Privacy policy

Privacy Policy

Who we are This Privacy Policy explains how Grimeo ("we", "us", "our") collects, uses, and protects your personal information when you visit ultrapel.shop (the "Site") or buy our products. We act as the data controller for information collected through the Site.

Information we collect Information you provide: order data (name, shipping & billing address, email, phone, items ordered); account data (email and password if you create an account); support data (messages via our contact form, email, or chat); reviews and content you submit. Collected automatically: device & usage data (IP address, browser type, device, operating system, pages visited) and cookies/similar technologies. We do not collect full payment-card details — payments are processed directly by our payment processors, and we only receive confirmation of the transaction.

How we use your data To process and fulfil your orders (including shipping and support); provide warranty service and handle returns; operate, secure, and improve the Site; send transactional emails (order and shipping updates); send marketing communications if you opt in (unsubscribe anytime); display reviews you submit; and comply with legal obligations.

Legal basis (EU/UK/EEA users) We process your data based on contract (to fulfil your order), legitimate interest (to operate and secure the Site), consent (for marketing and certain cookies), and legal obligations.

Sharing & third parties We share personal data only with providers needed to run the Site and deliver your order: Shopify (e-commerce platform & hosting); payment processors (Shopify Payments, PayPal, and others shown at checkout); shipping carriers; email/support tools; and analytics/advertising providers such as Meta and TikTok (if enabled). We also disclose data where required by law. We never sell your personal information.

Cookies & tracking The Site uses cookies for three purposes: essential (cart and session — cannot be disabled); analytics (anonymous usage statistics); and marketing (measuring ad performance, only with your consent). Manage your preferences via the cookie banner or your browser settings.

Your rights Depending on where you live, you may have the right to access, correct, or delete your data; restrict or object to processing; receive a portable copy; withdraw consent; and lodge a complaint with your data-protection authority. California residents (CCPA) have additional rights to know, delete, and opt out of the "sale" of personal information — we do not sell personal information. To exercise any right, email info@ultrapel.shop with the subject "Privacy request"; we respond within 30 days.

Data retention We keep order and account data as long as needed to provide our services and meet legal obligations (typically up to 7 years for tax purposes). Support messages are kept for up to 3 years. Marketing data is deleted once you unsubscribe.

Security We rely on Shopify's PCI-DSS-compliant infrastructure, HTTPS, and restricted internal access. No system is 100% secure, but we use industry-standard measures to protect your information.

Children The Site is not intended for children under 16, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

International transfers Your data may be processed in the Netherlands, the EU, and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes & contact We may update this Policy; the "Last updated" date reflects the latest revision. Questions about your data? Email info@ultrapel.shop.