Legal

Privacy Policy

Last updated: 7 August 2026

1. Data controller

The data controller for this website is Grove Online Store LTD, 5 Orion Building, 90 Navigation Street, Birmingham, B5 4AA, United Kingdom, VAT ID GB 451711024, director Percival Whitlock. You can reach us at [email protected] or +44 121 632 4522 for any data-protection matter.

2. Data we collect

We collect the details you type into our forms: your name, phone number, email address, and any message content you choose to include. When you place an order we additionally process your strap choice, quantity and delivery details. When you browse the site, technical data such as IP address, browser type and pages visited are processed in server logs and, with your consent, in analytics cookies as described in our Cookie Policy.

Health-related readings (sleep, heart rate, HRV) are processed locally on your phone and in your personal app account. We do not sell this data, and we do not use it for advertising.

3. Purposes and legal bases

We process form data to respond to your enquiry and to prepare or fulfil an order, which is necessary for the performance of a contract or pre-contractual steps at your request. We process order and invoice records to comply with tax and accounting law. Where we rely on consent, for example for optional marketing emails or non-essential cookies, you may withdraw it at any time with effect for the future.

4. Retention periods

Enquiry correspondence is kept for up to 12 months after the conversation closes. Order and invoice records are kept for 6 years as required by UK tax legislation. Server logs are rotated and deleted within 90 days. Analytics data, where consented, is aggregated and deleted after 26 months.

5. Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. To exercise any of these, write to [email protected]; we respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office.

6. Sharing and third parties

We share personal data only with processors who help us operate: our delivery carrier for parcels, our payment provider for transactions, and our hosting provider for the website. Each processes data under a written contract and only on our instruction. We never sell personal data to advertisers or data brokers.

7. Security

Data in transit is encrypted with TLS; access to order systems is restricted to staff who need it and protected by two-factor authentication. No method of transmission is absolutely secure, but we review our measures at least annually and after any significant change to the shop.

8. Changes to this policy

If we change this policy, the new version is published on this page with an updated date. Material changes affecting your rights are highlighted on the site before they take effect.