Privacy Policy

This Privacy Policy describes how Gratti London (“we”, “our”, “us”) collects, uses, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect the following types of personal information:

Contact information (name, email address, phone number, billing and shipping addresses)
Payment information (processed securely through our payment providers; we do not store full card details)
Order history and preferences
Website usage data through cookies and similar technologies

2. How We Use Your Information

We use your personal data to:

Process and deliver your orders
Communicate with you about your order, returns, or support inquiries
Send marketing communications (only with your consent)
Improve our website and services
Comply with legal obligations

3. Legal Basis for Processing

We process your data under the following legal bases:

Contractual necessity (e.g. to fulfil your order)
Legitimate interest (e.g. fraud prevention, website security)
Consent (e.g. marketing newsletters)
Legal compliance

4. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

5. Sharing of Information

We may share data with trusted third parties such as:

Payment processors
Shipping and logistics providers
IT service providers

We never sell your personal data.

6. Your Rights (UK GDPR)

You have the right to:

Access the data we hold about you
Request correction or deletion
Withdraw consent for marketing
Object to processing
Lodge a complaint with the Information Commissioner’s Office (ICO)

7. Cookies

We use cookies to enhance your browsing experience and analyse traffic. You can control cookies via your browser settings.

8. Contact Us

For privacy concerns, please email us at:
📧 grattilondon@gmail.com