Privacy Policy

Growth District Group Ltd, registered in England and Wales under company number 17369737. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. You can contact us about privacy at info@grow-district.com.

• Name and contact information, such as your email address.
• Account information if you sign in to a customer account.
• Delivery and billing information you provide at checkout.
• Order and transaction information, including what you bought and the status of your order.
• Support communications, such as emails you send us.
• Technical, security and device information, such as IP address, browser type and log data.
• Cookie and browser storage information needed to run the basket, checkout and account areas.
• Marketing preferences, only where you have actually given them to us.

• Processing your orders and payments.
• Delivering your purchases.
• Managing your customer account.
• Handling support requests, returns and refunds.
• Preventing fraud and keeping the website secure.
• Meeting our legal and accounting obligations.
• Improving the website, where we are legally permitted to do so.
• Sending marketing only where we have an appropriate permission or other lawful basis.

Depending on the purpose, we rely on performance of a contract with you, our legitimate interests in running and protecting the business, compliance with a legal obligation, or your consent.

Payments are taken through the Shopify checkout and its payment providers. Full payment card details are handled by those providers and are not stored directly by Grow District. We receive limited information such as confirmation of payment and the order details.

• Shopify and the payment providers used at checkout.
• Product fulfilment partners who prepare and dispatch orders.
• Delivery and courier providers.
• Hosting and technical service providers who support the website.
• Professional advisers, such as accountants and legal advisers.
• Regulators or authorities where we are legally required to disclose information.

We do not sell your personal information.

Some of our service providers process personal information outside the United Kingdom. Where that happens, we take steps to ensure an appropriate level of protection is in place, such as relying on adequacy regulations or standard contractual clauses with UK safeguards.

We keep personal information for as long as it is necessary for the purpose it was collected, and for as long as we are required to keep it to meet legal, tax, accounting or dispute-resolution obligations. When information is no longer needed, it is deleted or anonymised.

We use appropriate technical and organisational measures to protect personal information, including encrypted connections to the website, access controls, and reliance on established platform providers for checkout and payment handling. No online service can be guaranteed to be completely secure.

Depending on the circumstances, you may have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete information where applicable.
• Ask us to restrict how we use your information.
• Object to certain processing, including direct marketing.
• Request portability of information you provided to us.
• Withdraw consent at any time where we rely on consent.

To exercise any of these rights, email info@grow-district.com.

If you are unhappy with how we have handled your personal information, please contact us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Information about the cookies and browser storage this website uses is set out in our Cookie Policy.

We may update this policy from time to time. The date at the top of this page shows when it was last updated.