Privacy Policy

Last updated: 16/06/2025

At The Graft Co., we respect your privacy and are committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights under UK data protection laws — including GDPR.

1. What We Collect

When you place an order, sign up to emails, or contact us, we may collect:

  • Name

  • Email address

  • Shipping & billing address

  • Payment details (handled securely via trusted providers)

  • Order history

  • IP address and browser data

2. How We Use It

We use your data to:

  • Process orders and payments

  • Contact you with updates or promotions (if opted-in)

  • Improve your experience

  • Prevent fraud and protect your data

3. Sharing Your Info

We never sell your data. We only share it with trusted services needed to operate our business — e.g. Shopify, Printful, Stripe, PayPal.

4. Cookies

We use cookies to run the site and understand how it’s used. You can manage cookies in your browser settings.

5. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data ("right to be forgotten")

  • Object to or restrict certain types of processing

  • Withdraw consent for marketing communications

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To make a request or ask a question, contact us at dan@thegraftco.co.uk. We aim to respond within 30 days.

6. Data Storage & Security

Your information is stored securely through our ecommerce and fulfilment platforms (e.g. Shopify, Printful). We follow best practices to protect your data.

7. Changes to This Policy

Any updates will be posted on this page. Last updated: [Insert Today’s Date]

Contact

For any privacy-related questions, contact:
dan@thegraftco.co.uk