obligation to provide us with any details, but if you don’t provide all relevant information, we may not be able to help.
• We may also collect information that you provide to us voluntarily when enquiring about our Services, for example, when you communicate with us via emails. This information is only ever processed to respond to your enquiry or with your explicit consent.  

Payment Information 
In order for you to purchase Products from our Online Store, we use third party payment providers, including Shop Pay, Amazon Pay, Google Pay and PayPal, to collect, store and process payment information from you, including your name, email address, credit or debit card number and bank account details.

Our servers will not collect or have access to your sensitive payment details.

Marketing
When you provide your consent, we may process your contact information that you provide to us (either via our Websites or via email) for the purposes of marketing with you in accordance with our legitimate interests to send you information about our Services, and to keep you updated with information on news, and events. 

We may use third party providers, such as Mail Chimp, to process these marketing emails. 

If you would like to be removed from this mailing list, please contact us at hello@grandmatter.com or click the “unsubscribe” link provided at the bottom of each marketing email. Where you opt out of receiving these marketing emails, this will not apply to personal data provided to us as a result of a product purchase other transaction.

How you use our website (Analytics)
Our Websites uses cookies and other mechanisms to collect analytical information, such as your internet protocol (IP) address, to help analyse how visitors use the site and to compile statistical reports on activity on the Websites.  

• We process this information to understand how visitors use our Websites and to compile statistical reports regarding that activity (for example, your IP address is used to approximate the country from which you access our Websites, and we aggregate this information together so we know, for example, where most our visitors come from).
• This processing is necessary for us to pursue our legitimate interests in improving our Websites, and providing a better service and source of information to visitors.
• This information is not used to develop a personal profile of you.  All such information is aggregated and stored anonymously.

All content you submit to us
If you send us objectionable content or otherwise behave in a disruptive manner when using our Services, we may process personal data included in your messages to respond to and stop such behaviour.

• We only process personal data in this way for the legitimate interests of ensuring that use of our Service is lawful, does not disrupt, does not harass our staff or other individuals, and to enforce our legal rights and to comply with our legal obligations.
• Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal information to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.
• Where we process personal data in this way, we will hold that personal information on our systems for as long as is reasonably necessary to achieve these objectives.

2. Do we share your personal information with anyone else?

We keep your information confidential. Whenever we transfer your personal data outside of the European Economic Area (EEA) we ensure that we have appropriate measures in place as a safeguard for this transaction (see point 4 below).  We may also disclose customer information to personnel, suppliers, third party service providers (i.e. payment processors and web services suppliers) or subcontractors insofar as it is reasonably necessary for the purposes set out in this privacy policy, provided that they do not make independent use of the information, and have agreed to adhere to the rules set out in this privacy statement.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

If we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, the information we hold may be included as part of that sale, in which case you will be notified via email and/or a prominent notice on the Websites or mobile app of any changes in ownership or use of your information, as any choices you may have regarding that information.

Except as provided above, we will not provide your information to third parties.

3. Your rights in relation to personal data which we process relating to you

You have the following rights over the way we process personal data relating to you.  We aim to comply without undue delay, and within one month at the latest:

• to ask for a copy of data we are processing about you and have inaccuracies corrected;
• to ask us to restrict, stop processing, or to delete your personal data; 
• to request a machine readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and 
• to make a complaint to a data protection regulator. 

Please send your requests to hello@grandmatter.com.

4. International data transfers
We may share your personal data within Shopify. This may involve transferring your data outside the European Economic Area (EEA). Where we transfer your data outside of the EEA, we have agreements in place with the relevant parties which include either (i) standard data protection clauses adopted by the relevant data protection regulator and approved by the European Commission or (ii) standard data protection clauses adopted by the European Commission, to ensure that appropriate safeguards are used to protect your personal data. Alternatively, we may put in place other appropriate safeguards. If you require more information about these safeguards, you can contact us at hello@grandmatter.com.

5. Children

We do not use the Services to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at hello@grandmatter.com.  We will delete such information within a reasonable time.

6. Security

We will take all reasonable technical and organisational precautions to prevent the loss misuse or alteration of your personal information.

7. Changes

This policy may be updated from time to time. We will notify you of any changes by posting the new policy here and, where feasible, by letting you know by email.

8. Data Retention 

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. 

hello@grandmatter.com