California Privacy Disclosure

Last Updated: December 31, 2025

The Grind Co. is committed to protecting your privacy and complying with the California Consumer Privacy Act (CCPA). This disclosure provides California residents with information about the personal data we collect, use, and share, and outlines your rights under the CCPA.

1. Categories of Personal Information Collected

We may collect the following categories of personal information from California residents:

Identifiers:

  • Full name, email address, phone number, and billing/shipping addresses.
  • Used for account creation, order processing, and customer communication.

Account Information:

  • Username, language and currency preferences, and order history.
  • Used to manage accounts, retain user preferences, and enhance the user experience.

Transaction Information:

  • Payment methods, purchase history, invoices, and transaction confirmations.
  • Used for billing, refunds, legal compliance, and financial reporting.

Device & Online Activity:

  • IP address, cookies, browsing behavior, and analytics identifiers.
  • Used to monitor website performance, detect security threats, and optimize functionality.

Third-Party Data:

  • Information collected via Shopify, PayPal, Google Analytics, Facebook Pixel, and other integrated service providers.
  • Helps with order fulfillment, marketing insights, website analytics, and customer support.

Note: We only collect personal information necessary for legitimate business purposes.

2. Purposes of Collection

The personal information collected may be used for the following purposes:

Order Processing & Fulfillment:

  • Completing purchases, processing payments, coordinating shipping, and delivering products.

Customer Support & Account Management:

  • Responding to inquiries, managing accounts, resolving issues, and providing notifications regarding orders or services.

Personalization & Marketing (with consent):

  • Delivering tailored content, promotions, and advertising based on user preferences and behavior.
  • Users can opt out of marketing communications at any time.

Analytics & Website Optimization:

  • Analyzing website traffic, understanding user behavior, improving site functionality, and enhancing user experience.

Legal Compliance, Security & Fraud Prevention:

  • Detecting fraudulent activity, preventing security breaches, and fulfilling legal obligations.

3. Categories of Personal Information Disclosed

We may disclose personal information to the following entities for legitimate business purposes:

Service Providers:

  • Payment processors, shipping carriers, IT support, and fulfillment partners.
  • Disclosures are limited to the information necessary for performing services.

Marketing & Analytics Partners (with consent):

  • Email marketing platforms, advertising networks, and analytics tools.
  • Only used if users have given explicit consent for marketing purposes.

Legal & Regulatory Authorities:

  • When required by law, regulation, or legal proceedings.

Important Note:

  • The Grind Co. does not sell personal information of California residents without explicit opt-out consent.
  • Disclosure for business purposes (order fulfillment, analytics, marketing with consent) is distinct from selling personal data under CCPA.

4. Your Rights as a California Resident

Under the California Consumer Privacy Act (CCPA), California residents have the following rights:

Right to Know:

  • Request a disclosure of the personal information The Grind Co. collects, uses, or shares.
  • Includes categories of data, sources, purposes of collection, and any third parties with whom data is shared.

Right to Delete:

  • Request deletion of personal information held by The Grind Co., subject to certain legal or business exceptions (e.g., tax, legal obligations, or pending transactions).

Right to Opt-Out of Sale:

  • Prevent the sale of personal information to third parties for monetary or valuable consideration.
  • The Grind Co. does not sell personal data without explicit opt-out consent.

Right to Non-Discrimination:

  • Exercising your privacy rights will not affect your access to products or services.
  • Users cannot be denied service, penalized, or discriminated against for exercising CCPA rights.

Note: These rights apply only to California residents, but The Grind Co. provides transparency to all users.

5. How to Exercise Your Rights

California residents have the right to exercise their CCPA rights, including the Right to Know, Right to Delete, and Right to Opt-Out of Sale of Personal Data. The Grind Co. provides multiple channels and clear guidance for submitting these requests:

Submission Channels:

Online Form

  • Accessible directly on The Grind Co. website.
  • Designed for structured submission to ensure requests are properly logged.
  • Includes checkboxes to specify the type of request (access, delete, opt-out).
  • Form: Consumer Privacy Request.

Email

  • Send your request to support@thegrindcobrand.com
  • Include all verification information (full name, email associated with the account, and order details if applicable).
  • The email will be acknowledged within 1–2 business days (Monday-Friday).

Phone

  • French Customer Support: +33 663883843 Hours: 9:00 AM - 6:00 PM (CET)
  • USA Customer Support: +1 6146957133 Hours: 9:00 AM - 5:00 PM (EST)
  • Provide account information for verification purposes.
  • Callers will receive instructions for submitting additional documentation if needed.

Required Information for Verification and Processing

To process a request, the following information is required:

Full name of the individual submitting the request.

Email address associated with your account or transaction.

Detailed description of the request, specifying whether you want to:

  • Access all personal information collected.
  • Delete personal information.
  • Opt out of the sale of personal information.

Order or account details (optional but recommended for faster processing).

Incomplete requests may be delayed or rejected. Providing complete and accurate information helps ensure compliance with CCPA timelines.

