Privacy policy

Last updated: 24 October 2026

Controller: the owner of the Grumpy Rump store, contact: our contact form.
What data: name, shipping address, e-mail, phone (if given), order and payment details (payments are processed by payment providers — we never store card data), messages you send us, technical data (IP address, cookies).
Purposes and legal bases (GDPR): performing your order and the contract (Art. 6(1)(b)); accounting and tax obligations (Art. 6(1)(c)); handling complaints and legal claims, preventing fraud and store analytics (Art. 6(1)(f) — our legitimate interest); newsletter and marketing cookies — based on your consent (Art. 6(1)(a)), which you can withdraw at any time.
Checkout reminders: if you start a checkout and don't complete it, we may send you up to two reminder e-mails about it (Art. 6(1)(f) — our legitimate interest). Every e-mail has an unsubscribe link, and you can object at any time via our contact form.
Recipients: the store platform (Shopify), payment providers, carriers, suppliers and fulfilment partners, accountants, e-mail and analytics tools, advertising platforms (Meta, Google) — only as far as necessary. Some of them process data outside the European Economic Area on the basis of standard contractual clauses or adequacy decisions.
Retention: order data — for the period required by tax law and until claims are time-barred; newsletter data — until you withdraw consent; cookies — according to your choices in the cookie banner.
Your rights: access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and a complaint to the data protection authority of your country. Customers outside the EU (e.g. California, UK, Canada, Australia) have the rights their local law grants; we honour them in the same way. Write to us via our contact form.
Cookies: we use cookies needed for the store to work and — with your consent — analytics and marketing cookies. You manage your consent in the cookie banner.
We do not knowingly collect data from children. We do not sell your personal data.