Privacy Policy

Last updated: July 6, 2026

At Grace Upon Grace, we respect your privacy and are committed to handling your personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, place an order, purchase our handmade hair accessories, request customization, contact us, or otherwise interact with our services.

By using our website or services, you acknowledge that you have read this Privacy Policy.

1. Information We Collect

Depending on how you interact with us, we may collect the following types of information:

Contact and delivery information, including your name, email address, phone number, billing address, and shipping address.

Order and transaction information, including products viewed or purchased, order details, customization requests, selected colours, names, initials, themes, sizes, payment status, returns, exchanges, cancellations, and previous transactions.

Customization information, including names, initials, colour preferences, themes, reference details, instructions, or other information you voluntarily provide for creating a customized or personalized product.

Payment information, including information necessary to process your payment. Payments may be processed through third-party payment service providers. We generally do not directly store complete credit or debit card details unless specifically stated otherwise.

Account information, if customer accounts are enabled on our website, including login details, preferences, and account settings.

Communications with us, including information you provide when contacting us by email, website forms, WhatsApp, social media, or other customer-support channels.

Device and technical information, which may include your IP address, browser type, device type, operating system, network information, and similar technical identifiers.

Website usage information, including information about how you browse and interact with our website, such as pages viewed, products viewed, cart activity, and interactions with website features.

2. How We Collect Information

We may collect personal information:

• Directly from you when you place an order, create an account, request customization, contact us, or otherwise provide information to us.
• Automatically when you browse or use our website, including through cookies and similar technologies.
• From service providers that help us operate our business, such as website hosting providers, payment processors, courier and logistics providers, analytics providers, and customer-support tools.
• From other third parties where permitted by applicable law.

3. How We Use Your Information

We may use personal information to:

• Process and confirm orders.
• Create customized or personalized products according to customer instructions.
• Process payments and payment confirmations.
• Pack, ship, track, and deliver orders.
• Communicate regarding order status, customization details, delivery, returns, exchanges, refunds, or customer support.
• Maintain customer accounts, where applicable.
• Detect and prevent fraud, misuse, security incidents, or unauthorized transactions.
• Improve our products, website, customer experience, and business operations.
• Understand website usage and customer preferences.
• Send promotional or marketing communications where permitted by law and according to your communication preferences.
• Comply with legal, tax, accounting, regulatory, or law-enforcement requirements.
• Establish, exercise, or defend legal claims where necessary.

4. Customized and Personalized Orders

Because Grace Upon Grace offers handmade and customizable hair accessories, you may voluntarily provide information such as:

• A name
• An initial
• Colour preferences
• Theme preferences
• Size requirements
• Special design instructions
• Other customization details

We use this information primarily to process and fulfil your customized order and communicate with you regarding the requested product.

Please avoid submitting unnecessary sensitive personal information as part of a customization request.

If you provide information relating to another person, you are responsible for ensuring that you have appropriate authority or permission to provide that information where required.

5. Children's Privacy

Our products may be intended for babies, toddlers, and children; however, our website and purchasing services are intended for use by adults, parents, or legal guardians.

We do not knowingly seek to collect personal information directly from children.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review the matter and take appropriate action.

6. How We Share Personal Information

We may share personal information only where reasonably necessary to operate our business, fulfil orders, provide services, or comply with legal obligations.

This may include sharing information with:

• Our e-commerce and website hosting provider.
• Payment gateways and payment processors.
• Courier, postal, delivery, and logistics providers.
• IT, cloud hosting, security, and technical service providers.
• Analytics and website-performance providers.
• Marketing and advertising service providers, where such services are actually used.
• Customer-support and communication service providers.
• Professional advisers, such as accountants, auditors, legal advisers, or consultants, where necessary.
• Government authorities, regulators, courts, or law-enforcement agencies where required or permitted by applicable law.

We do not intend to share personal information unnecessarily.

7. Relationship With Our E-Commerce Platform

Our online store is operated using a third-party e-commerce platform that provides technology necessary to host and operate the store.

As a result, certain personal information may be processed by that platform and its service providers to provide services such as:

• Website hosting
• Store functionality
• Checkout
• Security
• Order processing
• Analytics
• Other enabled e-commerce features

The platform may process information according to its own privacy practices and applicable legal obligations.

8. Payments

Payments may be processed through third-party payment gateways or payment service providers.

Depending on the payment method selected, payment providers may collect and process information necessary to complete the transaction.

We recommend reviewing the privacy policy of the relevant payment provider for further information about how it handles personal information.

9. Shipping and Delivery

To fulfil and deliver your order, we may share necessary information with courier, postal, shipping, or logistics providers.

This may include:

• Customer name
• Delivery address
• Phone number
• Email address, where required
• Order or shipment reference information

This information is shared only as reasonably necessary for order fulfilment, delivery, tracking, and related support.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Keep the website functioning properly.
• Remember preferences.
• Maintain shopping-cart functionality.
• Understand website traffic and usage.
• Improve website performance.
• Support analytics.
• Support advertising or marketing features where enabled.

You may be able to manage cookies through your browser settings or any cookie-management tools made available on the website.

Disabling certain cookies may affect website functionality.

11. Marketing Communications

Where permitted by applicable law, we may use your contact information to send information about:

• New products
• New collections
• Special offers
• Promotions
• Seasonal launches
• Other business updates

You may opt out of promotional email communications by using the unsubscribe option provided in the communication, where available, or by contacting us.

Even if you opt out of marketing communications, we may still send necessary non-promotional communications relating to orders, payments, delivery, returns, refunds, security, or customer support.

12. Data Security

We take reasonable administrative, technical, and organizational measures to protect personal information.

However, no method of internet transmission, electronic storage, or online communication is completely secure. Therefore, we cannot guarantee absolute security.

Customers should avoid sending highly sensitive or confidential information through unsecured communication channels.

13. Data Retention

We retain personal information only for as long as reasonably necessary for purposes such as:

• Processing and fulfilling orders.
• Providing customer support.
• Maintaining transaction and business records.
• Meeting accounting, tax, and legal obligations.
• Resolving disputes.
• Preventing fraud or misuse.
• Enforcing our agreements and policies.

Retention periods may vary depending on the type of information and applicable legal requirements.

14. Your Rights and Choices

Depending on applicable law and your circumstances, you may have rights regarding your personal information, which may include the ability to:

• Request access to certain personal information held about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain personal information, where legally applicable.
• Withdraw consent where processing is based on consent, subject to applicable limitations.
• Manage or opt out of certain marketing communications.
• Raise a complaint or grievance regarding the handling of your personal information.

These rights may be subject to legal exceptions, identity verification, record-retention requirements, and other applicable limitations.

To submit a privacy-related request, contact us using the details below.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment providers, or other external services.

We are not responsible for the privacy, security, accuracy, or practices of third-party websites or services that we do not control.

We recommend reviewing their privacy policies before providing personal information.

16. International Processing

Some technology providers, cloud service providers, payment providers, or other service providers used by our business may process or store information outside India.

Where this occurs, information may be handled according to applicable laws and the contractual or technical arrangements of the relevant service providers.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business practices.
• Changes to website features.
• Changes to service providers.
• Operational requirements.
• Legal or regulatory developments.

When we update this Privacy Policy, we will revise the “Last updated” date displayed at the top of this page and provide additional notice where required by applicable law.

18. Contact Us

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or how we handle personal information, please contact us:

Grace Upon Grace
Email: annepallipuram1996@gmail.com
Address: Pallipuram House, Mulanthuruthy, Ernakulam, Kerala 682314, India