Privacy policy

Privacy Policy

Last updated: 30 August 2026

Grofie Nutra-Commerce Ltd ("Grofie", "we", "us" or "our") operates the Grofie website and online store at www.grofie.co.uk, including our online grocery shopping platform, related websites, features, products and services (collectively, the "Services").

Grofie Nutra-Commerce Ltd is the data controller responsible for your personal information when you use our Services, unless otherwise stated in this Privacy Policy.

We are registered with the Information Commissioner's Office (ICO) in the United Kingdom:

Grofie Nutra-Commerce Ltd
ICO Registration Number: ZC227322

Our Services are hosted and powered by Shopify, which provides the technology infrastructure that enables us to operate our online store.

This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it, and the rights you have in relation to your personal information.

1. Personal Information We Collect

"Personal information" means information that identifies you or can reasonably be linked to you.

Depending on how you interact with Grofie, we may collect the following information:

Contact and delivery information

This may include:

  • Full name

  • Email address

  • Telephone/mobile number

  • Billing address

  • Delivery address

  • Postcode

  • Other information you provide in connection with an order or delivery

Account information

If you create an account, we may collect:

  • Email address

  • Login credentials

  • Account preferences

  • Saved addresses

  • Wishlist and account settings

  • Order history

Order and transaction information

This may include:

  • Products purchased

  • Products added to your basket or wishlist

  • Order numbers

  • Order dates

  • Order value

  • Returns, refunds, exchanges and cancellations

  • Delivery information

  • Payment status

  • Transaction details

Payment information

Payments may be processed through Shopify Payments or other third-party payment providers.

We may receive information such as payment confirmation, transaction reference, payment method and limited payment details necessary to process and manage your order.

We do not normally store your full payment card number or card security code on our own systems. Payment information may be processed directly by our payment service providers in accordance with their own privacy policies and security requirements.

Communications

We may collect information you provide when you:

  • Contact customer support

  • Send us an email

  • Contact us through social media

  • Submit a contact form

  • Leave a review

  • Make an enquiry or complaint

Device and technical information

When you access our website, we may automatically collect information such as:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Approximate location derived from IP address

  • Website pages viewed

  • Referring website

  • Date and time of access

  • Interaction with our website

  • Cookies and similar technologies

Marketing information

If you choose to receive marketing communications, we may collect information about your marketing preferences and interactions with our emails, advertisements or promotional communications.

2. How We Collect Your Information

We may collect personal information:

Directly from you

For example, when you:

  • Create an account

  • Place an order

  • Subscribe to marketing communications

  • Contact us

  • Complete a form

  • Leave a review

  • Communicate with us

Automatically

When you browse or use our website, certain information may be collected automatically through cookies, pixels and similar technologies.

From service providers

We may receive information from companies that provide services to us, such as payment processors, delivery providers, technology providers, analytics providers and marketing platforms.

From third parties

Where permitted by law, we may receive information from third parties, for example where you interact with our social media pages, advertising platforms or other services connected with our business.

3. Why We Use Your Personal Information

We only use personal information where we have a lawful basis to do so under applicable UK data protection law.

Depending on the circumstances, we may rely on:

  • Performance of a contract – where processing is necessary to provide products or services you have ordered.

  • Legal obligation – where we are required to process information to comply with the law.

  • Legitimate interests – where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

  • Consent – where we ask for your permission, such as for certain marketing or non-essential cookies.

We may use your personal information for the following purposes.

Processing and fulfilling orders

We use your information to:

  • Process your order

  • Take or facilitate payment

  • Prepare and fulfil your order

  • Arrange delivery

  • Send order confirmations

  • Provide delivery updates

  • Process refunds, returns and cancellations

  • Provide customer support

  • Maintain records of transactions

Managing your account

We may use your information to:

  • Create and manage your account

  • Authenticate your account

  • Maintain your preferences

  • Provide access to your order history

  • Help protect your account

Customer service

We use information you provide to respond to questions, complaints, requests and other communications.

