Privacy Policy

At Gracelade ("we", "us", or "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website at www.gracelade.com (the "Site") or make a purchase from us.

By using our Site, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Site.

For any privacy-related questions, please contact us at getinfo@gracelade.com.

1. Data Controller

Gracelade is the data controller responsible for your personal data collected through this Site. We process your data in accordance with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR) where applicable, and other relevant privacy regulations.

2. Data We Collect

We collect the following categories of personal data:

2.1 Information You Provide Directly

  • Contact information: name, email address, phone number.
  • Account information: username and password (if you create an account).
  • Order & billing information: shipping address, billing address, and payment details (payment card data is processed securely by our payment providers and is not stored by us).
  • Communications: messages, enquiries, or feedback you send to us via email or contact forms.

2.2 Information Collected Automatically

  • Device & usage data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on the Site.
  • Transaction data: purchase history, order values, and product preferences.
  • Cookie & tracking data: data collected via cookies, pixels, and similar technologies (see Section 6 — Cookie Policy).

2.3 Information from Third Parties

  • Data from payment processors (e.g., Shopify Payments, PayPal) to verify and complete transactions.
  • Data from analytics providers (e.g., Google Analytics) to understand Site usage.
  • Data from marketing platforms (e.g., Klaviyo) to manage email communications.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Order fulfilment: to process, confirm, and deliver your orders, and to communicate order status and shipping updates.
  • Customer support: to respond to your enquiries, complaints, and requests.
  • Account management: to create and manage your customer account.
  • Marketing communications: to send you promotional emails, product updates, and offers — only where you have given consent or where permitted by law. You may opt out at any time.
  • Site improvement: to analyse usage patterns, improve our website, and personalise your experience.
  • Legal compliance: to comply with applicable laws, regulations, and legal obligations, including fraud prevention and tax reporting.
  • Security: to detect, investigate, and prevent fraudulent transactions and other illegal activities.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases:

  • Contract performance: processing necessary to fulfil your order or provide our services.
  • Legitimate interests: to improve our Site, prevent fraud, and conduct marketing analytics.
  • Consent: for marketing emails and non-essential cookies — you may withdraw consent at any time.
  • Legal obligation: where we are required to process data to comply with applicable law.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with trusted third parties only as necessary:

  • Service providers: including Shopify (e-commerce platform), payment processors, shipping carriers, and email marketing platforms, who process data on our behalf under strict confidentiality obligations.
  • Analytics providers: such as Google Analytics, to help us understand Site traffic and user behaviour (data is anonymised where possible).
  • Legal authorities: where required by law, court order, or to protect the rights and safety of Gracelade or others.
  • Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

All third-party service providers are required to handle your data securely and in accordance with applicable privacy laws.

6. Cookie Policy

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyse Site traffic, and support our marketing activities.

Types of Cookies We Use

  • Essential cookies: necessary for the Site to function (e.g., shopping cart, session management). These cannot be disabled.
  • Analytics cookies: help us understand how visitors interact with the Site (e.g., Google Analytics). These are only set with your consent.
  • Marketing & advertising cookies: used to deliver relevant advertisements and track campaign performance (e.g., Meta Pixel, Google Ads). These are only set with your consent.
  • Preference cookies: remember your settings and preferences to personalise your experience.

Managing Your Cookie Preferences

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie consent banner. Please note that disabling certain cookies may affect the functionality of the Site.

For more information on how to manage cookies, visit www.allaboutcookies.org.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specifically:

  • Order and transaction data is retained for a minimum of 7 years for tax and legal compliance purposes.
  • Marketing data is retained until you withdraw consent or unsubscribe.
  • Account data is retained for the duration of your account and for a reasonable period thereafter.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our Site is hosted on Shopify, which maintains industry-standard security certifications including PCI DSS compliance for payment data.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

As we operate globally, your personal data may be transferred to and processed in countries outside your country of residence, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws (e.g., Standard Contractual Clauses for EU data transfers).

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
  • Right to restriction: to request that we limit the processing of your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • CCPA rights (California residents): the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at getinfo@gracelade.com. We will respond within 30 days.

11. Children's Privacy

Our Site is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. Where changes are material, we will notify you by email or via a prominent notice on the Site. Your continued use of the Site after changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Gracelade
Email: getinfo@gracelade.com
Company Name:KINGSWELL S.R.L.
Company Registration Number: J2026039666004
VAT Number: RO54935395
Company Address: București Sectorul 3, Strada Rotunda, Nr. 1, Camera 2, Bl. Y1B, Scara 2, Etaj 9, Ap. 82, Romania
Website: www.gracelade.com