Privacy, Cookie, and Consent Policy

Graff-City Ltd Privacy, Data Retention, and Consent Policy: 3/11/2024

Graff-City Ltd values your privacy and is committed to protecting your personal information. This Privacy, Cookie, and Consent Policy explains how we collect, use, and store your information in compliance with UK GDPR, the Privacy and Electronic Communications Regulations, and requirements from Google, Meta, TikTok, and other advertising platforms. By using our website, you agree to this policy. If you do not agree, please stop using our website.


1. Definitions and Interpretation

  • ‘Account’: An account required to access certain areas and features of our site.
  • ‘Cookie’: A small file stored on your device by our site, enabling site functionality, tracking, and personalised content delivery.
  • ‘Our Site’: This website, www.graff-city.com.
  • ‘We’, ‘Us’, ‘Our’: Graff-City Ltd, registered in England under company no. 08021989.

2. Information About Us

  • Company: Graff-City Ltd
  • Registered Address: Graff City, Lower Monk Street, Abergavenny, Monmouthshire, NP7 5LU, UK
  • VAT Number: 924 8086 08

3. Scope of This Policy

This Privacy, Cookie, and Consent Policy applies to your use of our site and services. We are not responsible for the privacy policies of other websites linked to or from our site.


4. Data We Collect

We may collect the following types of data:

  • Personal Details: Name, email, phone, address, and any additional information you provide.
  • Transactional Data: Details of purchases, payment methods, and order history.
  • Technical Data: IP address, browser type, device details, and activity on our site.
  • Preferences and Interests: To help us tailor our services to your interests (if provided).

5. How We Use Your Data

We use your data for the following purposes:

  • Account Management: Managing your account and providing access to features.
  • Customer Service: Responding to inquiries, requests, and orders.
  • Personalisation: Customising content, recommendations, and experiences based on your interests.
  • Marketing and Remarketing: With your consent, we may send you emails, promotions, and target personalised ads through Google Ads, Meta (Facebook and Instagram) Ads, TikTok Ads, and RAEK data integration.

For more information on how Google uses your data please visit https://business.safety.google/privacy/

Legal Basis for Processing
We process your data for legitimate business interests, to fulfil contracts, or with your explicit consent.


6. Consent for Cookies and Marketing

Upon visiting our site, users in the EEA, UK, and Switzerland are informed about our use of cookies and data collection for personalised ads. Explicit consent is required for non-essential cookies. You can manage your cookie preferences or withdraw consent at any time through our cookie settings or by contacting us.


7. Data Retention Policy

We retain your data only as long as necessary to meet the purposes outlined in this policy, or as required by law (e.g., tax records). This period is generally six years. Afterward, data is securely deleted or anonymised.


8. Data Security

We implement security measures to protect your data, including encryption, firewalls, and secure servers. While we work to protect your data, internet transmission is not entirely secure. Please use caution when sharing data online.


9. Your Rights Under UK GDPR

You have the right to:

  • Access: Request a copy of your data.
  • Correction: Update incorrect or incomplete information.
  • Erasure: Request deletion of your data under certain circumstances.
  • Objection: Object to processing for specific purposes, including marketing.
  • Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at mail@graff-city.com.


10. Third-Party Data Sharing

Graff-City Ltd shares data only with trusted third parties necessary to deliver our services and enhance user experiences. All partners comply with applicable data protection laws. We do not sell your data.

Third Parties We Work With

Third PartyPurposeData Shared
Visualsoft Limited Website Development and Cart Recovery Name, email address, and transactional data (as needed)
Salesfire Cart Recovery Systems Email address for abandoned cart reminders
PayPal Payment Processing Name, billing address, phone, email, payment details
Amazon Pay Payment Processing Name, billing address, phone, email, payment details
RAEK Data Data-driven Remarketing Anonymised data for remarketing
Google Ads Advertising and Remarketing Anonymised data on site interactions
Meta Ads (Facebook and Instagram) Social Media Advertising and Remarketing Anonymised data on site interactions
TikTok Ads Social Media Advertising and Remarketing

Anonymised data on site interactions


11. International Data Transfers

If data is transferred outside the EEA, we ensure it is protected with legally binding contracts providing equivalent data protection.


12. User Instructions for Consent Management

To manage or withdraw consent:

  • Contact us: Email mail@graff-city.com for assistance.
  • Manage cookies: Adjust cookie preferences through our site settings.
  • Platform settings: Modify ad preferences on Google, Meta, or TikTok.

13. Cookie Policy

Our website uses cookies to enhance your browsing experience, provide personalised content, and support marketing activities, such as remarketing through Google Ads, Meta Ads, TikTok Ads, and RAEK data. Cookies are small files placed on your device, helping us understand your preferences, improve our services, and tailor ads.

Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality, such as secure login, shopping cart, and checkout processes.

  • Analytics Cookies: Collect anonymised data on site usage and performance, helping us understand visitor interactions and improve user experience. We use Google Analytics to analyse usage patterns on our site.

  • Marketing Cookies: Track user activity across the web to deliver targeted ads and measure ad effectiveness. Our marketing cookies support personalised advertising through platforms including Google Ads, Meta Ads, TikTok Ads, and RAEK Data integration.

Managing Cookies

You have the option to allow or disable cookies through your browser settings or by using the cookie management tool available on our website. Disabling certain cookies may affect your experience on our site. You may also control third-party cookies via the settings in your Google, Meta, and TikTok accounts.

Duration of Cookies

  • Session Cookies: Expire once you close your browser.
  • Persistent Cookies: Remain on your device until they expire or are deleted.

14. Automated Decision-Making and Profiling

We may use automated tools (e.g., cart recovery systems) to enhance your experience. If profiling significantly impacts you, you may request human review.


15. Changes to This Policy

We may update this policy to reflect changes in laws or services. The latest version will be posted here, and continued use of our site implies acceptance of changes.


16. Contact Us

For questions about this policy or your data, please contact us at:

  • Email: mail@graff-city.com
  • Phone: 01873851677
  • Address: Graff City, Lower Monk Street, Abergavenny, Monmouthshire, NP7 5LU, UK