Privacy Policy

1. Scope

This Privacy Policy describes how Grito Bay collects, uses, and discloses personal information when you visit gritobay.com, purchase from us, contact us, or otherwise interact with our store. Our store is powered by Shopify, which processes information needed to provide the storefront and checkout services.

2. Information we collect

Depending on how you interact with us, we may collect:

• contact details, such as your name, email address, telephone number, billing address, and shipping address;
• order and transaction details, such as products purchased, order history, discounts, delivery information, and payment status;
• payment information processed by Shopify and payment providers; Grito Bay does not need to receive your full card number;
• device and usage data, such as Internet Protocol address, browser type, device identifiers, pages viewed, referring pages, and cookie data;
• communications you send to us, including customer-service requests and product claims; and
• marketing preferences, including newsletter subscriptions and consent choices.

3. How we use information

• Process payments and fulfill, ship, and support orders.
• Operate, maintain, secure, and improve the store.
• Communicate about orders, service messages, and customer support.
• Detect fraud, abuse, security incidents, and violations of our terms.
• Send marketing communications where permitted and honor opt-out requests.
• Measure store performance and personalize content or advertising where permitted by law and supported by your consent choices.
• Comply with legal obligations and enforce our agreements.

4. When we disclose information

We may disclose personal information to service providers that help us operate the business, including Shopify, payment processors, shipping and fulfillment providers, analytics providers, marketing providers, customer-support tools, and professional advisers. These providers may process information under their own terms and privacy notices.

We may also disclose information when required by law, to protect rights and safety, in connection with a business transaction, or with your direction or consent. We do not disclose personal information merely because someone requests it without a valid basis.

5. Cookies and similar technologies

We and our service providers may use cookies, pixels, and similar technologies to remember preferences, keep the store functional, understand usage, prevent fraud, and support marketing. Available choices may include browser controls and a cookie or privacy preference tool on the website. Blocking some cookies may affect store functions.

6. Marketing choices

You may unsubscribe from marketing emails by using the unsubscribe link in the message. Transactional messages about an order or account may still be sent. Where required, we obtain consent before using information for targeted advertising or non-essential cookies.

7. Data retention and security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer support, accounting, fraud prevention, dispute resolution, and legal compliance. Retention periods vary by record type and legal requirement.

We use reasonable administrative, technical, and organizational safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, to object to or restrict certain processing, to withdraw consent, or to appeal a privacy decision. You may also have a right to opt out of certain targeted advertising, sharing, or sale as those terms are defined by applicable law.

To make a request, email support@grito-bay.com. We may need to verify your identity and may decline or limit a request where permitted by law. You may use an authorized agent where local law allows it. We will not unlawfully discriminate against you for exercising privacy rights.

9. International processing

Grito Bay and its service providers may process information in countries other than the country where you live. Where required, appropriate safeguards will be used for international transfers.

10. Children

The store is not directed to children under the age at which they may independently consent to data processing in their location. We do not knowingly collect personal information from children in violation of applicable law. A parent or guardian may contact us to request deletion.

11. Changes and contact

We may update this Privacy Policy to reflect changes in our practices, technology, or legal obligations. The revised policy will show a new effective date when published.

Privacy questions and requests: support@grito-bay.com