Privacy policy
Privacy policy
This Privacy Policy describes how gramms (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from gramms.co or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use or access any of the Services.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law. We encourage you to review this policy periodically.
How we collect and use your personal information
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
What personal information we collect
The types of personal information we obtain about you depend on how you interact with our Site and use our Services. "Personal information" refers to information that identifies, relates to, describes, or can be associated with you.
Information you submit directly to us may include:
- Basic contact details including your name, address, phone number, and email address.
- Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information including your username, password, and security questions.
- Shopping information including the items you view, add to your cart, or add to your wishlist.
- Subscription information including your subscription plan, billing cadence, flavor preferences, and recurring payment details, processed through our subscription management platform.
- Customer support information including the information you choose to include in communications with us.
Information we collect through cookies and tracking technologies
We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies ("Cookies"). Usage Data may include device information, browser information, network connection details, IP address, and information about your interaction with the Services.
We and our advertising partners — including Meta (Facebook/Instagram), TikTok, and Google — may use cookies and pixels to serve targeted advertisements, build retargeting audiences, and create lookalike audiences based on your browsing and purchase behavior. You may opt out of interest-based advertising through your browser settings or via the Digital Advertising Alliance at optout.aboutads.info.
Most browsers accept cookies by default, but you can choose to remove or reject them through your browser controls. Please note that blocking cookies may impact your user experience and certain features of the Services.
Our site does not currently respond to Do Not Track (DNT) browser signals.
Information we obtain from third parties
We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:
- Shopify — powers our website, storefront, and order management. See Shopify's privacy policy at shopify.com/legal/privacy.
- Recharge — manages recurring subscription billing, payment method storage, and subscription schedules for subscription customers.
- Payment processors — collect payment information (e.g., credit or debit card information, billing address) to process your payments. gramms does not store full payment card data.
- Advertising and analytics platforms — including Meta, TikTok, and Google, which may collect behavioral data through pixels and SDKs embedded on our Site.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of third-party information or the policies and practices of third parties.
Purchases on Amazon and TikTok Shop new
gramms products are also available through Amazon and TikTok Shop (@drinkgramms). Purchases made through these platforms are governed by Amazon's and TikTok's own privacy policies, respectively. gramms does not receive full payment information or control the personal data collected by these platforms in connection with purchases made there. We encourage you to review their privacy policies before making a purchase.
How we use your personal information
- Providing products and services. To process payments, fulfill orders, send order-related notifications, manage your account, arrange shipping, facilitate returns and exchanges, and manage subscription billing and renewals.
- Marketing and advertising. To send marketing, advertising, and promotional communications by email, text message (SMS), or postal mail, and to show you advertisements for products or services across third-party platforms. You may opt out of marketing emails at any time using the unsubscribe link. You may opt out of SMS marketing by replying STOP to any text message from us.
- Security and fraud prevention. To detect, investigate, or take action regarding possible fraudulent, illegal, or malicious activity.
- Communicating with you. To provide customer support and improve our Services.
How we disclose personal information
We may disclose your personal information to third parties in the following circumstances:
- With vendors and service providers who perform services on our behalf, including Shopify, Recharge, payment processors, shipping and fulfillment partners, customer support tools, data analytics providers, and cloud storage providers.
- With business and marketing partners, including advertising platforms, to serve and measure advertisements. Our partners will use your information in accordance with their own privacy notices.
- When you direct or consent to the disclosure of certain information to third parties.
- With our affiliates or within our corporate group.
- In connection with a business transaction such as a merger, acquisition, or bankruptcy.
- To comply with applicable legal obligations, respond to subpoenas or search warrants, enforce our terms of service, or protect our rights and those of our users.
SMS / text message communications new
With your consent, we may send you text messages (SMS) for order updates, shipping notifications, and marketing communications. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any message from us, or by contacting us at hello@gramms.co. For help, reply HELP. We do not sell or share your phone number with third parties for their own marketing purposes.
User-generated content updated
Our Services enable you to post product reviews and other user-generated content. If you submit content to any public area of the Services, that content will be public and accessible by anyone. gramms may use customer reviews and testimonials in marketing materials, including on our website, social media, and advertising. We do not control who will have access to information you choose to make publicly available and are not responsible for the privacy or security of such information.
Data breach notification
In the event of a data breach that affects your personal information, we will notify you as required by applicable law. Notification will be provided via email to the address on file or through a prominent notice on our website, depending on the nature and scope of the incident.
Third-party websites and links
Our Site may provide links to websites or other online platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on them. Our inclusion of such links does not imply any endorsement of their content or operators.
Children's data
The Services are not intended for use by children under 13, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@gramms.co to request deletion.
Security and retention of your information
We implement reasonable technical and organizational measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend you do not use unsecured channels to communicate sensitive information to us.
We retain your personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations (including applicable tax and financial recordkeeping requirements), resolve disputes, and enforce our agreements. Order data is generally retained for a minimum of seven years in accordance with applicable tax law.
Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Right to access / know. Request access to the personal information we hold about you.
- Right to delete. Request deletion of personal information we maintain about you.
- Right to correct. Request correction of inaccurate personal information.
- Right of portability. Receive a copy of your personal information and request transfer to a third party, in certain circumstances.
- Restriction of processing. Ask us to stop or restrict our processing of your personal information.
- Withdrawal of consent. Where we rely on consent to process your information, withdraw that consent at any time.
- Opt out of marketing. Unsubscribe from marketing emails at any time using the link in any email. Opt out of SMS by replying STOP.
- Appeal. Appeal our decision if we decline to process your request by replying directly to our denial.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before responding to your request. You may designate an authorized agent to make requests on your behalf with appropriate proof of authorization.
California residents
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.
Categories of personal information collected. In the past 12 months we have collected identifiers (name, email, address, phone number, IP address), commercial information (purchase history, subscription details), internet or network activity (browsing behavior, cookie data), and geolocation data (inferred from IP address).
"Sharing" for cross-context behavioral advertising. We may "share" (as defined under CPRA) personal information with advertising partners, including Meta and TikTok, for cross-context behavioral advertising purposes. You have the right to opt out of this sharing. To opt out, contact us at hello@gramms.co or use the opt-out controls available through your browser or device settings.
No "sale" of personal information. gramms does not "sell" personal information as that term is defined under California law.
Sensitive personal information. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.
To exercise your California privacy rights, contact us at hello@gramms.co. We will respond within 45 days as required by law.
International users
We may transfer, store, and process your personal information outside the country you live in, including the United States. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as applicable.
Complaints
If you have complaints about how we process your personal information, please contact us using the details below. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
Contact
For questions about this Privacy Policy, to exercise your rights, or to opt out of marketing communications, please contact us at hello@gramms.co.