Privacy policy

Last updated: 1 September 2026

Gro Chem Limited, trading as Grow Chem, respects your privacy and is committed to protecting your personal information. This policy explains what information we collect, why we use it, who we share it with, how long we keep it and the rights available to you.

We process personal information in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your information?

Gro Chem Limited, trading as Grow Chem, is the data controller responsible for the personal information described in this policy.

Gro Chem Limited, trading as Grow Chem
Company number: 12734408
Registered office: Flat 15 Yew Tree Court, Walnut Mews, Sutton, England, SM2 5TL
Email: info@growchem.co.uk
Telephone: 01494 972670
Website: https://growchem.co.uk

2. Personal information we collect

Depending on how you use our website and services, we may collect:

Identity and contact information: your name, billing and delivery addresses, email address and telephone number.
Account information: your account login details, saved preferences and order history.
Order and transaction information: products ordered, order value, discounts, returns, refunds, delivery status and related correspondence.
Payment information: payment status, payment method and limited transaction details. Full payment-card details are processed by our payment providers and are not stored by Gro Chem.
Customer-service information: messages, enquiries, reviews, complaints, photographs and other information you provide when contacting us.
Marketing information: your marketing preferences, consent records and interactions with our emails or promotions.
Technical and usage information: IP address, device and browser information, time zone, approximate location, website activity, referral source and security logs.
Cookie and similar-technology information: information collected through cookies, pixels and similar technologies, subject to your consent choices where required.

We do not intentionally collect special-category information, such as health, biometric, religious or political information. Please avoid including this type of information when contacting us unless it is necessary.

3. How we collect your information

We collect personal information:

directly from you when you place an order, create an account, contact us, make a return, subscribe to marketing or submit information through our website;
automatically when you browse or interact with our website, subject to your cookie choices; and
from service providers involved in your order or website use, such as Shopify, payment providers, couriers, fraud-prevention services and analytics platforms.

4. How and why we use your information

UK data-protection law requires us to have a lawful basis for each use of personal information.

Purpose	Information used	Lawful basis
Process, fulfil and deliver orders	Identity, contact, order, transaction and payment information	Performance of our contract with you
Manage payments, returns, refunds and cancellations	Identity, contact, order, transaction and payment information	Performance of our contract and compliance with legal obligations
Provide customer service and respond to enquiries or complaints	Identity, contact, order and customer-service information	Performance of our contract and our legitimate interest in supporting customers and resolving issues
Detect and prevent fraud, misuse and security threats	Identity, transaction, payment, technical and usage information	Our legitimate interests in protecting customers, our website and our business; and legal obligations where applicable
Maintain accounts, tax and business records	Identity, order, transaction and payment information	Compliance with legal obligations and our legitimate interest in maintaining accurate business records
Operate, troubleshoot and improve our website and services	Technical, usage, order and customer-service information	Our legitimate interests in running and improving our business; consent where non-essential cookies or similar technologies are involved
Send marketing communications	Identity, contact, marketing and communications information	Consent, or our legitimate interests where electronic-marketing law permits
Personalise advertising and measure marketing performance	Technical, usage, marketing and cookie information	Consent where required by the Privacy and Electronic Communications Regulations (PECR)
Establish, exercise or defend legal claims	Relevant identity, contact, order, transaction and communications information	Our legitimate interests and compliance with legal obligations

Where we rely on legitimate interests, we consider whether our use is necessary, proportionate and consistent with your reasonable expectations. You may object to processing based on legitimate interests in certain circumstances.

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect processing carried out before withdrawal.

5. Marketing communications

We may send you news, offers or product information where you have consented or where the law otherwise permits us to do so.

You can unsubscribe at any time by using the link in a marketing email or contacting info@growchem.co.uk. Unsubscribing from marketing will not stop essential service messages about your orders, deliveries, returns or account.

We do not sell your personal information or provide it to other businesses for their own direct marketing without your permission.

6. Cookies and similar technologies

Our website uses cookies and similar technologies for essential functions, security, remembering preferences, analytics and marketing.

