This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from shop.gravity.co (the “Site”).
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers and other information for Apple Pay and Google Pay) email address, and phone number. We refer to this information as “Order Information.”
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Squarespace to power our online store--you can read more about how Squarespace uses your Personal Information here: https://www.squarespace.com/privacy.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
Protecting the privacy of children is especially important to Gravity. For that reason, we do not knowingly collect or maintain personally identifiable information or non-personally-identifiable information on the Website from persons under 13 years of age without parental consent. If Gravity learns that personally identifiable information of persons under 13 years of age has been collected on the Website without verified parental consent, then we will take the appropriate steps to delete this information. We do not share the personal information of minors under the age of 13 with third parties.
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at office@gravity.co
Gravity Industries Privacy Policy is used within the company to manage and process personal information. All Gravity Industries Entities are under a duty to respect and comply with the Privacy Policy. The Privacy Policy applies to all personal information used and collected of any employees, contractors, customers and business contacts of the Gravity Industries Entities, as well as any other categories of individuals about whom Gravity Industries may process personal data.
Data protection laws allow people to manage how their personal information (any information that relates to them, such as a name, identification numbers, photos, preferences, employment records etc.) is used. Gravity Industries’ use of the personal information of its employees, contractors, customers, business contacts or any other identifiable individuals is covered and regulated by local data protection law.
We shall first and foremost comply with local law where it exists. As an organisation Gravity Industries must always comply with any applicable legislation relating to personal data (e.g. in the United Kingdom, the Data Protection Act 2018). In some countries there may be state laws that apply as well as federal laws, and there may be ancillary administrative regulation in addition to legislation. Where there is no law or the law does not meet the standards set out by the rules in this document, we will process personal information in adherence to the rules in this document.
We shall be open with individuals as to how their personal information will be used by us.
We shall only obtain and use personal information for those purposes which are known to individuals, or which are within their expectations and are relevant to us. When collecting information, we will only collect those details which are necessary for the purposes for which that information is being obtained.
We should only change the purpose for which personal information is used if we make people aware of such change or it is within their expectations and they can express their concerns If personal information is collected by the Gravity Industries Entities for a specific purpose and subsequently any of the Gravity Industries Entities wish to use the information for a different or new purpose, we will ensure that the relevant individuals are aware of such a change unless there are legitimate reasons for not having to do so.
We shall keep personal information accurate and up to date. Processing inaccurate information can be harmful to individuals and to the business. The main way of ensuring that personal information is kept accurate and up to date is by actively encouraging employees, contractors, customers and business contacts to inform us when their personal information changes. Where the accuracy of personal information is contested or the individual raises a query over the lawfulness of the processing, the individual may object to its continued processing and/or request that the relevant Gravity Industries Entity restricts the processing pending verification of the legitimacy of such processing.
We shall keep personal information only for as long as is necessary. Any personal information relating to individuals should only be kept where there is a business or legal need to do so.
We shall always be receptive to any queries, requests or complaints made by individuals in connection with their personal information. We recognise that individuals should have the ability to access personal information held about them. Individuals are entitled to be supplied with a copy of any personal information held about them (including both electronic and relevant paper records) unless there is a legitimate basis for withholding the information. If a valid request concerns a change in that individual’s personal information, such information must be rectified or updated, if appropriate to do so. We recognise that individuals may have the right not to be subject to automated decision making (including profiling) which produces a legal (or similarly significant) effect. We will reply to queries and complaints in reasonable time and to the extent reasonably possible.
We shall always adhere to appropriate organisational security measures to protect personal information, to prevent the unauthorised or unlawful processing or disclosure of personal information, and the accidental loss, destruction of, or damage to, personal information.
We shall only use sensitive personal information where we have obtained the individual’s explicit consent unless we have another lawful basis for doing so under European data protection law. Given the nature of this type of information, (which includes information relating to health, religion or ethnic origins) it is only appropriate for us to collect and use sensitive personal information when people explicitly give us their prior, specific, informed consent or where there in another lawful basis for doing so under European data protection law. Where explicit consent is being relied upon, this permission to our use of sensitive personal information must be freely given and unambiguous.
We shall always allow customers to opt out of receiving marketing information. We also ensure that the data protection statement is made available on our website.
One of the requirements of the EEA data protection law (where personal information is transferred from a Gravity Industries Entity within the EEA to a Gravity Industries Entity outside the EEA) is that the individuals whose personal information is transferred must be able to benefit from certain rights in respect of that information. As a result, our customers, employees, contractors and business contacts whose personal information is transferred from a Gravity Industries Entity within the EEA to Gravity Industries Entities outside the EEA will be able to benefit from the following rights:
to be informed about the uses and disclosures made of the information;
to be able to obtain a copy of this document on request;
to receive a copy of the data privacy rules and any of the relevant practical procedures as may be required to enforce their rights under the Privacy Policy through a data protection supervisory authority based in the EEA of competent jurisdiction or through a court of competent jurisdiction if a complaint cannot be resolved through the Gravity Industries complaints procedure;
to be replied to in a reasonable time and to the extent reasonably possible about queries concerning the processing of their personal information;
to make complaints, obtain appropriate redress and, where appropriate, receive compensation for any damage suffered as a result of a breach by the Gravity Industries Entities;
to lodge a complaint with an EEA data protection supervisory authority with competent jurisdiction and/or to take action through a court to enforce compliance by the Gravity Industries Entities with all applicable principles, rules and practical procedures set out in the Privacy Policy. These rights will only apply to personal information transferred in the circumstances described above.
It is Gravity Industries’ aim to try to deal with any complaints arising in connection with our
Privacy Policy as quickly as possible and the complaints procedure is set out below.
If you have any complaint about the way in which your personal information has been handled, you may raise the matter with the CEO. Complaints should be made in writing.
Gravity Industries is committed to protecting personal data and takes any complaint seriously and ensures it is dealt with fairly and effectively. See the “contact us” section to make your complaint.
We aim to resolve all issues in a timely manner, and in any event within one month (or as mandated by local law), unless the complexity or number of your complaints is such that we need up to a further two months. If resolution within one month is not possible because a more detailed investigation is required, we will keep in regular contact with you to ensure that you are kept informed. If you are not happy with the outcome, you have the right to lodge a complaint with an EEA data protection supervisory authority with competent jurisdiction and/or to take action through a court to enforce your rights in the jurisdiction of the Gravity Industries Entity responsible for exporting the information from the EEA. If you wish to make a claim against Gravity Industries as a result of an alleged breach of the Privacy Policy that may result in compensation being payable, if you can establish facts which show that it is likely that the damage has occurred because of the breach of the Privacy Policy by one or more of the Gravity Industries Entities, the Gravity Industries Entity responsible for exporting the personal information from the EEA under the Privacy Policy will accept the burden of proof to demonstrate that liability for any breach which has resulted in the claim for compensation.
If you have any questions regarding this document, or any other data privacy issues, please contact us at: office@gravity.co