Verification of Identity

  • The Grind Co. may request additional information to verify identity and protect your personal data.
  • Only the account owner or an authorized agent may submit requests.
  • Authorized agents must provide written consent from the account owner.
  • Verification ensures that requests are secure, legitimate, and compliant with CCPA.

Processing Timeline

Verified requests are typically processed within 45 days.

A single 45-day extension may be granted if necessary, with notification to the user.

Users will receive a confirmation of completion, including:

  • Summary of actions taken.
  • Data provided (for access requests).
  • Confirmation of deletion or opt-out action.

Additional Guidance

  • Requests are free of charge, in compliance with CCPA.
  • Users are encouraged to provide specific details to ensure prompt processing.
  • The Grind Co. retains the right to deny fraudulent or excessive requests while maintaining compliance.
  • Users may submit multiple requests, but verification is required for each.
  • Exercising your rights will not affect your access to products or services.

6. Verification of Requests

Purpose:

  • Ensures that personal information is protected and requests are submitted by the authorized individual.

Verification Methods:

  • Email confirmation linked to the account.
  • Request for account details, order numbers, or other identifiers to confirm identity.
  • In some cases, documentation may be required for authorized agents.

Processing Timeline:

  • Verified requests are typically processed within 45 days.
  • Users will receive a confirmation notification once the request has been completed.

Important Notes:

  • Only the account owner or authorized agent may submit valid requests.
  • Unverified or incomplete requests may delay processing or be rejected.
  • The Grind Co. reserves the right to deny fraudulent or excessive requests while maintaining compliance with CCPA.

7. Data Retention & Security

Data Retention:

Personal information is retained only as long as necessary to fulfill business purposes, provide services, or comply with legal obligations.

Retention periods may vary depending on:

  • Order history and transactions.
  • Customer support interactions.
  • Regulatory and tax compliance requirements.

Once retention is no longer necessary, personal data is securely deleted or anonymized.

Data Security Measures:

  • Encryption: Personal information is encrypted during transmission and storage.
  • Access Controls: Only authorized personnel can access sensitive data.
  • Secure Servers: Hosted on Shopify and other trusted platforms with industry-standard security protocols.
  • Monitoring: Continuous monitoring for unauthorized access, hacking attempts, and data breaches.

User Responsibilities:

  • Maintain strong, unique passwords for accounts.
  • Protect devices and accounts from unauthorized access.
  • Immediately report suspicious activity to customer support.

8. No Retaliation

Exercising your CCPA rights will not affect your access to products, services, or website functionality.

Users are protected from:

  • Discrimination or denial of service.
  • Increased prices or reduced quality of service.
  • Penalties for requesting access, deletion, or opting out of data sales.

The Grind Co. commits to full compliance with CCPA non-discrimination requirements.

Practical Advice:

  • Users can exercise their rights with confidence, knowing their account and service access will remain unaffected.
  • Any issues or perceived retaliation should be reported to customer support immediately.

9. Third-Party Services

Certain personal information may be shared with trusted third-party service providers for legitimate business purposes, including:

  • Order fulfillment: Shipping carriers, warehouse partners, and payment processors.
  • Marketing & analytics: Email platforms, ad networks, and analytics tools (with consent).
  • Security & compliance: Fraud detection services and regulatory reporting.

Limitation of Liability:

  • The Grind Co. is not responsible for third-party actions, errors, or security practices.
  • Users are encouraged to review privacy policies of third-party services for details on their data handling practices.

Best Practices for Users:

  • Understand which third parties may access personal information.
  • Use account and device security measures to protect personal data.
  • Opt out of third-party marketing services where possible.

10. Categories of Sources of Personal Information

The Grind Co. collects personal information from multiple sources to provide and optimize services for California residents:

Directly from Users:

  • Account creation details, order placement, subscription forms, and customer support interactions.
  • Includes name, email, phone number, billing/shipping addresses, and account preferences.

Automatically Collected Data:

  • IP addresses, device identifiers, browser type, cookies, and website analytics.
  • Used for website functionality, performance monitoring, and security purposes.

Third-Party Sources:

  • Shopify, PayPal, Google Analytics, Facebook Pixel, and other trusted service providers.
  • Helps deliver products, process payments, manage orders, provide marketing insights, and analyze performance.

Publicly Available Information:

  • Information voluntarily shared by users via social media, business directories, or other public platforms.
  • May be used to verify user identity or improve personalization.

Note: The Grind Co. ensures that personal data collected is relevant, accurate, and obtained lawfully.

11. Business or Commercial Purpose of Data Collection

Personal information may be collected or shared strictly for legitimate business purposes, including:

Order Processing & Fulfillment:

  • Completing purchases, processing payments, coordinating shipping, handling refunds, and managing returns.

Customer Support & Communication:

  • Responding to inquiries, account management, notifications regarding products or services, and resolving issues.

Website Analytics & Performance Optimization:

  • Monitoring traffic, analyzing browsing behavior, optimizing website speed, and enhancing user experience.

