Privacy Policy

Last Updated: 17/04/2026

Company Details: Graen is a trading name of Ceres Technologies Limited, a company registered in England and Wales with Company Registered Number: 17035142. Our registered office address is St. Georges House, 15 Hanover Square, London, England, W1S 1HS ("Graen", "we", "us").

At Graen, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit our website, purchase our products, or interact with our services. For the purposes of the UK General Data Protection Regulation (UK GDPR), we are the "data controller" of your personal information.

Data Protection Registration: We are registered with the UK Information Commissioner’s Office (ICO) under registration number: CSN2340857.

1. Information We Collect

We may collect and process the following data about you:

Identity Data: Including your name, username, or similar identifier.
Contact Data: Including billing address, delivery address, email address, and telephone numbers.
Financial Data: Bank account and payment card details (processed securely via our third-party payment providers).
Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
Technical Data: Including your IP address, browser type and version, time zone setting, and operating system.
Usage Data: Information about how you use our website, products, and services.

2. How We Use Your Information

We only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

Performance of a Contract: To process and deliver your order, manage payments, and collect money owed to us.
Legitimate Interests: To improve our website, services, and customer relationships, and to keep our records updated.
Legal Obligation: Where we need to comply with a legal or regulatory obligation (such as tax records).
Consent: Where you have opted-in to receive our newsletter or marketing communications.

3. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with selected third parties who support our business, including:

Service Providers: Such as delivery couriers, IT support, and payment processors (e.g., Stripe or PayPal).
Professional Advisers: Including lawyers, bankers, auditors, and insurers.
Regulators: HM Revenue & Customs and other authorities who require reporting of processing activities.

All third-party service providers are required to take appropriate security measures to protect your personal data in line with our policies.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and partners who have a business need to know.

5. International Transfers

If we transfer your data outside of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the specific safeguards approved by the UK Information Commissioner’s Office (ICO) is implemented.

6. Your Legal Rights

Under the UK GDPR, you have the following rights:

Request access to your personal data.
Request correction of any incomplete or inaccurate data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your data to you or a third party.
Withdraw consent at any time where we are relying on consent to process your data.

7. Cookies

Our website uses cookies to distinguish you from other users. You can set your browser to refuse all or some browser cookies, but this may affect the functionality of the website.

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us via support@graen.co.uk.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). Our registration number is CSN2340857. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.