Privacy, Cookie, and Consent Policy
Graff-City Ltd Privacy, Data Retention, and Consent Policy: 3/11/2024
Graff-City Ltd values your privacy and is committed to protecting your personal information. This Privacy, Cookie, and Consent Policy explains how we collect, use, and store your information in compliance with UK GDPR, the Privacy and Electronic Communications Regulations, and requirements from Google, Meta, TikTok, and other advertising platforms. By using our website, you agree to this policy. If you do not agree, please stop using our website.
1. Definitions and Interpretation
- ‘Account’: An account required to access certain areas and features of our site.
- ‘Cookie’: A small file stored on your device by our site, enabling site functionality, tracking, and personalised content delivery.
- ‘Our Site’: This website, www.graff-city.com.
- ‘We’, ‘Us’, ‘Our’: Graff-City Ltd, registered in England under company no. 08021989.
2. Information About Us
- Company: Graff-City Ltd
- Registered Address: Graff City, Lower Monk Street, Abergavenny, Monmouthshire, NP7 5LU, UK
- VAT Number: 924 8086 08
3. Scope of This Policy
This Privacy, Cookie, and Consent Policy applies to your use of our site and services. We are not responsible for the privacy policies of other websites linked to or from our site.
4. Data We Collect
We may collect the following types of data:
- Personal Details: Name, email, phone, address, and any additional information you provide.
- Transactional Data: Details of purchases, payment methods, and order history.
- Technical Data: IP address, browser type, device details, and activity on our site.
- Preferences and Interests: To help us tailor our services to your interests (if provided).
5. How We Use Your Data
We use your data for the following purposes:
- Account Management: Managing your account and providing access to features.
- Customer Service: Responding to inquiries, requests, and orders.
- Personalisation: Customising content, recommendations, and experiences based on your interests.
- Marketing and Remarketing: With your consent, we may send you emails, promotions, and target personalised ads through Google Ads, Meta (Facebook and Instagram) Ads, TikTok Ads, and RAEK data integration.
For more information on how Google uses your data please visit https://business.safety.google/privacy/
Legal Basis for Processing
We process your data for legitimate business interests, to fulfil contracts, or with your explicit consent.
6. Consent for Cookies and Marketing
Upon visiting our site, users in the EEA, UK, and Switzerland are informed about our use of cookies and data collection for personalised ads. Explicit consent is required for non-essential cookies. You can manage your cookie preferences or withdraw consent at any time through our cookie settings or by contacting us.
7. Data Retention Policy
We retain your data only as long as necessary to meet the purposes outlined in this policy, or as required by law (e.g., tax records). This period is generally six years. Afterward, data is securely deleted or anonymised.
8. Data Security
We implement security measures to protect your data, including encryption, firewalls, and secure servers. While we work to protect your data, internet transmission is not entirely secure. Please use caution when sharing data online.
9. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of your data.
- Correction: Update incorrect or incomplete information.
- Erasure: Request deletion of your data under certain circumstances.
- Objection: Object to processing for specific purposes, including marketing.
- Portability: Request a copy of your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at mail@graff-city.com.
10. Third-Party Data Sharing
Graff-City Ltd shares data only with trusted third parties necessary to deliver our services and enhance user experiences. All partners comply with applicable data protection laws. We do not sell your data.
Third Parties We Work With
| Third Party | Purpose | Data Shared |
|---|---|---|
| Visualsoft Limited | Website Development and Cart Recovery | Name, email address, and transactional data (as needed) |
| Salesfire | Cart Recovery Systems | Email address for abandoned cart reminders |
| PayPal | Payment Processing | Name, billing address, phone, email, payment details |
| Amazon Pay | Payment Processing | Name, billing address, phone, email, payment details |
| RAEK Data | Data-driven Remarketing | Anonymised data for remarketing |
| Google Ads | Advertising and Remarketing | Anonymised data on site interactions |
| Meta Ads (Facebook and Instagram) | Social Media Advertising and Remarketing | Anonymised data on site interactions |
| TikTok Ads | Social Media Advertising and Remarketing |
Anonymised data on site interactions |
11. International Data Transfers
If data is transferred outside the EEA, we ensure it is protected with legally binding contracts providing equivalent data protection.
12. User Instructions for Consent Management
To manage or withdraw consent:
- Contact us: Email mail@graff-city.com for assistance.
- Manage cookies: Adjust cookie preferences through our site settings.
- Platform settings: Modify ad preferences on Google, Meta, or TikTok.
13. Cookie Policy
Our website uses cookies to enhance your browsing experience, provide personalised content, and support marketing activities, such as remarketing through Google Ads, Meta Ads, TikTok Ads, and RAEK data. Cookies are small files placed on your device, helping us understand your preferences, improve our services, and tailor ads.
Types of Cookies We Use
-
Essential Cookies: Required for basic website functionality, such as secure login, shopping cart, and checkout processes.
-
Analytics Cookies: Collect anonymised data on site usage and performance, helping us understand visitor interactions and improve user experience. We use Google Analytics to analyse usage patterns on our site.
-
Marketing Cookies: Track user activity across the web to deliver targeted ads and measure ad effectiveness. Our marketing cookies support personalised advertising through platforms including Google Ads, Meta Ads, TikTok Ads, and RAEK Data integration.
Managing Cookies
You have the option to allow or disable cookies through your browser settings or by using the cookie management tool available on our website. Disabling certain cookies may affect your experience on our site. You may also control third-party cookies via the settings in your Google, Meta, and TikTok accounts.
Duration of Cookies
- Session Cookies: Expire once you close your browser.
- Persistent Cookies: Remain on your device until they expire or are deleted.
14. Automated Decision-Making and Profiling
We may use automated tools (e.g., cart recovery systems) to enhance your experience. If profiling significantly impacts you, you may request human review.
15. Changes to This Policy
We may update this policy to reflect changes in laws or services. The latest version will be posted here, and continued use of our site implies acceptance of changes.
16. Contact Us
For questions about this policy or your data, please contact us at:
- Email: mail@graff-city.com
- Phone: 01873851677
- Address: Graff City, Lower Monk Street, Abergavenny, Monmouthshire, NP7 5LU, UK