Collection of Personal Information
There are many aspects of the site which can be viewed without providing personal information, however to access some services and to make a purchase on the site, we do collect personal information.
The type of information we collect may include:
We do not save credit card or other payment information.
Purpose of collected data
Your use of our site
When you visit our site, we automatically collect information about you and your use of our site. We may register, among other things, which type of browser you use, your communication with our site, your IP address including your network location. The collection of said data has no purpose other than to gauging visitor traffic, optimise user experience and functions on our site and deliver personalised content on our site. The legal basis for this data processing is Article 6 (1f) of the EU General Data Protection Regulation.
When you subscribe to our newsletter at grittandborris.com or independently, we collect only your email address. The purpose is to provide relevant content to you as a recipient. Therefore, we also have information about what you read and click on. The legal basis for the processing is Article 6 (1) of the EU Personal Data Regulation.
Your rights and how you can control your personal information
Agents, consultants and related third parties
We, like many businesses, sometimes engage other companies to perform certain business-related functions on our behalf so that we can focus on our core business. Examples of these services include, but are not limited to, payment processing and authorization, fraud protection and credit risk reduction, shipping, marketing and promotional material distribution, website evaluation, data analysis and, where applicable, data cleansing. In connection with services those partners provide for us, we may provide or otherwise give them access to certain personal data, for example your name, address, email address and phone number for shipping your order to the correct shipping address. We employ a vetting process to assess our partners data protection practices.