Privacy Policy
This Privacy Policy ("Policy") describes how GreySky ("GreySky", "we", "us", or "our") collects, uses, stores, and protects the personal information of visitors and customers ("you" or "your") who access or use our website, services, and products through our Shopify-powered e-commerce store.
By accessing our website or making a purchase, you agree to the collection and use of information in accordance with this Policy. If you do not agree with any part of this Policy, please discontinue use of our website immediately.
1. INFORMATION WE COLLECT
We collect various categories of personal information to provide you with our products and services. The information we collect includes, but is not limited to:
1.1 Information You Provide Directly
- Full name
- Email address
- Phone number
- Billing address and shipping address
- Payment information (processed securely via third-party payment processors — we do not store raw card data)
- Account credentials (if you create a GreySky account)
- Communication preferences
- Order history and transaction records
- Messages sent via contact forms, customer support, or email
1.2 Information Collected Automatically
When you visit our website, certain information is collected automatically through your device and browser, including:
- IP address and approximate geographic location
- Browser type, version, and language settings
- Device type, operating system, and screen resolution
- Pages viewed, time spent on pages, and navigation paths
- Referring URLs and exit pages
- Date and time of visits
- Clickstream data
1.3 Information Collected Through Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar technologies to collect information about your interactions with our website. See Section 5 for full details on our Cookies Policy.
2. HOW WE COLLECT YOUR DATA
GreySky collects personal information through the following channels:
Website Interactions
Data is collected when you browse our website, create an account, add items to your cart, complete a checkout, submit a contact or inquiry form, or subscribe to marketing communications.
Checkout Process
During checkout, we collect your name, address, email, phone number, and payment details to fulfil your order and provide post-purchase support. For Cash on Delivery (COD) orders, we collect the same personal and address details to coordinate delivery.
Cookies and Analytics Tools
We deploy first-party and third-party cookies to understand how visitors interact with our site. Analytics tools such as Google Analytics and Shopify Analytics process browsing data on our behalf. See Section 5 for full cookie disclosures.
Email and Communications
If you contact us directly, respond to our emails, or participate in surveys or promotions, we may retain the contents of those communications and any information you provide.
Social Media and Third-Party Platforms
If you access our website through social media links or engage with our social content, certain data may be shared with us subject to the privacy settings on those platforms.
3. HOW WE USE YOUR INFORMATION
We use the personal information we collect for the following purposes:
- Order Processing and Fulfilment: To process, confirm, ship, and deliver your purchases, including Cash on Delivery orders, and to send order confirmation and tracking notifications.
- Customer Account Management: To create and manage your account, authenticate your identity, and provide customer support.
- Communications: To respond to your inquiries, provide updates about your order, and send service-related notifications.
- Marketing and Promotions: With your consent, to send newsletters, promotional content, updates on new drops, and exclusive offers. You may opt out at any time.
- Product and Website Improvement: To analyse usage patterns, identify technical issues, improve website performance, and enhance the customer experience.
- Legal Compliance: To comply with applicable laws, regulations, court orders, and lawful requests from governmental authorities.
- Fraud Prevention and Security: To detect, prevent, and address fraudulent transactions, abuse, or security incidents.
- Analytics and Research: To understand purchasing behaviour, conduct internal research, and measure the effectiveness of our campaigns.
We will not use your personal information for any purpose that is inconsistent with this Policy without obtaining your explicit consent.
4. PAYMENT SECURITY
GreySky takes the security of your financial information seriously. The following measures are in place:
Third-Party Payment Processing
All online payment transactions are processed exclusively by trusted third-party payment gateway Razorpay. GreySky does not directly collect, process, or store your credit card numbers, debit card details, or banking credentials on our servers.
PCI DSS Compliance
Our payment partners are PCI DSS (Payment Card Industry Data Security Standard) compliant, ensuring that your payment data is handled securely.
SSL Encryption
Our website uses SSL (Secure Sockets Layer) / TLS (Transport Layer Security) encryption to protect data transmitted between your browser and our servers. Look for the padlock icon in your browser's address bar.
Cash on Delivery (COD)
For COD orders, no payment information is collected online. Payment is made at the point of delivery. We only collect name, address, and contact details to facilitate delivery.
Data Minimisation
We only collect the minimum payment-related data necessary to process your transaction and provide post-purchase support.
