Privacy Policy

1. Who is responsible for your information?

Alexander William Young is responsible for deciding how and why personal information collected through Grynora is processed.

2. Information we collect

Depending on how you interact with us, we may collect:

• Name and contact details, including email address and telephone number
• Billing and delivery addresses
• Order details, products purchased and transaction references
• Account username and encrypted password information
• Messages submitted through Contact Form 7 or by email
• Return, refund, complaint and customer-service records
• IP address, browser type, device details and website security logs
• Cookie and consent preferences

PayPal processes payment credentials. Grynora does not directly receive or store your complete PayPal login details or full payment-card number.

3. How we collect information

We collect personal information when you:

• Place or attempt to place an order
• Create or use a WooCommerce customer account
• Contact us through a form or email
• Request a return, refund or customer-service response
• Browse the website and interact with essential cookies

We may also receive transaction status and limited account information from PayPal when it processes your payment.

4. Why we use your information

To fulfil our contract with you

• Process and confirm orders
• Collect payment through PayPal
• Pack, dispatch and track deliveries
• Manage cancellations, returns and refunds
• Provide order-related customer service

To comply with legal obligations

• Maintain tax, accounting and transaction records
• Meet consumer-protection requirements
• Respond to lawful requests from regulators or authorities

For our legitimate interests

• Protect the website, customers and business against fraud
• Diagnose technical problems and maintain website security
• Respond to general enquiries and complaints
• Establish, exercise or defend legal claims

With your consent

Where consent is legally required, such as for certain non-essential cookies or direct marketing, we will request it separately. You may withdraw consent at any time.

5. Lawful bases

We rely on the following lawful bases:

• Contract: processing necessary to accept and fulfil an order or take requested steps before purchase.
• Legal obligation: processing needed to comply with tax, accounting and consumer law.
• Legitimate interests: proportionate processing needed to operate, secure and protect the store.
• Consent: where you have made a freely given choice for optional processing.

6. Who receives your information?

We share information only where reasonably necessary. Recipients may include:

• PayPal: to authorise and process payment, refunds and fraud-prevention checks.
• Royal Mail: to address, deliver and track customer parcels.
• Website hosting and technical providers: to host, maintain, back up and secure grynora.shop.
• WooCommerce and WordPress service components: to operate the store and customer accounts.
• Professional advisers and authorities: where necessary for accounting, legal compliance or lawful requests.

We do not sell or rent customer personal information.

7. International data transfers

Some service providers, including payment or technology providers, may process information outside the United Kingdom. Where this occurs, the relevant provider is expected to use a lawful transfer mechanism and appropriate safeguards required by applicable data-protection law.

Refer to the provider’s own privacy documentation for more information about its processing locations and safeguards.

8. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose collected, including:

• Order and accounting records: normally for at least the period required by UK tax and accounting law.
• Customer-service, return and complaint records: for as long as needed to resolve the matter and manage possible legal claims.
• Contact-form enquiries: normally up to 24 months unless longer retention is reasonably required.
• Customer accounts: while active or until a valid deletion request is completed, subject to records we must retain.
• Security logs: for a limited period appropriate to security, troubleshooting and fraud prevention.

Sole traders must keep relevant business records for at least five years after the applicable Self Assessment filing deadline.

9. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

The website uses HTTPS encryption. Access to administrative and order information is restricted to those who reasonably require it. No online system can, however, be guaranteed completely secure.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

• Request access to personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Request deletion of information in certain circumstances
• Request restriction of certain processing
• Object to processing based on legitimate interests
• Receive certain information in a portable format
• Withdraw consent where processing relies on consent

These rights are not always absolute. We may need to retain information where required by law or where another lawful reason applies.

To exercise a right, email support@grynora.shop. We may need to verify your identity before completing a request.

11. Marketing communications

Grynora does not currently operate an email-marketing subscription through this website. If this changes, marketing preferences and an unsubscribe method will be provided.

Service messages concerning an order, payment, delivery, return or customer request are not marketing communications.

12. Cookies

The website uses essential cookies required for functions such as the basket, checkout, account login, security and remembering user choices.

More information is available in our Cookie Policy.

13. Children’s information

Grynora is not directed at children and does not knowingly collect personal information from children. Customers placing orders must be legally capable of entering into the purchase contract.

14. Complaints

Contact us first if you have a concern about how personal information has been handled: support@grynora.shop.

You also have the right to complain to the UK Information Commissioner’s Office. Information is available at ico.org.uk.

15. Changes to this policy

We may update this Privacy Policy when our services, technology or legal responsibilities change. The latest version will be published on this page with its revision date.

16. Contact us

Alexander William Young trading as Grynora
95 Seagrim Road
Bournemouth, BH8 0BD
United Kingdom

Email: support@grynora.shop

17. Policy information

Last updated: 10 August 2026