At Grip & Flow, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR).

 

1. What We Collect
We may collect and process the following data:
- Name, email address, phone number, shipping and billing addresses
- Payment information (handled securely by third-party processors)
- Order history and customer service interactions
- Website usage data via cookies and analytics tools
- Social media handles (if you engage with us through social platforms)

2. Legal Basis for Processing Your Data
Under GDPR, we must have a lawful basis to process your personal data. We rely on the following:
- Contract: To fulfil your orders and provide customer service
- Consent: For sending you marketing communications (which you can opt out of at any time)
- Legitimate Interest: To improve our products, services, and website performance

 

3. How We Use Your Information
We use your information to:
- Process and deliver your orders
- Communicate with you about your purchase or inquiries
- Send marketing emails (if you've opted in)
- Improve our website and customer experience
- Prevent fraud and ensure website security

4. Marketing and Communications
We only send you marketing emails if you’ve permitted us. You can unsubscribe at any time using the link in our emails or by contacting us at hello@gripandflow.co.uk.

 

5. Cookies
We use cookies to provide a better browsing experience, analyse site traffic, and personalise
content. You can manage or disable cookies via your browser settings. A cookie banner is
displayed on our website to capture your consent where required.

 

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including

satisfying legal, accounting, or reporting requirements. After this period, your data will be securely deleted.

 

7. Third-Party Services
We share your data only with third-party providers necessary to run our business, such as:
- Payment processors (e.g., Stripe, PayPal)
- Shipping carriers (e.g., Royal Mail)
- Marketing platforms (e.g., Mailchimp, Klaviyo)
These providers are GDPR-compliant and process your data securely.

 

8. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent for marketing at any time
To exercise any of these rights, contact us at hello@gripandflow.co.uk

 

9. Data Security
We implement appropriate technical and organisational measures to keep your personal data secure.

This includes secure third-party platforms and encrypted data transfers where applicable.

10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.

11. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact us:
Grip & Flow
Email: hello@gripandflow.co.uk
Website: www.gripandflow.co.uk