Privacy policy

Updated 1 October 2026

Controller and data sources

GR Essentials Oy, Finnish Business ID 3647122-6, Toppilansaarentie 11 A 12, 90510 Oulu, Finland. Privacy enquiries: support@grunchyshop.com.

We process information about customers, website visitors, people who contact us and marketing subscribers. We obtain data from you, website use and payment and delivery providers.

Data and legal bases

Orders and customer service: name, contact details, address, customer account, order, payment and delivery information and messages. We use these to handle orders, payments, deliveries and returns on the basis of our contract. Required checkout information is necessary to fulfil your order. We do not store complete payment card details.

Accounting and regulatory duties: necessary order and payment information is processed to comply with legal obligations.

Security, complaints and customer feedback: relevant messages, reviews, device and event data are processed on the basis of a contract or our legitimate interests in improving services, preventing abuse and handling legal claims.

Marketing and tracking: with your consent, we process email addresses, marketing preferences, IP addresses, device and cookie identifiers and browsing, cart and interaction data for newsletters, cart reminders, analytics and targeted advertising. Clarity also analyses website interactions and session recordings.

Email marketing consent and website tracking consent are separate. Withdraw marketing consent using an email unsubscribe link or by contacting us, and withdraw tracking consent in cookie settings. Purchasing does not require consent to marketing or non-essential tracking.

Providers and transfers

We use Shopify and Shopify Payments for our store and payments.

Processors act under our agreements and instructions. Payment and advertising providers, and Shopify for certain services, may also act as independent controllers. Information about Shopify’s own processing and privacy controls is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Data may be processed outside the European Economic Area, including in the United States. Transfers rely on an applicable EU adequacy decision, Standard Contractual Clauses or approved Binding Corporate Rules, with additional safeguards where needed. Ask us for details and a copy of the applicable safeguards. We do not sell your personal data.

Retention

We keep information only as long as needed. Accounting vouchers are retained for six years from the end of the calendar year in which the financial year ended; financial statements and accounting records are kept for ten years from the financial year end where legally required. Customer service and complaint records are generally retained for three years after the matter closes.

Unnecessary customer accounts and marketing profiles are generally deleted or anonymised after two years of inactivity. We retain minimal opt-out information to respect marketing objections. Reviews are retained while published.

Cookie durations are listed in cookie settings. Standard Clarity session recordings are retained for 30 days; favourited recordings and heatmap data for up to nine months. Retention of other analytics and advertising data depends on the purpose, valid consent and each service’s retention settings. Ask us for details of the retention periods in use.

A dispute, legal obligation or other justified need may require limited longer retention.

Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your data and object to processing based on legitimate interests. You may always object to direct marketing. Withdrawing consent does not affect earlier lawful processing.

Email support@grunchyshop.com to exercise your rights. We normally respond within one month. You may complain to the Finnish Data Protection Ombudsman or another competent supervisory authority.

We do not make solely automated decisions with legal or similarly significant effects on you. Consent-based targeted advertising may use segments describing your interests.

Cookies and similar technologies

We use cookies and similar technologies to operate the store, measure website use and advertise.

Essential technologies support the cart, checkout, security and storage of consent choices. They are used without separate consent where necessary to provide the service you request.

Analytics, personalisation and advertising technologies are activated only with your consent.

Accept or reject non-essential technologies and change your choices at any time using the Cookie Settings link on our website. Refusal does not prevent purchases.

The information available through cookie settings lists current technologies, providers, purposes and durations.