Legal information
Privacy
Notice.
This notice explains what information Grinning Grimlins may collect, how it may be used, and the choices available to visitors and customers.
Information Collected
Information may include contact details submitted through forms, order and shipping information, customer-support communications, and technical information such as browser type, device information, approximate location, and pages viewed. If you create or use a customer account, Shopify may process your name, email address, saved delivery addresses, order history, and optional clothing-size, fit, or style preferences that you choose to save. Grinning Grimlins does not receive or store your full payment-card details through this storefront.
How Information Is Used
Information may be used to provide products and customer support, process and fulfill orders through Shopify and Tapstitch, make account sign-in and checkout more convenient, remember preferences you choose to save, communicate about orders or requested updates, maintain site security, improve the storefront, and measure marketing and business performance. Account details and saved preferences are handled through Shopify and are not sent to the storefront's analytics events.
Customer Accounts And Marketing Choices
Customer account sign-in is provided by Shopify using a one-time verification code. You may edit your profile, saved addresses, and optional fit preferences on the account page. Newsletter and promotional email are optional; account holders can subscribe or unsubscribe from the account page, and marketing messages include an unsubscribe method where applicable. You can shop and check out without creating an account.
Contact Form Inquiries
If you submit the contact form, we collect the name, email address, selected inquiry purpose, optional order number, subject, and message you provide. We use those details to respond and maintain customer-support records. Submissions are stored in Supabase and notification emails are sent through Google Workspace. Please do not include payment-card details or other sensitive information in the message. Contact inquiries are kept only as long as reasonably needed for support, legal obligations, and business records.
Analytics And Cookies
The storefront uses essential cookies and browser storage to remember privacy choices and keep the Shopify cart working. The consent cookies are named gg_consent and gg_meta_consent. When analytics is enabled, first-party identifiers such as gg_visitor_id, a local browser cache identifier, and a session identifier may be stored in cookies, local storage, or session storage to measure visits and site activity. Analytics may include pages viewed, product views, cart actions, checkout starts, newsletter events, referring page, campaign parameters, browser family, operating system, language, timezone, viewport size, device category, and an approximate country, region, or city supplied by Vercel. Precise location is not collected. When advertising measurement is enabled, the Meta Pixel and Conversions API may send PageView, product-view, add-to-cart, checkout-start, and completed-purchase events to Meta Platforms. These events may include the viewed or purchased products, quantities, order value and currency, event page, browser and network information, Meta click/browser identifiers, and, for a consented purchase, a SHA-256 hashed email address. The Pixel is loaded only after the visitor enables advertising measurement in cookie preferences, and server events are sent only when that choice is recorded with the cart/order. Shopify may use cookies and similar technologies as described in Shopify's own privacy documentation.
Sharing Information
Information may be shared with service providers that support Shopify checkout and customer accounts, payment processing, Tapstitch fulfillment, shipping, analytics storage, email-list management, hosting, security, and customer support. If you enable advertising measurement, the event and identifier information described above is also shared with Meta Platforms to measure advertising and help attribute purchases. Information will not be sold as a standalone customer list.
Retention And Security
Information will be retained only as reasonably necessary for the purposes described above, legal obligations, dispute resolution, and business records. Reasonable administrative, technical, and organizational safeguards will be used, although no online service can guarantee absolute security.
Your Choices
Depending on location, individuals may have rights to access, correct, delete, or restrict certain uses of their information. Submit requests through the contact form. Marketing messages include an unsubscribe method where applicable.
Last updated: October 15, 2026