top of page

Privacy Policy

​

1. Introduction

​

The Graceful Rituals Co. (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, purchase our products, or interact with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

​

2. Who We Are

​

The Graceful Rituals Co. is the data controller responsible for your personal data.

Registered name: The Graceful Rituals Company
Registered in: England and Wales
Registered office: 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ
Contact email: hello@thegracefulritualscompany.com

 

If you have any questions about this Privacy Policy or wish to exercise your data rights, you may contact us using the details above.

​

3. The Personal Data We Collect

​

We may collect, use and store the following categories of personal data:

Identity Data, including your name and title.
Contact Data, including billing address, delivery address, email address and telephone number.
Transaction Data, including details about payments and products purchased.
Technical Data, including IP address, browser type, device information and website usage data.
Profile Data, including account details, purchase history and marketing preferences.
Marketing and Communications Data, including your preferences in receiving marketing from us.

​

We do not intentionally collect special category data (such as health data). If you voluntarily disclose health information to us (for example, in a customer enquiry about supplements), we will process it only for the purpose of responding to you and will not retain it longer than necessary.

​

4. How We Collect Your Data

​

We collect personal data in several ways:

  • When you place an order

  • When you create an account

  • When you subscribe to marketing communications

  • When you contact us via email or website forms

  • Through cookies and analytics technologies when you browse our website

We may also receive personal data from payment providers and delivery partners as part of fulfilling your order.

​

5. How We Use Your Personal Data
​

We use your personal data only where the law allows us to. Most commonly, we process your data for the following purposes:

To perform a contract with you, including processing orders, taking payment and arranging delivery.

To manage our relationship with you, including responding to enquiries and providing customer support.

To improve our website, products and services through analytics and feedback.

To send marketing communications where you have opted in or where we are permitted to do so under PECR soft opt-in rules.

​

To comply with legal obligations, including tax and accounting requirements.

​

6. Legal Bases for Processing

​

Under UK GDPR, we rely on the following lawful bases:

Contractual necessity – where processing is required to fulfil your order.
Legitimate interests – where processing is necessary for business improvement, fraud prevention or customer service.
Consent – where you have opted in to receive marketing communications.
Legal obligation – where we are required to retain information for regulatory or tax purposes.

​

7. Marketing Communications

​

You will receive marketing communications from us only if:

  • You have explicitly opted in; or

  • You have previously purchased from us and have not opted out (soft opt-in under PECR).

You may unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

We do not sell or rent your personal data to third parties for marketing purposes.

​

8. Sharing Your Data

​

We may share your personal data with trusted third parties who provide services on our behalf. These may include:

  • Payment processing providers

  • Delivery and fulfilment companies

  • Website hosting providers

  • Email marketing platforms

  • IT and analytics service providers

All third parties are required to respect the security of your personal data and to process it in accordance with the law.

​

If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual clauses.

​
9. Data Security

​

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or loss. Access to personal data is limited to those who have a legitimate business need to know.

​

10. Data Retention

​

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements.

For example:

  • Transaction data is retained for tax purposes for at least six years.

  • Marketing data is retained until you withdraw consent.

When data is no longer required, it is securely deleted or anonymised.

​

11. Your Legal Rights

​

Under UK data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request erasure of your data

  • Object to processing

  • Request restriction of processing

  • Request transfer of your data

  • Withdraw consent at any time (where consent is relied upon)

​

You will not usually be required to pay a fee to exercise your rights.

​

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office.

​

12. Cookies

​

Our website uses cookies to ensure proper functionality, analyse traffic and improve user experience. You can manage your cookie preferences via your browser settings or through our cookie banner.

Further details are provided in our Cookie Policy.

​

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those external sites and encourage you to read their policies.

​

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “Last Updated” date.

​

​

This is the quiet infrastructure that protects your brand while it grows.

bottom of page