Grunge Bunny

We process your personal data on the following legal bases under UK data protection law: to fulfil our contract with you when processing orders, to comply with legal obligations, for our legitimate business interests, and with your consent where applicable (such as for marketing communications from us).

1a - Email Address
Users have the option of creating an account on the Grunge Bunny website. For this purpose, your email address will only be used to identify you at login. Your email address will also be collected when you purchase from our shop, and is used to notify you of updates to your order, and also to identify you when using our Order Tracking feature. Users also have the option of joining our mailing list, and will need to provide their email address for this purpose. If you join our mailing list, we will occasionally contact you with information regarding future releases, promotions and special offers. We do not sell or share your email address with advertising or marketing companies.

1b - Telephone Number
When ordering from our shop, customers have the option to provide a contact telephone number. This will be used to contact you regarding your order, and may also be passed onto a courier service to aid them with their delivery. Some couriers may also request your telephone number to comply with their postage insurance policy. Your telephone number will not be shared with any other third parties.

1c - Address
When ordering from our shop, customers are required to provide an address so that we can deliver the order using a courier service. Your address will be stored safely in our database, and may be shared with payment processors and courier services as required to fulfil your order. We do not sell or share your delivery address with advertising or marketing companies.

2 - How Long We Retain Your Data

2a - Account Data
Your user personal account data will remain in our database for as long as your account remains active and for three years after any account activity, after which point your account will be deleted. Some order records may be retained for up to 6 years to comply with UK tax and accounting regulations.

2b - Order Data
Data regarding orders made from our online shop will remain in our database for up to 6 years to comply with UK tax and accounting regulations.

3 - Cookies

We currently do not use cookies for analytics or tracking.

3a - Age Verification Cookie
We use a cookie to remember your response to our age verification prompt. This cookie ensures that the age check does not appear repeatedly during your visits. It does not collect any personal information beyond your confirmation that you are over 18 years old. It expires after 30 days.

3b - Session Cookie
This website uses essential cookies required for website functionality such as maintaining login sessions or shopping cart contents. These cookies do not collect personal information and are not used for advertising or tracking purposes.

4 - Third Party Data Sharing

Grunge Bunny does not share any data provided by our users with any third party in exchange for cash or services, we do not engage with advertising companies.

Your email address and details regarding your order will be provided to PayPal, a trusted, reputable payment processing service, for the sole purpose of processing payments. PayPal will process your data in accordance with its own Privacy Policy.

Your address, email address and contact telephone number will be shared with a trusted, professional courier service for the sole purpose of processing and delivering your order.

5 - How We Protect Your Data

Any information you enter on the Grunge Bunny website is kept strictly confidential and secure, and is only accessible by authorised individuals who are directly involved with Grunge Bunny. Your data is encrypted using HTTPS (SSL/TLS), and we follow industry standards to keep your data safe when using our website.

With regards to your personal data, Grunge Bunny staff will always respect your privacy and security, and will operate in compliance with UK Data Protection laws.

We use a third party payment processing service, therefore we do not store any sensitive payment information on our database, such as credit card details.

6 - Your Rights

6a - The Right to Access Your Information
You have the right to access your personal data, and the right to know what purposes your data is used for. You can contact us to make such a request by emailing grungebunnygear@gmail.com.

6b - The Right to Rectify Your Information
You have the right to update your personal information if it is incorrect or out of date, Grunge Bunny will also attempt to keep your data up to date as much as reasonably possible. You can contact us to make requests to rectify your data by emailing grungebunnygear@gmail.com. You also have the right to request that we delete any data pertaining to you, and can request this by emailing grungebunnygear@gmail.com.

6c - The Right to Erase Your Information
You have the right to request that we erase personal data that we hold about you, also known as "the right to be forgotten." You may request that Grunge Bunny deletes your personal data where it is no longer necessary for the purposes for which it was collected. You may also withdraw your consent for us to process your information.

Please note that in some cases we may be required to retain certain information in order to comply with legal or regulatory obligations, such as maintaining records for tax and accounting purposes.

6d - The Right to Data Portability
You have the right to request a copy of the personal data that you have provided to us in a structured, commonly used, and machine-readable format. This allows you to reuse your data for your own purposes or transfer it to another service where feasible.

6e - The Right to Lodge a Complaint
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), the UK authority responsible for data protection matters.

6f - Exercising your Rights
If you wish to exercise your individual rights regarding your personal data, you can do so by contacting us at grungebunnygear@gmail.com. We may ask for proof of identity when you request access to personal data.

7 - Notification of Changes to this Policy

We keep this policy under regular review and will update it over time if the need arises. Updates will be published on this page.

This policy was last updated on 15th March 2026.

8 - Contact Information

You can contact Grunge Bunny (the data controller responsible for your personal data) at any time if you have any questions or comments regarding this policy, or to exercise your rights to your data. Please contact us at grungebunnygear@gmail.com.