Privacy Policy

1. Information We Collect

When you visit groundrest.com or make a purchase, we may collect the following categories of personal information:

• Identifiers: Name, email address, shipping address, phone number
• Commercial information: Products purchased, order history, transaction amounts
• Internet activity: Pages viewed, time on site, referring URL, browser type, device information
• Payment information: Processed securely by Stripe — we do not store credit card numbers

2. How We Collect Information

• Directly from you: When you place an order, create an account, subscribe to our newsletter, or contact us
• Automatically: Through cookies and similar technologies when you browse our website
• From third parties: Payment processors (Stripe), analytics providers (Google Analytics)

3. How We Use Your Information

• Process and fulfill your orders
• Send order confirmations, shipping updates, and receipts
• Respond to customer support inquiries
• Send marketing emails (with your consent — you can unsubscribe anytime)
• Analyze website traffic and improve our services
• Comply with legal obligations

4. Third Parties We Share Data With

We do not sell your personal information to third parties.

5. Cookies

We use the following types of cookies:

• Essential cookies: Required for website functionality (cart, checkout)
• Analytics cookies: Help us understand how visitors use our site (Google Analytics)

You can control cookie preferences through your browser settings.

6. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to Know: Request what personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at support@groundrest.com or visit our contact page. We will respond within 45 days.

We do not sell your personal information. If we use analytics tools that share data with third parties, you may opt out by contacting us.

7. Your Rights — EU/EEA Visitors (GDPR)

If you are visiting from the European Union or European Economic Area, you have additional rights under the GDPR:

• Right of access, rectification, erasure, and data portability
• Right to restrict or object to processing
• Right to withdraw consent at any time

Our legal bases for processing are: consent (cookies, marketing), contract performance (orders), and legitimate interest (analytics). Data is transferred to the United States under the EU-US Data Privacy Framework.

To exercise your rights, contact support@groundrest.com.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, typically:

• Order data: 7 years (tax and legal compliance)
• Email marketing: until you unsubscribe
• Analytics data: 26 months (Google Analytics default)

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including SSL encryption, secure payment processing via Stripe, and access controls. However, no method of internet transmission is 100% secure.

10. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related questions or to exercise your rights:

• Email: support@groundrest.com
• Contact page: groundrest.com/contact