Privacy Policy

Last updated: 21 September 2026

Grafton & Rowe operates this store and website, including all associated information, content, features, tools, products and services ("Services"), to provide you with a personalised shopping experience. We use the Shopify platform ("Powered by Shopify") to deliver these Services.

1. Personal Data

Depending on how you use our Services, we may process the following categories of data: contact details (name, address, phone, email), payment information, account data, transaction data, communication data, and device/usage data.

2. Sources of Data

We collect data directly from you (registration, order, contact), automatically (via cookies), and from service providers or third-party partners.

3. Purposes of Processing

We use your data to fulfil orders, process payments, manage your account, personalise your experience, market our products, ensure security and prevent fraud, communicate with you, and comply with legal obligations.

4. Disclosure of Data

We may disclose data to Shopify and service providers (payment processors, couriers, IT providers), marketing partners, at your request or with your consent, or as required by law.

5. Our Relationship with Shopify

Our Services are powered by Shopify, which processes data to provide and improve its platform. More information: https://privacy.shopify.com

6. Third-Party Sites

Our Services may contain links to external sites. We are not responsible for their content or privacy practices.

7. Children's Data

Our Services are not directed at children. We do not knowingly collect data from minors.

8. Data Security and Retention

We take reasonable security measures but cannot guarantee absolute security. Retention periods depend on the purpose of processing and legal obligations.

9. Your Rights

Depending on applicable law, you have the right to access, delete, rectify, port, object to and restrict processing of your data, as well as the right to withdraw consent.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, including the Irish Data Protection Commission.

11. International Data Transfers

Data may be transferred outside the EU/EEA. In such cases, we ensure an adequate level of protection through appropriate safeguards (e.g. standard contractual clauses).

12. Changes

We reserve the right to update this policy at any time. The current version will always be published on this site.

13. Contact

For privacy-related questions or to exercise your rights, please contact us:

Grafton & Rowe
Email: graftonandrowe@gmail.com
Address: Dokter Kniplaan 5, 3151 MA Hoek van Holland, Netherlands