5. COOKIES AND TRACKING TECHNOLOGIES
GreySky uses cookies and similar tracking technologies to enhance your browsing experience and gather usage data.
5.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They help websites remember your preferences, keep you logged in, and understand how you interact with the site.
5.2 Types of Cookies We Use
Strictly Necessary Cookies
These cookies are essential for the website to function correctly. They enable core features such as shopping cart functionality, checkout processes, and account login. These cannot be disabled without affecting the functionality of the site.
Performance and Analytics Cookies
These cookies collect anonymous data about how visitors use our website, including pages visited and errors encountered. We use this data to improve site performance. Tools used include Google Analytics and Shopify Analytics.
Functional Cookies
These cookies allow our website to remember your preferences (such as language, currency, or region) and provide enhanced, personalised features.
Marketing and Targeting Cookies
These cookies track your browsing habits to deliver relevant advertising and retargeting campaigns on third-party platforms such as Instagram, Facebook, and Google. You may opt out of targeted advertising through your browser settings or third-party opt-out tools.
5.3 Managing Cookies
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org.
6. THIRD-PARTY SERVICES
GreySky operates on the Shopify platform and engages the following categories of third-party service providers who may have access to your personal data as required to perform their services:
Shopify Inc.
Our website is hosted and powered by Shopify, which processes customer data including order information, payment details, and browsing behaviour in accordance with Shopify's own Privacy Policy. Shopify is certified under global data protection standards.
Payment Gateways
Payment processor Razorpay handle all financial transactions. These processors operate under their own privacy policies and security standards.
Shipping and Logistics Partners
To fulfil and deliver your orders, we share your name, address, and phone number with our shipping partners Shiprocket. These partners use your data solely for delivery purposes.
Analytics Providers
Google Analytics and Shopify Analytics collect anonymised usage data to help us understand website traffic and performance.
Email Marketing Platforms
If you subscribe to our mailing list, your email and preferences may be stored with email marketing service providers
Social Media Platforms
We may use social media pixel technologies (Meta Pixel, Google Ads) for retargeting purposes. These platforms may collect data in accordance with their own terms.
We require all third-party service providers to maintain appropriate security measures and only use your personal information for the specific purposes for which it is shared.
7. DATA PROTECTION
GreySky implements a range of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, loss, or destruction:
- SSL/TLS encryption for all data in transit
- Access controls limiting personal data access to authorised personnel only
- Regular security assessments and vulnerability monitoring
- Secure data storage practices on Shopify's infrastructure
- Internal data handling policies and staff awareness
While we take reasonable precautions to safeguard your data, no system is completely secure. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and relevant authorities as required under applicable law.
8. YOUR RIGHTS
Subject to applicable law, you have the following rights in relation to your personal data held by GreySky:
Right to Access
You have the right to request a copy of the personal information we hold about you.
Right to Correction
You may request that we correct any inaccurate or incomplete personal information.
Right to Erasure
You may request the deletion of your personal data where we no longer have a legitimate basis to retain it, subject to our legal obligations.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time by using the unsubscribe link in our emails or contacting us directly.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time.
Right to Data Portability
Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format.
To exercise any of these rights, please contact us at the details provided in Section 12. We will respond to all valid requests within a reasonable timeframe, not exceeding 30 days.
9. DATA RETENTION
GreySky retains your personal information for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, accounting, and regulatory requirements.
Specifically:
- Order and transaction records are retained for a minimum of 7 (seven) years for accounting and tax compliance under Indian law.
- Customer account data is retained for as long as your account is active and for a reasonable period thereafter.
- Marketing preferences and communication data are retained until you withdraw consent or opt out.
- Analytics data is retained in anonymised or aggregated form.
When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention procedures.
10. CHILDREN'S PRIVACY
GreySky's website and services are not directed at individuals under the age of 18 ("minors"). We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that a minor has provided us with personal information without your consent, please contact us immediately and we will take steps to delete such information from our systems.
By using our website, you represent and warrant that you are at least 18 years of age or are accessing the website with the consent of a parent or legal guardian.
11. UPDATES TO THIS POLICY
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will revise the "Last Revised" date at the top of this document and, where appropriate, notify you by email or through a prominent notice on our website.
Your continued use of our website following the posting of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.
12. CONTACT INFORMATION
For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
Brand: GreySky
Address- C-2, Omaxe City, Near Anand Big Mall,
457001, Ratlam, Madhya Pradesh
Country: India