Website operation and improvement

We may use technical and usage information to:

  • Operate our website

  • Maintain website security

  • Diagnose technical problems

  • Understand how customers use our website

  • Improve our products and Services

  • Improve website functionality and performance

Fraud and security

We may process information to:

  • Detect and prevent fraud

  • Protect our customers

  • Protect our business

  • Investigate suspicious or unlawful activity

  • Maintain the security of our website, systems and Services

Marketing

Where permitted by law, we may use your information to send information about:

  • New products

  • Promotions

  • Discounts

  • Offers

  • Grofie news

  • Other products or Services that may be relevant to you

Where consent is required, we will obtain it before sending the relevant marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe option in the relevant communication or by contacting us.

Legal and regulatory purposes

We may process personal information where necessary to:

  • Comply with applicable laws

  • Maintain appropriate business records

  • Respond to lawful requests from authorities

  • Establish, exercise or defend legal claims

  • Enforce our terms and policies

  • Protect our legal rights

4. Who We Share Your Personal Information With

We do not sell your personal information.

We may share personal information where necessary to operate Grofie and provide the Services.

These recipients may include:

Shopify

Our online store is powered by Shopify. Shopify processes personal information as part of providing its ecommerce platform and related services.

Shopify may process information on our behalf as a processor and may also process certain information for its own purposes where applicable.

For more information, please see Shopify's privacy information:

Shopify Privacy Policy

Payment providers

We may share information with payment service providers to process payments, refunds and related transactions.

Delivery and fulfilment providers

We may share relevant information, such as your name, address, telephone number and order details, with delivery and fulfilment providers so that your order can be prepared and delivered.

Technology and service providers

We may use third-party providers for services including:

  • Website hosting and technology

  • IT services

  • Cloud storage

  • Customer support

  • Analytics

  • Email and SMS communications

  • Marketing

  • Fraud prevention

  • Security

These providers may process personal information only as necessary to provide their services to us or as otherwise permitted by applicable law.

Professional advisers

We may share information with professional advisers such as accountants, lawyers, insurers and other advisers where reasonably necessary.

Legal and regulatory authorities

We may disclose information where required by law, court order, regulatory requirement or lawful request from an authority.

Business transfers

If Grofie is involved in a merger, acquisition, restructuring, sale of assets, insolvency or similar business transaction, personal information may be transferred as part of that transaction where legally permitted.

5. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law.

Depending on the circumstances, this may include relying on:

  • UK adequacy regulations;

  • Appropriate contractual safeguards, such as the UK's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses; or

  • Another lawful transfer mechanism permitted under applicable law.

The ICO confirms that restricted transfers outside the UK must be covered by an appropriate transfer mechanism, such as UK adequacy regulations or appropriate safeguards.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies may be used to:

  • Keep the website functioning;

  • Remember items in your basket;

  • Maintain your preferences;

  • Keep you signed in;

  • Understand website usage;

  • Improve website performance;

  • Measure advertising effectiveness; and

  • Support marketing and personalised advertising where permitted.

Some cookies are necessary for the operation of the website, while others are optional.

Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.

You can manage cookies through your browser and, where available, our website's cookie preferences.

Disabling certain cookies may affect the functionality of the website.

7. Marketing Communications

We may send marketing communications by email, SMS or other permitted channels where we have a lawful basis to do so.

You can stop receiving marketing communications at any time by:

  • Clicking the unsubscribe link in a marketing email;

  • Using available marketing preference controls; or

  • Contacting us using the details in the "Contact Us" section below.

Even if you opt out of marketing, we may still send essential service communications, such as order confirmations, delivery updates, account notifications and information relating to transactions you have made.

8. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

The length of time we retain information depends on factors including:

  • The purpose for which we collected it;

  • Whether you maintain an account with us;

  • Whether you have placed an order;

  • Legal, accounting and tax requirements;

  • Our legitimate business needs;

  • The need to resolve disputes; and

  • The need to establish, exercise or defend legal claims.

For example, transaction and financial records may need to be retained for longer periods where required by tax, accounting or other legal requirements.

When personal information is no longer required, we will take reasonable steps to securely delete it or anonymise it.

9. Your Data Protection Rights

Depending on the circumstances and subject to applicable legal exceptions, you may have the following rights:

Right of access

You may ask for a copy of the personal information we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to erasure

You may ask us to delete your personal information in certain circumstances.

Right to restriction

You may ask us to restrict how we process your personal information in certain circumstances.

Right to object

You may have the right to object to certain processing, including processing based on legitimate interests.

You have an absolute right to object to direct marketing.

Right to data portability

In certain circumstances, you may request that personal information you have provided to us is supplied in a structured, commonly used and machine-readable format or transferred to another organisation.

Right to withdraw consent

Where we rely on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.

These rights are not absolute and may be subject to legal conditions and exemptions.

The ICO confirms that individual rights can include access, rectification, erasure, restriction, objection and portability, depending on the circumstances.

10. How to Exercise Your Rights

To exercise your rights or ask questions about how we use your personal information, contact us using:

Email: info@grofie.co.uk
Telephone: +44 7405 730813
Postal address: BSS House, 68A, Swindon SN2 2PJ, United Kingdom

Please provide enough information for us to identify you and understand your request.

For security purposes, we may need to verify your identity before completing certain requests.

We will respond to valid requests within the timeframe required by applicable data protection law.

11. Complaints

We take privacy concerns seriously.

If you are unhappy with how we have handled your personal information, please contact us first using:

Email: info@grofie.co.uk

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

You can find information about making a complaint through:

ICO – Make a complaint

Our ICO registration number is:

ZC227322

12. Children's Privacy

Our Services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided us with personal information, please contact us and we will consider the appropriate steps to remove the information where required by law.

13. Automated Decision-Making and Profiling

We may use automated technologies, analytics or advertising tools to understand how customers interact with our Services and to provide more relevant content or advertising.

We do not intend to make decisions producing legal or similarly significant effects about you solely through automated decision-making unless permitted by applicable law and appropriate safeguards are in place.

Where applicable, we will provide additional information about significant automated decision-making or profiling.

14. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices, security or content of third-party websites that we do not control.

You should review the privacy policies of third-party services before providing them with personal information.

15. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

You should also take reasonable steps to protect your account credentials and should not share your password with others.

16. Shopify

Our online store is hosted on Shopify.

Shopify provides the ecommerce infrastructure through which we operate our online store and process customer interactions.

Shopify may process personal information in accordance with its own privacy policies and contractual arrangements with merchants.

You can learn more about Shopify's approach to privacy here:

Shopify Consumer Privacy Policy

Shopify also provides information about privacy and GDPR compliance:

Shopify GDPR information

Using Shopify does not by itself make a business compliant with UK data protection law; Grofie remains responsible for its own data protection obligations as the controller of customer information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business;

  • Changes to our Services;

  • Changes to the way we process personal information;

  • Changes to technology;

  • Changes to legal or regulatory requirements.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

Where required by law, we will provide additional notice of material changes.

The ICO recommends regularly reviewing and updating privacy information and informing individuals before introducing new processing purposes.

18. Contact Us

If you have questions about this Privacy Policy, our use of personal information, or your data protection rights, please contact us:

Grofie Nutra-Commerce Ltd

ICO Registration Number: ZC227322

Email: info@grofie.co.uk

Telephone: +44 7405 730813

Address:
BSS House
68A
Swindon
SN2 2PJ
United Kingdom

For the purposes of applicable UK data protection law, Grofie Nutra-Commerce Ltd is the data controller of personal information processed through our Services, except where another organisation is independently responsible for its processing.