Privacy policy

Last updated: 5 September 2026

GLMMD (“we”, “us” or “our”) operates this online store and website. We are committed to respecting your privacy and protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, make a purchase, create an account, contact us or otherwise use our services.

Our online store is powered by Shopify, which provides the e-commerce platform used to operate our website and process transactions.

Please read this Privacy Policy carefully to understand how your personal information is handled.

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with GLMMD, we may collect or process information including:

  • your name;
  • email address;
  • telephone number, where provided;
  • billing and delivery address;
  • order and transaction information;
  • payment-related information;
  • account information and preferences;
  • communications you send to us;
  • information about products you view, purchase, return or add to your cart;
  • device, browser and network information;
  • IP address and other online identifiers; and
  • information about how you interact with our website.

Payment information may be processed by Shopify and the relevant payment providers. We do not necessarily receive or store complete payment card details ourselves.

2. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

  • directly from you when you place an order, create an account, subscribe to marketing communications or contact us;
  • automatically when you use our website, including through cookies and similar technologies;
  • from Shopify and service providers that help us operate our store; and
  • from other third parties where permitted by law.

3. HOW WE USE YOUR PERSONAL INFORMATION

We may use your personal information to:

  • process and fulfil orders;
  • process payments;
  • arrange delivery;
  • manage returns and refunds;
  • provide customer service;
  • communicate with you about your order or account;
  • maintain and improve our website and services;
  • maintain website and transaction security;
  • detect or prevent fraud or misuse;
  • comply with legal and regulatory requirements; and
  • send marketing communications where permitted.

We may also use information to understand how customers interact with our website and to improve the shopping experience.

4. LAWFUL BASES FOR PROCESSING

Under applicable UK data protection law, we process personal information only where we have an appropriate lawful basis.

Depending on the purpose, we may rely on:

Contract — where processing is necessary to process your order, take payment, arrange delivery, manage returns or refunds, or otherwise provide products or services you have requested.

Legal obligation — where processing is necessary for us to comply with applicable legal or regulatory requirements.

Legitimate interests — where processing is necessary for our legitimate business interests, such as operating and improving our store, providing customer support, maintaining security and preventing fraud, provided that those interests are not overridden by your rights and interests.

Consent — where you have given consent for a particular purpose, such as certain marketing communications or non-essential cookies where consent is required.

Where processing is based on consent, you may withdraw your consent at any time.

5. MARKETING COMMUNICATIONS

Where permitted, we may use your information to send you news, product information, offers or other marketing communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in our emails.

If you unsubscribe from marketing, we may still send you non-marketing communications that are necessary in connection with an order, account, return or customer service request.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to operate the store, remember preferences, understand website usage, maintain security and, where applicable, support analytics and advertising.

Some cookies are necessary for the website to function. Other cookies may be used only where permitted by applicable law and, where required, with your consent.

You may be able to manage certain cookie preferences through the options provided on our website or through your browser settings.

7. HOW WE SHARE PERSONAL INFORMATION

We may share personal information where reasonably necessary with service providers that help us operate GLMMD, including providers of:

  • e-commerce technology;
  • payment processing;
  • website hosting and technology;
  • delivery and fulfilment;
  • analytics;
  • customer support;
  • marketing services; and
  • fraud prevention and security.

We may also disclose information where required by law, to respond to lawful requests from authorities, to protect our legal rights or in connection with a business reorganisation or transfer.

We do not disclose personal information to third parties simply for unrelated purposes without an appropriate legal basis.

8. SHOPIFY

Our online store is powered by Shopify.

Shopify collects and processes certain personal information in order to provide and improve the e-commerce services used by our store.

Information submitted through our store may therefore be processed by Shopify and its service providers.

Shopify may process information in countries outside the United Kingdom. Shopify's own privacy documentation provides further information about how it processes personal information and the rights available in relation to its processing.

9. THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

If you follow one of these links, the third party's own privacy policy and terms may apply.

We are not responsible for the privacy practices, security or content of websites that we do not operate or control.

10. INTERNATIONAL DATA TRANSFERS

Some of our technology and service providers, including Shopify and associated providers, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.

11. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

The appropriate retention period may depend on factors including whether we need the information to:

  • fulfil or manage an order;
  • maintain an account;
  • provide customer service;
  • comply with legal, tax or accounting obligations;
  • prevent fraud;
  • resolve disputes; or
  • establish, exercise or defend legal claims.

When personal information is no longer reasonably required, it may be deleted or anonymised where appropriate.

12. SECURITY

We take reasonable measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Please do not send sensitive or confidential information to us through insecure communication channels.

13. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances and subject to applicable law, you may have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal information in certain circumstances;
  • request restriction of processing;
  • object to certain processing;
  • request a copy of certain information in a portable format;
  • withdraw consent where processing is based on consent; and
  • object to or unsubscribe from direct marketing.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before responding to a request.

To exercise your privacy rights, please contact us using the email address provided below.

14. CHILDREN'S PRIVACY

Our website and products are not specifically directed at children, and we do not knowingly collect personal information from children where doing so would be contrary to applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us.

15. COMPLAINTS

If you have a concern or complaint about how we process your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our website, business practices, service providers or legal requirements.

When we make changes, we will publish the updated Privacy Policy on this website and update the “Last updated” date where appropriate.

17. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your data protection rights or have a privacy-related concern, please contact us:

Email: info@glmmd.co.uk