Privacy policy

Last updated: May 12, 2025

This Privacy Policy describes how Grova (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from grovawellness.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You may include:

  • Contact details including your name, address, phone number, and email.

  • Order information including your billing and shipping address, payment confirmation, and contact details.

  • Account information such as username, password, and security questions.

  • Customer support interactions, including any content you provide in communication with us.

Some features may require you to provide information. You can choose not to provide this, but it may limit your access to certain features.

Information We Collect about Your Usage
We automatically collect some information about your interaction with the Site using cookies and similar technologies. This may include:

  • Device and browser type

  • IP address

  • Pages visited

  • Time spent on pages

  • Network connection information

Information We Obtain from Third Parties
We may also receive information from third parties including:

  • Platform providers like Shopify

  • Payment processors (to complete orders)

  • Marketing and analytics tools

All information collected through third parties will be handled according to this Privacy Policy.

How We Use Your Personal Information

  • To Provide Products and Services: Fulfilling orders, managing accounts, communicating updates, processing payments, shipping, and handling returns or support.

  • Marketing and Advertising: To send marketing messages, promotions, or show you relevant ads (legal basis: legitimate interest under GDPR Art. 6(1)(f)).

  • Security and Fraud Prevention: Detect and prevent fraud, abuse, or security threats (legal basis: legitimate interest under GDPR Art. 6(1)(f)).

  • Customer Service and Service Improvement: Respond to your requests and enhance your experience with us.

Cookies

We use cookies and similar tracking technologies to provide and improve our Site and Services. You can control cookie settings through your browser. Blocking cookies may affect functionality.

Please note that our Site does not respond to “Do Not Track” signals. Learn more at http://www.allaboutdnt.com/.

How We Disclose Personal Information

We may disclose your personal information:

  • To service providers (e.g., Shopify, payment processors, logistics)

  • With marketing partners (for promotional purposes)

  • With affiliates or subsidiaries

  • To comply with legal obligations

  • In business transitions such as a merger

We do not sell or share your sensitive personal information.

Your Rights

Depending on your location, you may have the following rights:

  • Access to your personal data

  • Correction of inaccurate data

  • Deletion of your data

  • Data portability

  • Restriction or objection to processing

  • Withdraw consent at any time

  • Opt-out of certain marketing and advertising practices

To exercise your rights, please contact us at hello@grovawellness.com. We may need to verify your identity before fulfilling your request.

Children’s Data

Our Services are not directed to children under 16. We do not knowingly collect data from children.

Security and Retention

We use security measures to protect your personal information, though no system is fully secure. We retain your data only as long as necessary for the purposes described or as required by law.

International Users

Your data may be transferred outside your country (including outside the EEA). If so, we rely on lawful data transfer mechanisms such as Standard Contractual Clauses.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

📧 hello@grovawellness.com

For data protection purposes, unless otherwise stated, Grova is the data controller of your personal information.