Privacy Policy

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, GrintaGym, as part of the buying and selling process we collect the personal information you give us, such as your name, address, and email address.

When you browse GrintaGym, we also automatically receive your computer's IP address, which helps us learn about your browser and operating system. Email marketing (if applicable): with your permission, we may send you emails about GrintaGym, new products, and other updates.

SECTION 2 – CONSENT

How do you get my consent?
When you provide personal information to complete a transaction, verify your credit card, place an order, arrange a delivery, or return a purchase, we imply that you consent to us collecting and using it for that specific reason only.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask for your express consent or give you the opportunity to say no.

How do I withdraw my consent?
If, after opting in, you change your mind, you may withdraw your consent for us to contact you or to continue collecting, using, or disclosing your information, at any time, by contacting us at grintagym.support@gmail.com.

SECTION 3 – DISCLOSURE

We may disclose your personal information if required by law or if you violate our Terms of Service.

SECTION 4 – SHOPIFY

GrintaGym is hosted on Shopify Inc., which provides the e-commerce platform that lets us sell our products and services to you. Your data is stored through Shopify's data storage, databases, and general application, on a secure server behind a firewall.

Payment: If you use a direct payment gateway, Shopify stores your credit card data, encrypted per PCI-DSS. Transaction data is retained only as long as necessary to complete the transaction, then deleted.

All direct payment gateways adhere to PCI-DSS standards, managed by the PCI Security Standards Council (Visa, MasterCard, American Express, Discover). These requirements help ensure secure handling of credit card information by GrintaGym and its service providers.

For more information, see Shopify's Terms of Service or Privacy Statement.

All orders are processed in US dollars.

SECTION 5 – THIRD-PARTY SERVICES

Third-party providers we use will only collect, use, and disclose your information to the extent necessary to perform their services for us. Some providers, such as payment gateways, have their own privacy policies governing the information we must provide for purchase-related transactions — we recommend reviewing them. Note that some providers may be located in a different jurisdiction than you or us; if so, your information may become subject to that jurisdiction's laws (e.g., a US-based payment gateway may make your data subject to US legislation, including the Patriot Act).

Once you leave the GrintaGym website or are redirected to a third-party site, you are no longer covered by this Privacy Policy. We are not responsible for the privacy practices of other sites and encourage you to read their policies.

Text marketing: By subscribing to text notifications, you agree to receive recurring automated marketing messages at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe, HELP for help. Msg & data rates may apply.

SECTION 6 – SECURITY

We take reasonable precautions and follow industry best practices to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Credit card information is encrypted via SSL and stored with AES-256 encryption. We follow all PCI-DSS requirements and additional industry-standard practices.

SECTION 7 – COOKIES

  • _session_id — unique token, session — stores session info (referrer, landing page, etc.)
  • _shopify_visit — no data held, persists 30 min from last visit — tracks visit count
  • _shopify_uniq — no data held, expires midnight next day — counts single-customer visits
  • cart — unique token, persists 2 weeks — stores cart contents
  • _secure_session_id — unique token, session
  • storefront_digest — unique token, indefinite — used if the shop is password-protected

SECTION 8 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you have given consent for a minor dependent to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We may modify this policy at any time; changes take effect immediately upon posting. Material changes will be flagged here. If GrintaGym is acquired or merged, your information may be transferred to the new owners.

Questions and Contact Information

To access, correct, amend, or delete your personal information, or to register a complaint, contact our Privacy Compliance Officer at grintagym.support@gmail.com.