Privacy Policy for Grain & Graft
Last updated: [today’s date]
Grain & Graft (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website www.grainandgraft.co.uk and any related services.
If you have any questions, please contact us at:
hub@grainandgraft.co.uk
1. Information We Collect
We may collect the following types of information:
1.1 Information you provide to us directly
- Name
- Email address
- Phone number
- Billing information (if you make a booking or purchase)
- Any other information you submit via forms on our website
1.2 Automatically collected information
When you visit our site, we automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited
- Time spent on each page
- Referral sources
This data is used for analytics and website performance.
1.3 Cookies and tracking
We use cookies and similar technologies to:
- Improve site functionality
- Understand how visitors use our website
- Support marketing and advertising
You can manage cookies through your browser settings.
2. How We Use Your Information
We use your data for:
- Processing bookings, reservations, or payments
- Responding to enquiries
- Sending confirmations, updates, and service-related emails
- Improving our website and services
- Marketing communications (only if you opt in)
- Meeting legal or regulatory requirements
We do not sell your data to third parties.
3. Legal Basis for Processing (GDPR)
We process your personal data under the following lawful bases:
- Contract: to provide services you request (e.g. bookings)
- Consent: for marketing emails
- Legitimate interest: to improve our website, security, and user experience
- Legal obligation: for tax or accounting requirements
4. Sharing Your Information
We only share your personal data with trusted third-party providers where necessary, such as:
- Payment processors (e.g., Stripe or WooCommerce Payments)
- Booking or scheduling systems (if implemented)
- Website hosting and analytics providers
- Email service providers (e.g., MailerLite, Mailchimp)
All providers are GDPR-compliant and process data only on our instructions.
5. Data Storage and Security
We take reasonable technical and organisational measures to protect your information, including:
- Encrypted website connections (SSL)
- Secure hosting
- Limited access to personal data
- Regular security reviews
6. How Long We Keep Your Data
We retain personal information only for as long as necessary for:
- Delivering the services you requested
- Meeting legal, accounting, or reporting obligations
- Maintaining booking and transaction records
Marketing consent can be withdrawn at any time.
7. Your Rights (UK GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
To exercise any of these rights, contact:
hub@grainandgraft.co.uk
8. External Links
Our website may contain links to external sites.
We are not responsible for their privacy practices or content.
9. Children’s Privacy
Our website is not intended for children under 16.
We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy periodically.
The “Last updated” date will reflect the most recent version.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Grain & Graft
Email: hub@grainandgraft.co.uk