Privacy Policy

Privacy Policy

Last Updated: 01/03/2025

Showstock Limited, trading as Grassias ("we", "us", "our"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal data in compliance with the UK GDPR and Data Protection Act 2018.

1. Who We Are

  • Company Name: Showstock Limited

  • Trading As: Grassias

  • Website: www.grassias.co.uk

  • Registered Address: Unit 1, Royd Business Park, Dyehouse Lane, Brighouse, HD6 1LL, United Kingdom

  • Customer Support Email: info@grassias.co.uk

  • Phone Number: TBC

2. What Data We Collect & Why

We collect and process the following types of personal data to provide our services:

Personal Information (Provided by You)

  • Name, Email, Phone Number – For order confirmation, customer support, and marketing (if opted in).

  • Billing & Shipping Address – To process and deliver your orders.

  • Payment Details – Securely handled by our payment processors (Shopify Payments, PayPal).

  • Order History – To provide customer support and improve our services.

  • Marketing Preferences – If you opt into our newsletters or promotional emails.

Automatically Collected Data (Cookies & Tracking)

  • Device & Browser Information – To enhance user experience and site performance.

  • IP Address – For fraud prevention and security.

  • Website Usage Data – Collected via Google Analytics & Facebook Pixel to improve our site.

We do not knowingly collect personal data from individuals under the age of 18.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To fulfill your order – Processing transactions, shipping orders, and handling returns.

  • To provide customer support – Responding to inquiries and resolving issues.

  • To send marketing communications – Only if you have given consent.

  • To improve website performance – Using analytics to enhance user experience.

  • To prevent fraud and ensure security – Monitoring transactions for fraud prevention.

4. How We Protect Your Data

We take appropriate security measures to protect your personal data:

  • Encryption – Your payment details are processed securely through Shopify Payments & PayPal.

  • Restricted Access – Only authorized personnel can access sensitive data.

  • Data Retention – Order details & invoices are kept for 6 years (for tax compliance), while marketing data is stored until you opt out.

5. Who We Share Your Data With

We do not sell your personal data. However, we may share data with:

  • Payment Processors – Shopify Payments, PayPal (for secure payment transactions).

  • Couriers & Delivery Services – To ensure order fulfillment.

  • Marketing Platforms – If you opt into promotional emails (e.g., Mailchimp, Klaviyo).

  • Analytics & Advertising Tools – Google Analytics, Facebook Pixel (for site tracking and ads).

We ensure that any third-party providers comply with UK GDPR and protect your data.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to Access – Request a copy of your personal data.

  • Right to Correction – Update inaccurate or incomplete data.

  • Right to Deletion – Request deletion of your data (except where legally required to retain it).

  • Right to Withdraw Consent – Opt out of marketing emails at any time.

  • Right to Data Portability – Request your data in a structured format.

  • Right to Restrict Processing – Limit how we use your data.

To exercise any of these rights, please contact us at info@grassias.co.uk.

7. Cookies & Tracking Technologies

We use cookies to improve website functionality, analytics, and marketing.

Types of Cookies We Use:

  • Essential Cookies – Required for site functionality (e.g., checkout process).

  • Analytics Cookies – Track site usage (e.g., Google Analytics).

  • Marketing Cookies – Used for targeted advertising (e.g., Facebook Pixel).

You can manage cookie preferences via the cookie consent banner or through your browser settings.

8. International Data Transfers

Some of our third-party service providers (e.g., Google, Facebook, Mailchimp) may store data outside the UK. We ensure all international transfers comply with UK GDPR through:

  • Standard Contractual Clauses (SCCs)

  • Privacy Shield (where applicable)

9. Updates to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with a new last updated date.

10. Contact Us

For any privacy-related questions or data requests, please contact us:

  • Email: info@grassias.co.uk

  • Address: Unit 1, Royd Business Park, Dyehouse Lane, Brighouse, HD6 1LL, United Kingdom

By using our website, you agree to this Privacy Policy.