Last updated: 24th of September 2026
We want you to understand how we use your information when you take part in a Grova customer survey.
Participation is voluntary. You can choose not to participate or skip optional questions. Your decision and answers will not affect your orders, subscription, or access to customer support.
Who is responsible for your information?
Éacht Limited, trading as Grova, is the data controller responsible for your personal information in this survey.
Address: 77 Camden Street Lower, Dublin 2, D02 XE80, Ireland.
Privacy contact: hello@grovawellness.com
This notice explains our handling of survey information. For information about purchases, website use, and marketing subscriptions, see our main Privacy Policy.
What information we collect
Depending on which questions you answer, we collect:
- Your experience of using Grova, including when you started, frequency of use, and whether you have paused or stopped.
- Your reported energy levels, emotional wellbeing, concentration, and any unwanted effects.
- Broad information about other changes that may have affected your experience.
- Any additional feedback you choose to provide.
Some answers may reveal information about your health. We treat these as sensitive personal information.
We use limited information already held in our customer records to select eligible customers and send survey invitations. We do not link your survey answers to those records, and we cannot tell from your customer account whether you completed the survey. You may therefore receive a reminder after responding.
Please do not include other people’s personal information or unnecessary medical details in your answers.
How we protect your identity
We do not ask for your name or email address in the survey, and we do not link your answers to your Shopify customer account.
To help prevent duplicate submissions, Tally assigns a randomly generated Respondent ID that is stored in your browser’s local storage. It recognises the browser used to respond; it does not verify your identity or customer status. We use Respondent ID rather than IP address for duplicate prevention.
Your responses are kept confidential. Please avoid including names, contact details, or other identifying information in written answers. We publish only combined results that do not identify individual respondents.
Why we use your information
We use survey information to:
- Understand customers’ experiences and improve our products and service.
- Analyse patterns in product use and reported experiences.
- Check the quality of the survey data.
- Produce combined statistics and summaries, which may appear on our website and in marketing materials.
We will not publish your identity or identifiable individual responses. We will not publish your written feedback as an individual testimonial without asking for separate permission.
We will not use your wellbeing answers to personalise advertising or change your customer service.
Our legal basis
We rely on your consent to collect and analyse your survey responses and produce aggregate results for publication, under Article 6(1)(a) of the GDPR.
Where your answers reveal health information, we rely on your explicit consent under Article 9(2)(a).
We rely on our legitimate interests in understanding customer experiences to select eligible customers and administer survey invitations, subject to applicable electronic marketing rules and your communication preferences. Taking part does not subscribe you to marketing.
Who processes or receives the information?
Access is restricted to authorised people working on the survey and service providers supporting it:
- Tally, which hosts the survey and stores submissions on our behalf.
- Shopify, which holds our customer records and supports invitation and reminder emails. We do not send individual survey answers to Shopify.
We may share information where required by law. We do not sell your survey responses.
Tally states that its form data is stored in Europe. Other providers may process information outside the European Economic Area. Where this happens, we use the applicable GDPR transfer arrangements, such as an adequacy decision or Standard Contractual Clauses. You can contact us for details of the safeguards relevant to your information.
How long we keep it
We retain individual survey responses and associated Respondent IDs for up to 12 months after the survey closes. If you withdraw consent and we can reliably identify your response, we will delete it sooner unless a legal requirement permits or requires retention.
At the end of this period, we delete or irreversibly anonymise the survey information, including relevant exports and copies. Deletion from providers’ backup or recovery systems follows their applicable deletion schedules.
We may retain genuinely anonymous statistics, summaries, and survey methodology records for as long as needed to document and explain published findings.
Your existing order and customer records remain subject to the separate retention arrangements in our main Privacy Policy.
Withdrawing consent and your rights
You can withdraw your consent by contacting hello@grovawellness.com. Withdrawal does not affect processing carried out lawfully before you withdrew consent.
Because we do not link responses to names, email addresses, or customer accounts, your email address alone will not allow us to locate your submission. If you request access, correction, or deletion, we may ask for additional information to help identify your response.
Where we can reliably identify it, we will act on your request in accordance with applicable data protection law. If we cannot identify your response, we may be unable to remove your individual contribution.
Once information has been irreversibly anonymised, we can no longer identify or remove your individual contribution. Published anonymous aggregate results may therefore remain available.
Subject to the applicable conditions, you can request access to, correction, deletion, restriction, or portability of your personal information. You can also object to processing based on legitimate interests.
You can complain to the Irish Data Protection Commission, or your local data protection supervisory authority.
We do not use this survey to make automated decisions that produce legal or similarly significant effects on you.