Privacy Policy

Last Updated: January 2026

This privacy policy applies to the website www.grainandbolt.com and governs the privacy of its users. It details how Grain and Bolt (operating as a Limited Company) collects, processes, stores, and protects user data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. The Website & Your Privacy

Grain and Bolt takes a proactive approach to user privacy. We ensure that all necessary steps are taken to protect the privacy of our users throughout their visiting experience. This website complies with all current UK national laws and requirements for user privacy.

2. Information We Collect

To fulfil your orders and provide a seamless service, we collect the following personal information:

  • Identity Data: Name, username, or similar identifier.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Transaction Data: Details about payments to and from you and other details of products you have purchased from us.
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, and operating system.

How we use this data:

  • To process and deliver your order (including sharing necessary details with our freight and pallet delivery partners).
  • To manage our relationship with you (e.g., notifying you about changes to our terms or privacy policy).
  • To administer and protect our business and this website.

3. Use of Cookies

This website uses cookies to improve the user experience.

  • Cookie Control: In compliance with legislation, this website uses a cookie control system allowing the user on their first visit to explicitly accept or decline the use of non-essential cookies.
  • Functionality: Cookies are essential for the operation of our shopping basket and checkout process.
  • Analytics: We use tracking software (such as Google Analytics) to monitor visitor usage to better understand how the website is used. This software will save a cookie to your computer’s hard drive to track and monitor your engagement and usage of the website, but will not store, save, or collect personal information.

4. Email Marketing & Communication

Users contacting this website do so at their own discretion. Your personal information is kept private and stored securely until it is no longer required, as detailed in the Data Protection Act 2018.

  • Newsletter: We operate an email newsletter program to inform subscribers about products and services. Users can subscribe through an online automated process or by opting in during checkout.
  • Tracking: Email marketing campaigns may contain tracking facilities within the email. Subscriber activity (such as opening emails or clicking links) is tracked and stored in a database for future analysis to refine our marketing.
  • Unsubscribing: In compliance with UK Spam Laws and the Privacy and Electronic Communications Regulations (PECR), you may unsubscribe at any time through an automated link at the footer of each email.

5. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

6. Social Media Platforms

Communication, engagement, and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

  • Grain and Bolt will never ask for sensitive information (such as payment details) publicly over social media platforms.
  • This website may use social sharing buttons. Users are advised that the social media platform may track and save your request to share a web page respectively through your social media platform account.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know (e.g., our warehouse team and delivery couriers).

8. Your Legal Rights

Under the UK GDPR, you have rights including:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data (“The right to be forgotten”).
  • Object to processing of your personal data.

If you wish to exercise any of the rights set out above, please contact us at [email protected].