Privacy Policy

Golden Season LLC, trading as The Groom Lab, operates this store and website, including all related information, content, features, tools, products and services (the "Services"). This Privacy Policy describes how we collect, use and disclose personal information when you visit, use or make a purchase through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of personal information.

1. Who We Are

The data controller responsible for your personal information is:

Golden Season LLC
312 W 2nd St Unit #A9192
Casper, WY 82601
United States
Email: hello@thegroomlab.shop

2. Personal Information We Collect or Process

"Personal information" means information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we collect or process:

Contact details including name, address, billing address, shipping address, phone number and email address.
Payment information including payment method, transaction details and payment confirmation. Full card and bank details are handled solely by our payment providers, not by us.
Account information including username, password, preferences and settings.
Transaction information including items viewed, added to cart, purchased, returned, exchanged or cancelled, and your order history.
Communications including the content of your messages to our customer support.
Device information including device, browser or network details, IP address and other identifiers.
Usage information including how and when you use and navigate the Services.

3. Sources of Personal Information

Directly from you, when you create an account, use the Services or contact us.
Automatically through the Services, from your device and through cookies and similar technologies.
From our service providers, when they process information on our behalf.
From partners or other third parties.

4. How We Use Personal Information, and Our Legal Bases

Where the UK GDPR or EU GDPR applies to you, the legal basis for each purpose is shown below.

Providing the Services. Processing payments, fulfilling and shipping orders, handling returns and exchanges, managing your account and remembering your preferences. Legal basis: performance of a contract (Article 6(1)(b)).
Marketing and advertising. Sending newsletters and promotional messages and showing you relevant advertising. Legal basis: consent (Article 6(1)(a)). Marketing emails and text messages are sent only with your prior consent, or where permitted to existing customers about similar products, and you can opt out at any time.
Security and fraud prevention. Authenticating accounts, securing payments and detecting or preventing fraudulent, unsafe or unlawful activity. Legal basis: legitimate interests (Article 6(1)(f)).
Communicating with you. Providing customer support and responding to your enquiries. Legal basis: performance of a contract and legitimate interests (Articles 6(1)(b) and 6(1)(f)).
Legal reasons. Complying with applicable law, responding to valid legal process, and establishing or defending legal claims. Legal basis: legal obligation and legitimate interests (Articles 6(1)(c) and 6(1)(f)).

5. How We Disclose Personal Information

With Shopify, vendors and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
With business and marketing partners, who use information under their own privacy notices.
Where you direct or consent to disclosure, such as through social media widgets or login integrations.
With our affiliates or within our corporate group.
In connection with a business transaction, to comply with legal obligations, to enforce our terms, and to protect our rights and those of our users.

6. Services We Use

Shopify. The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit may be transmitted to Shopify and to third parties located in countries other than where you live. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Shopify Payments. For processing card payments. Full card details are handled only by Shopify Payments.

7. Cookies and Similar Technologies

We use cookies and similar technologies. Strictly necessary cookies are required for the store to function and are set without consent. All other cookies, including analytics and advertising cookies, are set only with your consent where consent is required, including in the UK under the Privacy and Electronic Communications Regulations and in the EU under the ePrivacy Directive. You can withdraw consent at any time through the cookie settings on our website.

8. Third-Party Websites and Links

The Services may link to websites operated by third parties. If you follow those links, review their privacy and security policies. We are not responsible for the privacy or security of those sites.

9. Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children under 16, or under 13 where local law sets that threshold. If you are the parent or guardian of a child who has provided us with personal information, contact us and we will delete it.

10. Security and Retention

10.1 No security measure is perfect. We recommend you do not send confidential or sensitive information to us through unsecured channels.

10.2 We retain personal information for the following periods:

Order and transaction data: 7 years, to meet tax and accounting obligations.
Account data: while your account is active, and up to 2 years after your last activity.
Marketing and newsletter data: until you unsubscribe or withdraw consent. Records of consent are kept for 2 years afterwards.
Customer service data: up to 3 years from your last interaction.

11. Your Rights

Depending on where you live, you have some or all of the following rights.

Access. Request access to the personal information we hold about you.
Deletion. Request that we delete your personal information, subject to legal retention requirements.
Correction. Request that we correct inaccurate information.
Portability. Receive a copy of your information in a structured, commonly used, machine-readable format, or ask us to transfer it.
Restriction. Ask us to restrict processing in certain circumstances.
Objection. Object to processing based on legitimate interests. You may object to direct marketing at any time, without giving a reason.
Withdraw consent. Withdraw consent at any time, with effect for the future. This does not affect processing carried out before withdrawal.
Opt out of sale or sharing. Opt out of the sale or sharing of your personal information for targeted advertising, where applicable law provides this right.

To exercise any of these rights, email hello@thegroomlab.shop. We will not discriminate against you for doing so. We may need to verify your identity first. You may appoint an authorised agent, provided they supply proof of authorisation. We respond within the timeframes required by applicable law.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act as amended gives you the right to know what personal information we collect and why, to delete it, to correct it, to opt out of its sale or sharing for targeted advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

To make a request, email hello@thegroomlab.shop. We respond within 45 days. You may also contact the California Attorney General at oag.ca.gov.

13. International Transfers

We are based in the United States, so personal information is transferred to, stored and processed outside your country of residence. Where information is transferred from the UK or the European Economic Area, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum, the European Commission's Standard Contractual Clauses, or the recipient's participation in the EU-U.S. or UK Extension of the Data Privacy Framework.

14. Complaints

If you have a complaint about how we handle personal information, contact us at hello@thegroomlab.shop. You also have the right to complain to your data protection authority:

United Kingdom: Information Commissioner's Office, ico.org.uk
Ireland: Data Protection Commission, dataprotection.ie
Australia: Office of the Australian Information Commissioner, oaic.gov.au
New Zealand: Office of the Privacy Commissioner, privacy.org.nz
Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
United States: Federal Trade Commission, ftc.gov, or your state attorney general

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. We will post the revised version on this website and update the date below.

16. Contact

Email: hello@thegroomlab.shop

Your cart is empty

Cart