Privacy policy

PRIVACY POLICY

Last updated: July 18, 2026

Grufo operates this online store and website at grufo.store, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

Grufo is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, process, and disclose your personal information when you visit, use, make a purchase through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will control with respect to the collection, processing, use, and disclosure of your personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy and the collection, use, processing, and disclosure of your information as described below.

PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another individual.

Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an identifiable individual.

Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact information, including your name, email address, telephone number, billing address, and shipping address.

  • Financial and payment information, including payment card information, payment method, transaction details, payment confirmation, and other payment-related information. Payment information may be processed directly by Shopify or third-party payment providers.

  • Account information, including your username, password, account preferences, security information, and account settings.

  • Transaction information, including the products you view, add to your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as information about your previous transactions.

  • Communications with us, including information you provide when contacting customer support, submitting a question, requesting a return, or communicating with us regarding an order.

  • Device and technical information, including information about your device, browser, operating system, network connection, IP address, and other online identifiers.

  • Usage information, including information about how and when you access, browse, navigate, or interact with the Services.

SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

  • Directly from you when you visit or use the Services, create an account, place an order, communicate with us, or otherwise provide us with personal information.

  • Automatically through the Services, including through your device, browser, cookies, pixels, and similar tracking technologies.

  • From Shopify, payment processors, shipping providers, fulfillment providers, customer service providers, analytics providers, and other service providers that process information on our behalf.

  • From advertising, marketing, business, or technology partners.

  • From social media platforms or other third parties when you choose to interact with Grufo through those services.

HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you interact with Grufo and the Services, we may use your personal information for the following purposes:

Providing and Improving the Services

We use your personal information to provide the Services and perform our obligations to you, including to:

  • Process and confirm your purchases.

  • Process payments.

  • Prepare, fulfill, and ship your orders.

  • Provide order and shipping updates.

  • Manage your account.

  • Remember your preferences.

  • Process returns, exchanges, cancellations, or refunds.

  • Respond to customer service inquiries.

  • Enable customer reviews.

  • Improve our website, products, services, and customer experience.

  • Recommend products or content that may be relevant to you.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including to:

  • Send promotional communications by email, text message, or other channels when permitted by applicable law.

  • Display advertisements for Grufo products on our website or third-party platforms.

  • Measure the effectiveness of advertising campaigns.

  • Personalize advertising based on products you viewed, added to your cart, or purchased.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in those communications.

Security and Fraud Prevention

We may use personal information to:

  • Authenticate accounts and transactions.

  • Protect the security of our website and Services.

  • Detect, prevent, investigate, or take action regarding suspected fraudulent, illegal, unsafe, or malicious activity.

  • Protect Grufo, our customers, Shopify, our service providers, and other individuals.

You are responsible for maintaining the confidentiality of your account credentials. You should not share your password or account access information with other people.

Communicating With You

We use your personal information to:

  • Provide customer support.

  • Respond to questions and requests.

  • Communicate with you about orders, payments, shipping, returns, refunds, and account activity.

  • Provide important notices regarding the Services.

  • Maintain our relationship with you.

Legal and Regulatory Purposes

We may use personal information to:

  • Comply with applicable laws and regulations.

  • Respond to valid legal requests, court orders, subpoenas, warrants, or requests from government authorities.

  • Investigate or participate in legal proceedings.

  • Enforce our Terms of Service and other policies.

  • Protect or defend our legal rights and the rights of our customers or other individuals.

HOW WE DISCLOSE PERSONAL INFORMATION

In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and subject to this Privacy Policy.

These circumstances may include disclosure:

  • To Shopify, payment processors, shipping providers, fulfillment partners, technology providers, cloud hosting providers, analytics providers, customer support platforms, and other vendors that perform services on our behalf.

  • To advertising and marketing partners that help us display, personalize, measure, or improve advertisements and promotional campaigns.

  • When you request, direct, authorize, or consent to the disclosure of your information, such as when information must be provided to a delivery service to ship your order.

  • Through social media widgets, login integrations, payment integrations, or other third-party features you choose to use.

  • To our affiliates, related companies, contractors, or members of our corporate group, where applicable.

  • In connection with a merger, acquisition, financing, reorganization, bankruptcy, transfer of assets, or another business transaction.

  • When required to comply with applicable laws, legal obligations, court orders, subpoenas, search warrants, or government requests.

  • When necessary to enforce our policies or protect Grufo, the Services, our customers, or other individuals.

RELATIONSHIP WITH SHOPIFY

The Services are hosted and supported by Shopify.

Shopify collects and processes personal information regarding your access to and use of the Services in order to operate, secure, improve, and provide Shopify’s services to Grufo and our customers.

Information submitted through the Services may be transmitted to Shopify and other service providers located in countries different from the country where you reside.

Grufo may use Shopify features that combine information obtained from your interactions with our store, Shopify, and other merchants to help protect, operate, improve, and grow our business.

In certain circumstances, Shopify may be responsible for processing personal information and responding to requests regarding its use of that information.

To learn more about how Shopify processes personal information and the rights available to you, visit:

https://privacy.shopify.com/en

COOKIES AND SIMILAR TECHNOLOGIES

The Services may use cookies, pixels, local storage, and similar technologies to:

  • Operate and secure the website.

  • Remember your preferences.

  • Maintain your shopping cart.

  • Understand how customers use the Services.

