Loading
Compliance
Last updated
GreytoneFits is a direct-to-consumer clothing store. This policy explains what we collect when you create an account, shop, and check out, and what we deliberately do not collect.
Creating an account stores your name, email address and (optionally) phone number. Browsing and adding items to a cart before you create an account uses a temporary, anonymous session so your cart is not lost — it carries no personal information until you sign up or sign in.
Shipping and billing addresses you save are stored against your account so you do not have to re-enter them. When you place an order, we store a permanent copy of the address, the items, prices and order status at that point in time — this copy does not change even if you later edit or delete a saved address, so your order history and any invoices stay accurate.
We store the amount, currency, a payment status (such as pending, paid or refunded) and Razorpay’s own reference identifiers for each payment attempt, so we can match a payment to an order and handle refunds. We never store your card number, CVV or bank details — those exist only with Razorpay.
So that a rating can be revised rather than duplicated, we set a strictly necessary cookie named gtf_vid containing a randomly generated identifier. It ishttpOnly, meaning scripts on the page cannot read it, and it is not linked to any other information about you. It expires after one year. It is not used for advertising or profiling.
If you rate a product or outfit, we store the score (1–5), which item it applies to, your anonymous visitor identifier and a salted hash of your IP address. The hash exists only to detect abuse, such as one network flooding an item with ratings.
If you subscribe, we store your email address, the date you subscribed, which page you subscribed from and a salted IP hash. We use it to send the newsletter and nothing else. Every message contains a one-click unsubscribe link, and you may also ask us to remove you.
If you use the contact form we store your name, email address, subject, message, a salted IP hash and a truncated browser identification string, so that we can reply and so that we can identify automated abuse. Messages are delivered to our inbox via Resend, our email provider.
Recently viewed products and recent searches are kept in your browser’s localStorage. They are never transmitted to us as a history, and clearing them (there is a “Clear” control beside each) removes them permanently.
Where the UK GDPR or EU GDPR applies, we rely on: legitimate interests for the anonymous visitor identifier and abuse-prevention hashes, which are necessary to operate the site securely; and consent for newsletter subscriptions, which you may withdraw at any time.
We use a small number of processors, and no data is sold or shared for advertising:
A small number of older catalog entries still carry a historical link to an external retailer (see our Affiliate Disclosure). If you follow one of those links, the destination site sets its own cookies and applies its own privacy policy, which we have no control over.
Depending on where you live, you may have the right to access, correct, delete, port or object to the processing of your personal data. You can update your name, phone number and saved addresses at any time from your account. For anything else — including deleting your account — contact us and we will respond within 30 days.
Note that ratings are stored against an anonymous identifier and are not linked to your account, so we generally cannot locate a specific person’s ratings — which is by design.
This site is not directed at children under 13, and we do not knowingly collect data from them.
If this policy changes materially we will update the date at the top of this page. Your continued use of the site after a change constitutes acceptance of the revised policy.
Questions or requests about privacy can be sent through our contact page.