Privacy Policy

Last updated: 07 September 2025

Grub Club (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Information We Collect

We may collect the following types of personal data when you use our website:

  • Information you provide directly: when you sign up for newsletters, create an account, submit a form, place an order, or contact us (e.g. name, email address, billing/shipping address, phone number, preferences).
  • Order and payment details: when you purchase from our store, we collect information necessary to process your order, such as your name, billing and shipping addresses, email address, and phone number. Payment details (such as credit/debit card numbers) are processed securely by our payment providers (e.g., Stripe, PayPal) and are not stored on our servers.
  • Usage data: information about how you interact with our website (e.g. IP address, browser type, pages visited, time and date of visit).
  • Cookies and similar technologies: used to enhance your browsing experience, remember preferences, and analyse website performance.

2. How We Use Your Data

We only use your personal data when we have a legal basis under GDPR. This may include:

  • Consent: when you sign up to our newsletter or agree to cookies.

  • Contractual necessity: to provide you with services you request, such as order processing, account access, and product delivery.

  • Legitimate interests: to improve our website, ensure security, and gain a better understanding of how users engage with our content.

  • Legal obligations: where we must comply with applicable laws or regulations.

3. Sharing Your Data

We do not sell or rent your personal data. However, we may share information with trusted third parties where necessary:

  • Service providers: such as website hosting, email distribution, and analytics tools (all of whom are GDPR-compliant).

  • Legal requirements: if we are required by law, regulation, or court order.

All third parties are required to keep your information secure and process it only in accordance with our instructions.

4. Cookies

Our website uses cookies to provide the best user experience. These may include:

  • Essential cookies: required for core site functionality.

  • Performance cookies: to analyse website traffic and usage.

  • Preference cookies: to remember settings and choices.

  • Marketing cookies (if applicable): for targeted advertising.

You can control or disable cookies in your browser settings. For more details, see our [Cookie Policy].

5. Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy. For example, we retain:

  • Newsletter sign-up details until you unsubscribe.

  • Order information for as long as required for accounting, legal, or tax purposes.

  • Usage data for a shorter period, unless required for security or legal reasons.

If you create an account, your details and order history will be stored to make future purchases easier. You may request deletion of your account at any time.

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Correct any inaccuracies.

  • Request deletion of your data.

  • Restrict or object to processing.

  • Request data portability.

  • You can withdraw your consent at any time (e.g., by unsubscribing from emails).

  • Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

To exercise any of these rights, please contact us at: hi@grub-club.co.uk.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access.

8. International Transfers

If we transfer data outside the UK/EEA (e.g. to service providers), we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs).

9. Children’s Privacy

Our website is not directed at children under 16, and we do not knowingly collect data from individuals under this age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last revised” date.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us at:

hi@grub-club.co.uk
www.grub-club.co.uk
United Kingdom