Strictly necessary cookies may operate without consent where permitted by law. We ask for consent before using non-essential analytics, advertising or personalisation cookies. You can accept, reject or change your choices through our cookie banner or cookie settings.

Please see our Cookie Policy for details of the cookies we use, their purposes, providers and duration.

7. Who we share information with

We may share personal information with:

Shopify and website-service providers that host and operate our online store;
payment providers that process and protect transactions;
couriers and delivery partners that deliver and track orders;
fraud-prevention, security and IT providers that help protect our website and business;
analytics, advertising and marketing providers, subject to your consent where required;
accountants, insurers, professional advisers and claims handlers where reasonably necessary;
government bodies, regulators, courts, law-enforcement agencies or tax authorities where disclosure is required or permitted by law; and
a buyer, seller or adviser involved in a genuine business sale, merger, restructuring or transfer, subject to appropriate confidentiality and data-protection measures.

Service providers acting as our processors are required to protect personal information and process it only for authorised purposes. Some providers may also act as independent data controllers for parts of their services and will provide their own privacy information.

Our store is hosted by Shopify. For information Shopify processes for its own purposes, including services such as Shop or Shop Pay, please see the Shopify Consumer Privacy Policy.

8. International transfers

Some of our service providers, including Shopify and certain technology or payment providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we require an appropriate legal safeguard. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another safeguard permitted by UK data-protection law.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

In general:

order, payment, invoice and tax records are normally retained for up to six years after the relevant transaction or accounting period;
customer-service and complaint records are kept for as long as necessary to resolve the matter and manage any related legal claim;
account information is kept while the account remains active and for a reasonable period afterwards;
marketing information is kept until you unsubscribe or withdraw consent, after which we may retain limited information on a suppression list so that we respect your choice; and
cookie information is retained for the periods described in our Cookie Policy.

We may retain information for longer where required by law, necessary for a legal claim or appropriate due to an unresolved complaint, fraud concern or investigation. We securely delete or anonymise information when it is no longer needed.

10. Data security

We use reasonable technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

Access is limited to people and service providers that need the information for authorised purposes. No internet-based service is completely secure, but we review our safeguards and take appropriate action if a personal-data breach occurs.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

be informed about how your personal information is used;
request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your information;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing at any time;
request transfer of information you provided to us where the right to data portability applies;
withdraw consent at any time where we rely on consent; and
challenge certain decisions made solely by automated means that have legal or similarly significant effects.

These rights are not absolute and may be subject to legal exemptions. We may need to verify your identity before responding. We normally respond to valid requests within one month, although the law allows additional time for particularly complex or numerous requests.

To exercise a right, email info@growchem.co.uk.

12. Automated decision-making and fraud checks

We and our payment or fraud-prevention providers may use automated tools to assess transactions for signs of fraud or security risk. A flagged transaction may be reviewed, delayed, declined or cancelled where permitted by law.

We do not intend to make decisions based solely on automated processing that have legal or similarly significant effects without providing the safeguards required by law.

13. Children’s information

Our website is not directed at children, and orders must be placed by someone aged 18 or over. We do not knowingly collect personal information directly from children.

If you believe a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.

14. External links

Our website may contain links to third-party websites. Those websites have their own privacy policies, and we are not responsible for their privacy practices. Please review their policies before providing personal information.

15. Changes to this policy

We may update this policy to reflect changes to our services, providers or legal obligations. The latest version will be posted on this page with the updated date.

Where a change materially affects how we use personal information, we will provide additional notice where appropriate.

16. Questions and complaints

Please contact us if you have a question, wish to exercise a right or have a concern about how we use your information:

Gro Chem Limited, trading as Grow Chem
Email: info@growchem.co.uk
Telephone: 01494 972670
Registered office: Flat 15 Yew Tree Court, Walnut Mews, Sutton, England, SM2 5TL

You also have the right to complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first, but you may contact the ICO at any time:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113