Privacy policy.
What personal data we collect through this site, why, and how you can control it.
Data controller
Greystone Technologies [insert full registered company name, registration number and registered address] is the data controller for personal data collected through this site. Contact [insert privacy/support email] with any privacy questions or requests.
What we collect and why
Order and payment details: when you buy a product, our payment processor Stripe collects your name, contact details, shipping/billing address and payment information directly, to process your order. We receive your order details, email, shipping address and order total, but never your full card number.
Enquiry and contact form details: if you contact us, we collect your name, email and message to respond to your enquiry.
Cart contents: while browsing, your cart is stored only in your browser's local storage. It is not sent to us until you start checkout.
How long we keep data
We keep order records for as long as required for accounting, tax and warranty purposes under applicable law. Enquiry messages are kept only as long as needed to resolve them. [Insert confirmed retention periods once agreed.]
Your rights
If you're in the EU or UK, you have rights under GDPR/UK GDPR to access, correct, delete or export your personal data, and to object to certain processing. Contact us at [insert privacy email] to exercise these rights.
Third parties
We use Stripe to process payments and our contact form provider to relay enquiry emails. Each acts as a processor on our behalf and has its own privacy policy governing how it handles your data.