Privacy Policy

Who we are

Genisys Media Ltd, trading as Grizz Studio® (company number 15622889), Suite A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom, is the controller of the personal data described here. Contact: info@grizzstudio.com.

What we collect

When you order: your name, email, delivery and billing address, phone number and the items you buy. When you use the Atelier or contact forms: your message and any sketches or files you upload. When you create an account: your email and password (stored securely). When you browse: your IP address, browser and device type, and the pages you view, through the cookies described in our Cookie Policy.

We never see or store your full card details. Card and wallet payments are handled by Stripe.

Marketing texts (UK)

If you tick the box at checkout, we text offers and new pieces to the UK mobile number you gave, once you confirm it with a code we send by SMS. We keep the number, the date and wording of your consent, and the texts we sent you. At most 4 texts a month, sent between 09:00 and 20:00 UK time and never on Sundays. Every text has a link to stop them at once, and you can also email us. Texts are sent by our SMS provider Twilio, which processes your number on our behalf. Legal basis: your consent, which you can withdraw at any time.

Order updates: if you give us a UK mobile number when you order, we may text you once when your order ships, with a link to follow it. This is a service message about your order, not marketing, and needs no tick. We keep the number with your order. Texts are sent by Twilio, which processes your number on our behalf.

Your wishlist

When you save a piece to your wishlist we keep the list on your device, and in your account when you are signed in, so you can find it again on any device. We also record when a piece was saved or removed and at what price, and whether you later bought it. If you are not signed in, this record uses a random ID and is only made if you have switched on Analytics cookies; when you sign in or order, it joins your account. We use it to understand which pieces people want and improve the shop (legitimate interests, or your consent for the random ID). Wishlist emails, such as a price drop on a saved piece, are only sent if you have joined our email list. Remove a piece by tapping its heart again; to have your wishlist history deleted, email us.

Your email at checkout and basket reminders

When you type your email address at checkout we save it with your bag straight away, before you place an order, so we can see where checkouts stop (for example at delivery or at payment) and which pieces people leave behind. This is a legitimate interest: improving the shop and fixing problems at checkout. We do not use the address to contact you unless you tick the marketing box at checkout.

If you tick that box (“Email me news and offers, and reminders about items I leave in my bag”) and leave without ordering, we may send you up to two reminder emails about the pieces in your bag, the first about an hour later and the second about a day later. The second may include a one-time discount code that expires after 7 days. We send them only between 08:00 and 21:00 in your shop’s time zone, never more than one bag at a time, and never if you have already ordered or unsubscribed. Every email has an unsubscribe link. Legal basis: your consent, which you can withdraw at any time. If you do not tick the box we send no reminders. We keep unfinished bags until you ask us to delete them; email us and we will.

Where you came from

If you agree to Analytics cookies, we note which advert, search result or website brought you to the shop (the campaign tags in the link, such as utm_source, and the site you came from) and your Google Analytics visit identifiers. We attach this to your bag when you check out, and so to your order, to learn which advertising leads to sales and where shoppers drop out. We do not use it to identify you beyond that, and without your agreement none of it is stored. Legal basis: your consent, which you can withdraw at any time with “Cookie settings”, and our legitimate interest in understanding the performance of our marketing.

Why we use it

To take payment, make and deliver your order, send order and delivery messages, handle returns and refunds, and answer your questions (contract). To prevent fraud and keep the site secure, and to keep accounting and tax records (legitimate interests and legal obligation). To send marketing email only if you have asked for it, and you can withdraw that consent at any time (consent).

Our email list

If you join our email list (in the footer, the sale message, at checkout or when you create an account) we keep your email address, the date and where you joined, and which wording you agreed to, until you unsubscribe. Sometimes we first email you a link to confirm the address is yours (always on grizzstudio.de, and elsewhere when a sign-up looks automated or repeated): then the address is only added once you click it, and an unconfirmed sign-up is never emailed again. We use it only to email you about new pieces and offers. Every email has an unsubscribe link, and you can also write to us. Emails about your orders are separate and are sent whether or not you are on the list.

Who we share it with

Only service providers who need it to serve you: Stripe and other payment providers to process payments; carriers to deliver your order; our workshop in Vietnam, which makes your pieces and ships some orders directly to you; and our hosting, security and email providers. We do not sell your personal data.

Some of these providers are outside the UK, including Vietnam and the United States. Where that happens we use appropriate safeguards, and you can ask us for details.

Google Customer Reviews: after you order, a Google window may ask whether you would like to rate your purchase. Only if you say yes there do we share your email address, order number, delivery country and estimated delivery date with Google, which then emails you a short survey; Google's privacy policy applies to it. On grizzstudio.co.uk and grizzstudio.de the window appears only if you accepted marketing cookies; on grizzstudio.com orders to the United States it appears unless you declined them.

Cookies for visitors in the United States

If you visit from the United States, analytics and advertising cookies are on by default. You can opt out at any time with “Your Privacy Choices” or “Cookie settings” at the bottom of every page. We honour the Global Privacy Control signal from your browser as an opt-out of the sale or sharing of your data for targeted ads. Visitors outside the United States are asked first.

How long we keep it

Order and invoice records are kept for 6 years for tax and accounting purposes. Account data is kept until you ask us to delete it. Messages and Atelier files are kept for as long as needed to deal with your request and any follow-up.

Your rights

Under UK data protection law you can ask to access, correct, delete, restrict or receive a copy of your personal data, and to object to some uses. Email info@grizzstudio.com and we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).

Security and changes

Payment pages and your connection to our site are encrypted. We take reasonable precautions to protect your data from loss, misuse or unauthorized access. We may update this policy; the latest version is always on this page.

Contact us

Grizz Studio® is a trading name of Genisys Media Ltd, a UK-registered company (company number 15622889).

Address: Suite A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE, United Kingdom

Email: info@grizzstudio.com · Phone and WhatsApp: (+44) 786-373-6329

Customer service hours: Monday to Friday, 09:00–17:00 (UK time). We reply within 12 hours on weekdays.