  • Measure website traffic and performance.

  • Personalize content and advertising.

  • Detect and prevent fraud.

You may manage certain cookie preferences through your browser or through any privacy or cookie controls made available on the Services.

Disabling cookies may affect the availability or functionality of certain parts of the website.

THIRD-PARTY WEBSITES AND LINKS

The Services may contain links to websites, applications, social media platforms, or other online services operated by third parties.

When you access a third-party website or service, its own privacy policy, security practices, and terms will apply.

Grufo does not control and is not responsible for the privacy, security, accuracy, availability, or practices of third-party websites or services.

Information shared through public or semi-public platforms, including social media platforms, may be visible to other users and may be used by third parties without our control.

The inclusion of a link to a third-party website does not necessarily mean that Grufo endorses or is affiliated with that website, its content, or its operator.

CHILDREN’S DATA

The Services are not intended to be used independently by children under the age of majority in their jurisdiction.

We do not knowingly collect personal information directly from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us at hellogrufo@gmail.com to request its deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share, as those terms are defined under applicable law, personal information belonging to individuals under 16 years of age.

SECURITY AND RETENTION OF YOUR INFORMATION

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

However, no security system or method of transmitting information over the internet is completely secure. We cannot guarantee absolute or perfect security.

You should avoid sending confidential or sensitive information through unsecured communication channels.

We retain personal information for as long as reasonably necessary to:

  • Provide the Services.

  • Fulfill and document transactions.

  • Maintain customer accounts.

  • Provide customer support.

  • Comply with legal, tax, accounting, and regulatory obligations.

  • Resolve disputes.

  • Prevent fraud.

  • Enforce our agreements and policies.

The specific retention period may vary depending on the type of information, the nature of our relationship with you, and applicable legal requirements.

YOUR RIGHTS AND CHOICES

Depending on where you reside, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may only apply under certain circumstances. We may decline or limit a request when permitted by applicable law.

Right to Access or Know

You may have the right to request access to personal information we maintain about you and information regarding how we use or disclose it.

Right to Delete

You may have the right to request that we delete certain personal information we maintain about you, subject to legal exceptions.

Right to Correct

You may have the right to request that we correct inaccurate or incomplete personal information.

Right to Data Portability

You may have the right to receive a copy of certain personal information in a structured and portable format or request that it be transferred to another organization.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you reside, you may have the right to opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising.

Where available, you may exercise this right through the privacy controls provided on the Services or by contacting us.

When required by applicable law, we may recognize the Global Privacy Control preference signal sent by your browser or device.

To learn more about Global Privacy Control, visit:

https://globalprivacycontrol.org/

Other than legally recognized preference signals, the Services may not respond to other “Do Not Track” signals.

Communication Preferences

You may unsubscribe from promotional emails by using the unsubscribe link included in those emails.

Even after unsubscribing from promotional communications, we may continue to send non-promotional messages regarding your account, purchases, orders, payments, shipping, returns, security, or customer service requests.

ADDITIONAL RIGHTS FOR UK AND EEA RESIDENTS

If you reside in the United Kingdom or European Economic Area, and subject to applicable exceptions and limitations, you may also have the following rights:

Objection to Processing

You may have the right to object to our processing of your personal information for certain purposes.

Restriction of Processing

You may have the right to request that we restrict the processing of your personal information under certain circumstances.

Withdrawal of Consent

When we rely on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing conducted before consent was withdrawn.

Complaints to a Supervisory Authority

You may have the right to submit a complaint to the data protection authority responsible for your place of residence.

EXERCISING YOUR RIGHTS

You may exercise your privacy rights by contacting us at:

Email: hellogrufo@gmail.com

We may need to verify your identity before processing a request, as permitted or required by applicable law.

Where legally permitted, you may designate an authorized agent to submit a request on your behalf. We may require proof that the agent is authorized to act for you and may ask you to verify your identity directly.

We will not discriminate against you for exercising any privacy right available under applicable law.

We will respond to valid requests within the time required by applicable law.

For information regarding personal information processed directly by Shopify, visit:

https://privacy.shopify.com/en

COMPLAINTS

If you have a complaint regarding how Grufo collects, uses, or processes your personal information, please contact us at hellogrufo@gmail.com.

We will review your complaint and respond as required by applicable law.

Depending on where you reside, you may also have the right to appeal our response or submit a complaint to your local privacy or data protection authority.

INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred, stored, or processed in countries different from the country where you reside.

When personal information is transferred outside the European Economic Area or the United Kingdom, we may rely on recognized legal transfer mechanisms, including the European Commission’s Standard Contractual Clauses, equivalent United Kingdom contractual protections, or another lawful transfer mechanism.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes to:

  • Our business practices.

  • The Services.

  • Technology.

  • Legal or regulatory requirements.

  • Operational or security needs.

When we update this Privacy Policy, we will publish the revised version on the Services this Privacy Policy, we will publish the revised version on the Services and update the “Last updated” date.

Where required by law, we may provide additional notice regarding material changes.

CONTACT

For questions about this Privacy Policy, our privacy practices, or the exercise of your privacy rights, contact:

Grufo
Website: grufo.store
Email: hellogrufo@gmail.com

For purposes of applicable data protection laws, Grufo is the controller of personal information processed through the Services, except where another party, such as Shopify or a payment provider, acts as an independent controller.