Privacy Policy

Last Updated: September 4, 2026

Weston & Grace (commercially operated by FF COMMERCE LTD, "we", "us", "our") operates this storefront and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

Weston & Grace is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or otherwise communicate with us in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

1. Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. Depending on how you interact with our Services, we may collect and process the following categories:

2. Personal Information Sources

We collect personal information from the following sources:

• Directly from you: When you register an account, place an order, contact support, or communicate with us.
• Automatically through the Services: Via cookies and tracking technologies as you interact with our website.
• From our service providers: Including Shopify, payment processors, logistics partners, and data analytics providers.
• From business partners and third parties: Including advertising networks and marketing affiliates.

3. How We Use Your Personal Information

• Provide, Tailor, and Improve Services: Fulfill orders, process payments, arrange shipping, facilitate returns/exchanges, remember preferences, and personalize your shopping experience.
• Marketing and Advertising: Send promotional communications via email or SMS (where permitted) and display tailored advertisements on our site or third-party platforms.
• Security and Fraud Prevention: Authenticate accounts, secure transactions, detect and investigate malicious or fraudulent activities, and maintain system integrity.
• Communicating with You: Provide responsive customer service and maintain our ongoing commercial relationship.
• Legal Reasons: Comply with applicable statutory laws, respond to governmental or legal processes, and enforce our terms and policies.

4. How We Disclose Information & Relationship with Shopify

We may disclose your personal information to third parties for legitimate business purposes:

• Service Providers: IT management, payment gateways, analytics providers, cloud storage, and shipping couriers.
• Marketing Partners: To support personalized advertising and marketing campaigns.
• Corporate Group & Legal Compliance: With corporate affiliates, or in connection with business transactions, mergers, or legal mandates.

5. Third-Party Websites & Children's Data

Third-Party Links: Our website may contain links to external platforms. We are not responsible for the privacy practices, security, or content of non-affiliated third-party websites.

Children's Data: The Services are not intended for children under the age of majority. We do not knowingly collect personal data from children. If you believe a minor has submitted personal information to us, please contact us to request its deletion.

6. Security, Retention & International Transfers

We employ technical and organizational safeguards to protect your personal information. However, no data transmission over the internet can be guaranteed completely secure. Data retention periods depend on account maintenance needs, contractual obligations, legal compliance, and dispute resolution requirements.

International Data Transfers: Where data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

7. Your Statutory Rights (UK & EEA)

Under UK and EU data protection laws, you hold the following statutory rights regarding your personal information:

• Right to Access / Know: Request access to the personal data we hold about you.
• Right to Erasure / Delete: Request deletion of your personal data.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Data Portability: Receive a copy of your data in a structured, electronic format.
• Objection & Restriction: Object to processing or request restrictions on certain processing activities.
• Withdraw Consent: Revoke consent for marketing or data processing at any time.

8. Complaints & Contact

If you have concerns about our privacy practices or wish to exercise your rights, please contact us at info@westonandgrace.com. You also hold the right to lodge a complaint with your local data protection supervisory authority (such as the UK ICO at ico.org.uk).

Corporate Profile & Contacts