Privacy Policy

Who we are

We Are Grá operates this website and online shop. If you have questions about this policy, contact us at hello@wearegra.com.

Information we collect

We may collect:

• Contact details you provide when ordering, subscribing, or contacting us (name, email, address, phone).
• Order and payment information processed securely through Stripe. We do not store full card details on our servers.
• Account details if you create a customer account.
• An optional gift message and recipient delivery details so we can prepare and deliver your order.
• Technical data such as browser type, device, and pages visited when you use our site.

How we use your information

We use your information to:

• Process orders, deliver products, and provide customer support.
• Send transactional emails such as order confirmations and shipping updates.
• Send marketing emails when you have opted in. You can unsubscribe at any time.
• Improve our website, products, and services.
• Meet legal, tax, and accounting obligations.

Legal basis

Where applicable under GDPR, we process personal data to perform a contract (fulfilling your order), with your consent (newsletter and optional marketing), and for our legitimate interests in running and improving the business, balanced against your rights.

Sharing your information

We share data only with service providers who help us operate the shop, including Stripe for payments, Google Firebase for accounts and order records, Resend for email, Bunny.net for media delivery, and the carrier used for your order. Each provider receives the information needed for its role; some providers also have their own legal obligations.

Retention

We keep order and account records for as long as needed to provide services and meet legal requirements, then delete or anonymise them where possible.

Your rights

You may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing. Contact us at hello@wearegra.com. You can withdraw marketing consent at any time using the unsubscribe link in a marketing email. This does not affect earlier lawful processing. You may also lodge a complaint with the Irish Data Protection Commission or your local supervisory authority.

Cookies

We use essential cookies for site functionality and, where enabled, analytics cookies to understand how visitors use the site. You can change your optional cookie choices below.