GDPR Privacy Policy

1. Introduction

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase on our website.

2. Data Controller

The data controller is responsible for processing your personal data. If you have any questions regarding your personal information or this policy, you may contact our support team using the contact details provided at the end of this document.

3. Personal Data We Collect

We may collect and process the following types of personal data:

Identity information (such as name)
Contact information (such as email address, shipping address, billing address, phone number)
Order and transaction details
Payment-related information (processed securely via third-party providers)
Technical data (such as IP address, browser type, device information)
Usage data (such as pages visited and browsing behavior)

4. How We Use Your Data

We use your personal data for the following purposes:

To process and fulfill your orders
To provide customer support
To manage payments and refunds
To send order confirmations and updates
To improve our website and services
To comply with legal obligations
To prevent fraud and ensure security

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract performance (to fulfill your order)
Legal obligations (such as tax and accounting requirements)
Legitimate interests (to improve services and prevent fraud)
Consent (for marketing communications, where applicable)

6. Data Sharing

We do not sell your personal data. However, we may share your data with trusted third parties, including:

Payment service providers
Shipping and logistics partners
IT and hosting service providers
Legal or regulatory authorities when required by law

All third parties are required to process your data securely and in compliance with GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, and reporting requirements.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to access your personal data
Right to correct inaccurate data
Right to request deletion (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise your rights, please contact us using the information provided below.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. International Transfers

Your personal data may be transferred and processed outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this GDPR Privacy Policy or your personal data, please contact our support team.

Customer Service Email: assist@grymodern.com
Address: 19 Scherpa St #C, Agawam, MA 01001, USA
Telephone: +1 (413) 886-2953
Business Hours: Monday to Friday, 9:00 AM – 6:00 PM (EST)