Fraud Prevention, Security, & Legal Compliance:

  • Detecting fraudulent transactions, preventing unauthorized access, complying with regulations, and meeting tax/legal requirements.

Personalization & Marketing (with Consent):

  • Customizing content, product recommendations, offers, and advertising for users who have provided explicit consent.

Important: Collection is limited to information necessary for these purposes, and unrelated personal data is not retained.

12. Categories of Personal Information Disclosed for a Business Purpose

The Grind Co. may share personal information with the following entities for legitimate business purposes:

Service Providers:

  • Payment processors, shipping carriers, fulfillment partners, IT support, and hosting providers.
  • Information shared is limited to what is necessary for the service provided.

Marketing & Analytics Partners (with User Consent):

  • Email marketing platforms, advertising networks, and data analytics providers.
  • Sharing occurs only with explicit user consent and is limited to relevant data.

Legal Authorities:

  • When required by law, court order, or regulatory authority.
  • Includes disclosures for compliance, investigations, or legal proceedings.

Important Note:

  • Sharing personal information for business purposes is distinct from selling personal data under CCPA.
  • Such disclosures do not require an opt-out, as they are essential for business operations and legal compliance.

13. Financial Incentives and Opt-In Offers

The Grind Co. may provide promotions, discounts, or special offers in exchange for certain personal data, such as preferences, browsing behavior, or marketing consent.

Participation in such programs requires explicit user consent, ensuring compliance with CCPA and GDPR regulations.

Users have the right to revoke consent at any time without affecting their ability to:

  • Access products or services.
  • Participate in standard offers not tied to personal data sharing.

Consent withdrawal is effective immediately and does not retroactively affect prior transactions.

The Grind Co. clearly communicates terms and conditions for all data-related offers to maintain transparency and trust.

14. Authorized Agent Requests

California residents may authorize a third-party agent to submit CCPA-related requests on their behalf.

Requirements for Authorized Agents:

  • Written Consent: Signed or electronically submitted consent from the account owner.
  • Verification Information: Identity verification for both the user and the agent, including email, account number, or other identifying details.
  • Request Documentation: A clear description of the action requested (access, deletion, or opt-out of sale).

Process and Security:

  • The Grind Co. will verify the identity of both the user and the agent to prevent unauthorized access.
  • Requests submitted by agents are handled with the same timelines and compliance measures as direct requests.
  • Only legitimate, verified requests are processed; unverified submissions may be delayed or rejected.

15. Non-Discrimination Assurance

Exercising CCPA rights will not impact the user’s access to products or services.

Users are protected from any form of discrimination, including:

  • Denial of service or account suspension.
  • Price increases or reduction in service quality.
  • Restriction from promotions unrelated to personal data.

The Grind Co. strictly adheres to non-discrimination requirements as mandated under CCPA.

Any perceived retaliation should be reported immediately to customer support, and the company will investigate promptly.

16. Cross-Border Data Transfers

Personal information collected from California residents may be transferred or stored outside the United States, including in countries where The Grind Co. or its authorized partners operate.

Purpose of Transfers:

  • Efficient order fulfillment, shipping, and payment processing.
  • Hosting, cloud storage, and IT infrastructure support.
  • Marketing, analytics, and performance optimization by third-party partners.

Compliance Measures:

  • Transfers comply with applicable privacy laws such as CCPA, GDPR, and other international regulations.
  • Adequate technical and organizational measures are in place to ensure data protection, including encryption and secure storage.
  • Only authorized personnel with a legitimate need have access to data in cross-border operations.

Users can request information about where their data is stored or transferred via the contact methods provided.

17. Data Security and Confidentiality

Encryption: Personal information is encrypted during both transmission (e.g., HTTPS) and storage on secure servers.

Access Controls: Strict internal authorization procedures limit access to personal data to authorized personnel only.

Monitoring & Auditing: Continuous monitoring, regular security audits, and vulnerability assessments are conducted to prevent unauthorized access, data breaches, or leaks.

Third-Party Security: Service providers and partners are contractually obligated to implement equivalent data security measures.

User Responsibilities:

  • Maintain strong, unique passwords for accounts.
  • Protect devices and avoid sharing login credentials.
  • Report any suspected unauthorized access immediately to customer support.

In the event of a data breach, The Grind Co. will notify affected users in accordance with applicable laws and CCPA requirements.

18. Updates to This Disclosure

  • This disclosure is periodically updated to reflect changes in laws, business practices, or services.
  • Users are encouraged to review the “Last Updated” date to stay informed.

19. Contact Information

For questions, complaints, or to exercise your CCPA rights:

Business Name: The Grind Co.

Headquarters: 27 rue de champagne, 92140 clamart, France

French Customer Support: +33 663883843 Hours: 9:00 AM - 6:00 PM (CET)

USA Customer Support: +1 6146957133 Hours: 9:00 AM - 5:00 PM (EST)

Email: support@thegrindcobrand.com

Live Chat: Available on the website