Privacy policy

GRxplore operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register, place an order (online, via phone, or in-store), subscribe to our newsletter, or contact us. This may include your name, billing/shipping address, email address, phone number, and payment details (such as credit card information).

Additionally, we automatically collect certain information about your device and interaction with our Services through cookies and similar technologies, including your IP address, browser type, and browsing behavior. This helps us improve your experience and ensure the security of our platform.

Children's Privacy: Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

How do we use your information?

We utilize the personal information collected via our Services to support our business operations and provide a secure, customized user experience. The primary purposes include:

  • Transactional Execution: To execute and finalize purchase agreements, including payment processing and logistics.

  • Customer Support Management: To review, address, and document client inquiries, feedback, or correspondence across all communication channels.

  • Service & Product Optimization: To conduct market research and analyze website metrics to refine our product offerings and digital infrastructure.

  • Marketing Communications: To distribute promotional materials, loyalty rewards, and newsletters, subject to your prior consent.

  • Risk Mitigation & Legal Compliance: To monitor for fraudulent behavior, protect corporate and third-party assets, and adhere to mandatory legal frameworks.

Regulatory Framework (UK & EEA Compliance):
Pursuant to applicable data protection laws, our processing activities are justified under the following legal bases: Contractual Necessity (for order completion); Consent (for promotional engagement); Legitimate Business Interests (for platform development and security); and Legal Obligations (for statutory compliance).

Cookies and Tracking Technologies

To provide and improve our Services, we use cookies, pixels, and similar technologies. Cookies are small data files that are placed on your device or browser and allow us to recognize your browser or device, remember your preferences, and understand how you interact with our website. You can control or disable cookies through your browser settings; however, please note that disabling certain cookies may affect the functionality of our Services. We may also use analytics cookies (e.g., Google Analytics) to help us understand site usage and improve our offerings.

Relationship with Shopify

The Services are hosted by Shopify Inc. They provide us with the e-commerce platform that allows us to sell our products and services. Shopify collects and processes your personal information to provide, secure, and improve its services, as well as to enable certain enhanced features for our store (such as analytics and fraud prevention). While we are the primary data controller for the information you provide to us, Shopify may also act as a data controller or processor for specific activities in accordance with its own policies.

We encourage you to review the Shopify Consumer Privacy Policy to learn more about how they handle your data and how you can exercise your rights regarding their processing. You may also access the Shopify Privacy Portal to manage your privacy preferences directly with them.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Security and Retention of Your Information

We implement appropriate technical and organizational measures to protect the personal information we process. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When we no longer need your data for these purposes, we will securely delete or anonymize it. The specific retention period depends on various factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know: You may have a right to request access to personal information that we hold about you.

  • Right to Delete. You may have a right to request that we delete personal information we maintain about you.

  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.

  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

  • Right to Opt out of Sale or Sharing for Targeted Advertising: Depending on where you reside, you may have a right to opt out of the "sale" or "share" of your personal information for cross-context behavioral advertising. To opt out, email us at info@grxplore.com with "CCPA Opt-Out" in the subject line.

  • Managing Communication Preferences: We may send you promotional emails. You may opt out of receiving these at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you have made.

For UK and EEA Residents: Subject to exceptions and limitations provided by local law, you may also have the right to:

Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise any of these rights by contacting us using the details provided below. We may need to verify your identity before processing your request, as permitted or required under applicable law. You may also designate an authorized agent to make requests on your behalf.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. 

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us or lodge your complaint with your local data protection authority. For the EEA, you can find a list of responsible data protection supervisory authorities on the official website of the European Data Protection Board.

International Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in. If we transfer your personal information out of the European Economic Area (EEA) or the United Kingdom, we will rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the UK competent authority, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by applicable law.

Contact Us

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

Email: info@grxplore.com

Mail: GR XPLORE (HONG KONG) LIMITED, Flat/Rm B38, 18/F, Tak Wing Industrial Building, 3 Tsun Wen Road, Tuen Mun, New Territories, Hong Kong SAR.

For the purpose of applicable data protection laws, we are the data controller of your personal information.