Privacy policy
Privacy Policy
Last updated: August 9, 2026
Gravex Parts operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a personalised shopping experience (the “Services”). Gravex Parts is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies in relation to the collection, processing and disclosure of personal information.
Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how we handle personal information as described below.
Personal Information We Collect or Process
“Personal information” means information that identifies you or another person, or that can reasonably be linked to you or another person. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an individual. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal information:
- Contact details, including your name, billing address, shipping address, telephone number and email address.
- Financial information, including payment-card and financial-account information, transaction details, payment method and payment confirmation.
- Account information, including your username, password, security preferences and account settings.
- Transaction information, including products you view, place in your cart or wishlist, purchase, return, exchange or cancel, and your previous transactions.
- Communications with us, including information you provide when you contact customer support or otherwise communicate with us.
- Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
- Usage information, including information about how and when you interact with or navigate the Services.
Sources of Personal Information
We may collect personal information:
- Directly from you, for example when you create an account, use the Services, place an order or communicate with us.
- Automatically through the Services, including from your device and through cookies and similar technologies.
- From our service providers, when they collect or process information on our behalf to provide technology or other services.
- From our business partners and other third parties.
How We Use Personal Information
Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:
- Providing, personalising and improving the Services. This includes performing our contract with you, processing payments, fulfilling and shipping orders, remembering preferences, sending account and order notifications, processing purchases, returns, exchanges and other transactions, managing customer accounts, facilitating reviews, providing customer support and personalising the shopping experience.
- Marketing and advertising. We may use personal information to send marketing or promotional communications by email, SMS or post, where permitted, and to display advertising for our products or Services, including advertising based on previous purchases, cart activity or interactions with the Services.
- Security and fraud prevention. We use personal information to authenticate accounts, provide a secure shopping and payment experience, detect and investigate potentially fraudulent, illegal, unsafe or malicious activity, protect public safety and secure the Services.
- Communicating with you. We use personal information to respond to questions, provide support and maintain our business relationship with you.
- Legal purposes. We use personal information to comply with applicable law, respond to valid legal process or government requests, investigate or participate in disputes and legal proceedings, and enforce or investigate possible violations of our terms and policies.
If you create an account, you are responsible for keeping your login credentials secure. Do not share your password or other access credentials with anyone else.
How We Disclose Personal Information
We may disclose personal information to third parties for legitimate purposes subject to this Privacy Policy, including:
- Shopify, vendors and other service providers that perform services on our behalf, such as IT management, payment processing, analytics, customer support, cloud storage, fulfilment and shipping.
- Business and marketing partners that help us provide marketing services and advertising. These partners process information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of certain sharing used for targeted advertising.
- Third parties when you direct, request or consent to the disclosure, for example when necessary to ship products or when you use third-party social-media widgets or login integrations.
- Our affiliates or companies within our corporate group, where applicable.
- Parties involved in a business transaction such as a merger, acquisition, restructuring or insolvency.
- Government bodies, regulators, courts or other parties when required to comply with legal obligations, enforce our terms or policies, or protect the Services, our rights or the rights of our customers and others.
Our Relationship with Shopify
The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve the Services. Information you submit through the Services is transmitted to and shared with Shopify and may also be shared with third parties located outside your country of residence when necessary to provide the Services.
We may use Shopify enhanced features that combine information from your interactions with our store with information from your interactions with Shopify and other merchants. In these circumstances, Shopify is responsible for its processing of your personal information, including responding to requests relating to that processing.
For more information, read Shopify’s Consumer Privacy Policy. Depending on where you live, you can exercise certain rights relating to information processed by Shopify through the Shopify Privacy Portal.
Third-Party Websites and Links
The Services may contain links to websites or online platforms operated by third parties. If you follow a link to a third-party service, review its privacy and security policies and terms. We are not responsible for the privacy, security, accuracy or reliability of third-party services. Information posted in public or semi-public areas, including third-party social platforms, may be viewed and used by others. The inclusion of a link does not by itself imply our endorsement of the third party or its content.
Children’s Data
The Services are not intended for use by children, and we do not knowingly collect personal information from children below the age of majority in their jurisdiction. If you are a parent or guardian and believe a child has provided personal information to us, contact us to request its deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell”, as those terms may be defined by applicable law, personal information relating to individuals under 16 years of age.
Security and Retention
No security measure is perfect or impenetrable, and we cannot guarantee absolute security. Information sent to us may not be secure while in transit. Please do not use unsecured channels to send sensitive or confidential information.
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including maintaining accounts, providing the Services, meeting legal and accounting obligations, resolving disputes and enforcing agreements and policies. The appropriate retention period depends on the nature of the information and the reason it was collected.
Your Rights and Choices
Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may be subject to conditions, limitations and exceptions under applicable law:
- Access and information: request access to personal information we hold about you.
- Deletion: request deletion of personal information we hold about you.
- Correction: request correction of inaccurate personal information.
- Portability: request a copy of certain personal information in a portable format and, where applicable, request its transfer to another organisation.
- Marketing preferences: unsubscribe from promotional emails using the unsubscribe option included in those messages. You may still receive non-promotional communications relating to your account, purchases or transactions.
If you live in the European Economic Area or the United Kingdom, you may also have the right, subject to applicable conditions and exceptions, to object to or restrict certain processing and to withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You may exercise applicable rights through options made available in the Services or by contacting us using the details below. We may need to verify your identity before processing a request. You may appoint an authorised representative where permitted by law, but we may require evidence of that authority and may ask you to verify your identity directly. We will not discriminate against you for exercising your privacy rights.
Complaints
If you have a complaint about how we process personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our response or lodge a complaint with your local data-protection authority. A list of data-protection authorities in the EEA is available from the European Data Protection Board.
International Transfers
Your personal information may be transferred, stored and processed outside the country where you live. When personal information is transferred outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms where required, such as the European Commission’s Standard Contractual Clauses, equivalent UK agreements or an applicable adequacy decision.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will publish the revised version on this website, update the “Last updated” date and provide any notice required by applicable law.
Contact
If you have questions about this Privacy Policy, our privacy practices or your rights, contact us at support@gravexparts.com or write to:
Gravex Parts
Gelderhorst 20
7207 BH Zutphen
The Netherlands
For the purposes of applicable data-protection law, Gravex Parts is the controller of your personal information.