Privacy Policy

This Privacy Policy describes how Gr8 Grocers JA ("we," "us," or "our") collects, uses, and shares information about you when you visit or make a purchase from gr8grocersja.com (the "Site"). By using the Site you agree to the practices described in this policy.

---

1. Information We Collect

1.1 Information You Provide Directly

• Account registration details (name, email address, password)
• Billing and shipping address
• Payment information (processed securely via third-party payment processors; we do not store full card numbers)
• Order history and preferences
• Communications you send us (e.g. support requests, feedback)

1.2 Information Collected Automatically

• IP address and approximate geolocation
• Browser type, operating system, and device identifiers
• Pages visited, time spent on pages, and referring URLs
• Cookies, pixel tags, and similar tracking technologies (see Section 6)

1.3 Information from Third Parties

• Social login providers (e.g. Google, Facebook) if you choose to sign in via those services
• Payment processors and fraud-detection services
• Analytics partners

2. How We Use Your Information

We use collected information to:

• Process and fulfil your orders and manage returns
• Create and manage your account
• Send transactional emails (order confirmations, shipping updates)
• Send marketing communications where you have opted in
• Improve and personalise your shopping experience
• Detect and prevent fraud or abuse
• Comply with our legal and regulatory obligations
• Respond to your enquiries and provide customer support

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we rely on the following legal bases:

• Contract performance — processing necessary to fulfil your orders
• Legitimate interests — fraud prevention, security, and service improvement
• Consent — for marketing emails and non-essential cookies
• Legal obligation — where we must comply with applicable law

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Service providers acting on our behalf (hosting, payment processing, email delivery, analytics)
• Law enforcement or government authorities when required by law
• A successor entity in the event of a merger, acquisition, or sale of assets

All service providers are bound by contractual data-processing agreements consistent with this policy.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Account data is retained for the lifetime of your account plus 7 years for tax and legal compliance. You may request deletion at any time (see Section 8).

6. Cookies & Tracking

We use strictly necessary cookies (required for the Site to function), functional cookies (preferences), analytics cookies (site usage statistics), and marketing cookies (targeted advertising — only with your consent). You may manage your cookie preferences through the banner displayed on your first visit or via your browser settings.

7. Data Security

We implement technical and organisational measures including TLS/HTTPS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.

8. Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with your supervisory authority

To exercise these rights, email us at privacy@gr8grocersja.com. We will respond within 30 days.

9. Children's Privacy

The Site is not directed to children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses for EEA transfers).

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or prominent notice on the Site. Continued use after the effective date constitutes acceptance of the revised policy.

12. Contact Us

Gr8 Grocers JA — Privacy Team
Email: privacy@gr8grocersja.com
Website: gr8grocersja.com