Privacy policy
Last updated: Friday, October 2nd 2026
Who we are
Éacht Limited trading as Grova (“we”, “us”) is responsible for the personal information we process when you visit grovawellness.com, purchase our products or contact us.
Our address is 77 Camden Street Lower, Dublin, D02 XE80, Ireland. You can contact us at hello@grovawellness.com.
Information we collect
We collect information you provide when ordering, managing a subscription or account, signing up for emails, submitting reviews or contacting us. This includes your name, email, telephone number, delivery and billing addresses, order and subscription details, payment status, preferences and correspondence.
We also receive payment and delivery updates from our service providers, and information about website activity from Shopify and analytics or advertising services. This may include IP addresses, device information, pages viewed, interactions and cookie identifiers.
We do not ask you to provide health information. Please avoid including sensitive medical details in messages or reviews.
Information needed to process payment, deliver products or manage your order is necessary to fulfil your purchase. Without it, we may be unable to provide those services.
How we use your information
| Purpose | Legal basis |
|---|---|
| Process purchases, subscriptions, payments, deliveries and related support | Performance of our contract with you, or steps you request before purchasing |
| Handle statutory returns, maintain required records and meet legal duties | Compliance with legal obligations |
| Respond to other enquiries, prevent fraud, secure our services and resolve disputes | Our legitimate interests in operating and protecting our business, balanced against your rights |
| Send marketing through Shopify Email | Consent, or the limited existing-customer exception where all applicable conditions are met; our legitimate interest in promoting similar products applies where that exception is used |
| Non-essential tracking, personalised advertising and associated analytics | Consent where required |
| Manage reviews, feedback and affiliate referrals | Our legitimate interests in managing feedback and referral relationships; consent where required for tracking or separate promotional use |
You can unsubscribe from marketing using the link in our emails or by contacting us. Essential order and subscription communications are separate from marketing.
Cookies and similar technologies
Our website uses cookies and similar technologies for essential functions, such as the shopping basket, and for analytics, personalisation, affiliate attribution and advertising. Non-essential technologies require consent where applicable law requires it. Browser controls can also restrict cookies, although blocking essential cookies may affect website functionality.
Advertising services may use browsing and purchase activity to infer interests and measure or personalise advertisements.
Who receives your information
We share relevant information with providers supporting our store, payments, subscriptions, email, customer service, reviews, delivery tracking, analytics and advertising. These include Shopify and, where used for the relevant service, Loop Subscriptions, Judge.me and advertising platforms such as Meta and Google.
Our fulfilment partners and delivery providers receive the order, address and contact information needed to pack, deliver and manage returns.
Reviews submitted for publication may be displayed publicly. We may also disclose information to professional advisers, authorities where legally required, or parties involved in a business transfer, subject to appropriate safeguards.
Shopify hosts our store and processes information to provide its services. For certain services, Shopify acts independently as a controller. Where Shopify Network Intelligence and Enhanced Services are enabled, Shopify may combine information about interactions with our store with information from other merchants and Shopify to improve and personalise services and advertising. See Shopify’s Consumer Privacy Policy and privacy choices.
International transfers
Our providers may process information outside the European Economic Area or the UK. Where required, transfers must be covered by an adequacy decision or appropriate safeguards, such as EU Standard Contractual Clauses and applicable UK transfer arrangements. Contact us for information about the safeguards relevant to your data or to request a copy.
Retention and security
We retain information according to its purpose and applicable legal requirements. Tax and accounting records are generally retained for six years, or longer where required by law. Other order, subscription and support information is retained for the relevant relationship and as needed to resolve outstanding issues or legal claims.
Marketing information is retained while there is a valid basis to use it. Limited consent and suppression records may be retained to demonstrate compliance and honour unsubscribes. Analytics information should be deleted or anonymised when no longer needed for its stated purpose.
We use appropriate technical and organisational measures to protect personal information.
Your rights
Subject to applicable conditions, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests and object to direct marketing at any time.
Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Contact hello@grovawellness.com to exercise your rights. We may request proportionate information to verify your identity. We normally respond within one month and will explain any legally permitted extension.
You can complain to the Irish Data Protection Commission, the UK Information Commissioner’s Office where applicable, or your local supervisory authority.
Children and changes
Our services are not directed at children under 16. If you believe a child has provided personal information, please contact us.
We may update this policy to reflect changes in our services or legal obligations. We will update the date above and provide additional notice where required.