Privacy policy

Privacy Policy

Son’s & Gren is committed to protecting your privacy and handling your personal data with transparency, care, and in full compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your information when you interact with our website.

Collection of Personal Data

  • We collect personal data when you:
  • Purchase products from our store
  • Subscribe to our newsletter
  • Contact our customer support
  • Browse our website (via cookies and analytics, if consented)

The data collected may include:

  • Name and contact information
  • Shipping and billing address
  • Payment method (handled securely by third-party processors)
  • Order history
  • IP address and browser/device information (if cookies are accepted)

Purpose of Data Collection

We use your personal data to:

  • Fulfill and deliver your orders
  • Provide customer service and manage inquiries
  • Send order confirmations and tracking updates
  • Improve our website’s performance and user experience
  • Send promotional emails (only if you opt in)

We never collect more data than necessary, and we don’t use your data for any purpose not listed here.

Sharing of Data

We do not sell or rent your personal data.

We only share data with trusted third parties when necessary to operate our business:

  • Payment providers (e.g., Stripe, PayPal) to securely process your payments
  • Shipping and fulfillment services, including Printful, our print-on-demand partner
  • Shopify, for secure store operations and order processing
  • Legal authorities, only when required by law

All third parties we work with are GDPR-compliant and only process data as necessary.

Data Storage & Security

Your data is stored securely using encrypted systems through Shopify and Printful. We implement technical and organizational measures to prevent unauthorized access, misuse, or disclosure.

We retain your data only as long as necessary:

  • For completing orders and delivery
  • For legal and tax records (typically 7 years under EU law)
  • Or until you request deletion (where applicable)

We take your data security seriously. All personal data is transmitted over secure, encrypted HTTPS connections. We use industry-standard technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or outdated information
  • Delete your data (unless we are required to retain it)
  • Withdraw consent for marketing communications
  • Object to certain types of processing, including profiling or direct marketing
  • Lodge a complaint with your national data protection authority

Exercising Your Rights

To exercise any of your rights or request data access/deletion, please email us at:

📧 sonsandgren@gmail.com
Subject: [Data Request – Your Name]

We will respond within 30 days, as required by law.

Last updated: [2025-05-07]