Privacy Policy – Gray Matter Chemicals
Last updated: [date]
Gray Matter Chemicals (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR / AVG) and applicable Dutch law.
1. Who We Are
The data controller responsible for your personal data is:
Gray Matter Chemicals
Hague, Netherlands
Email: [email protected]
2. What Personal Data We Collect
We may collect the following data:
- Identity and contact details: name, email address, phone number, delivery address.
- Order details: products ordered, order history, delivery information.
- Payment details: bank transfer references and account name, or Bitcoin transaction details (such as the transaction ID and sending wallet address). We do not store full bank account credentials.
- Age confirmation: confirmation that you are 21 years of age or older.
- Communications: messages sent through our 24/7 live assistant, contact form or email.
- Technical data: IP address, browser type, device information and website usage data collected through cookies.
3. Why We Use Your Data
We process your personal data for the following purposes and legal bases:
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Verifying and matching payments | Performance of a contract |
| Confirming age and eligibility to purchase | Legal obligation / legitimate interest |
| Responding to support requests via live chat or email | Performance of a contract / legitimate interest |
| Preventing fraud and misuse of our products | Legitimate interest |
| Keeping financial and tax records | Legal obligation |
| Sending marketing emails (if you opt in) | Consent |
| Improving our website through analytics | Consent (via cookies) |
4. Sharing Your Data
We do not sell your personal data. We only share it where necessary with:
- Delivery partners to ship your order.
- Payment and banking providers to process bank transfers.
- IT, hosting and live chat service providers who support our website.
- Review platforms such as Trustpilot, only if you choose to leave a review or we invite you to do so.
- Authorities, where required by law.
All service providers process data on our instructions and under appropriate data processing agreements.
5. Bitcoin Payments
Bitcoin transactions are recorded on a public blockchain. This is outside our control, and transaction data on the blockchain cannot be altered or deleted. We only link transaction details to your order for payment verification and record-keeping.
6. International Transfers
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.
7. How Long We Keep Your Data
- Order and payment records: 7 years, as required by Dutch tax law.
- Customer support communications: up to [24 months] after your last contact.
- Marketing data: until you unsubscribe or withdraw consent.
- Technical and cookie data: in line with our Cookie Policy.
8. How We Protect Your Data
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (SSL), restricted access and secure storage.
9. Cookies
Our website uses cookies. Functional cookies are necessary for the site to work. Analytics and marketing cookies are only placed with your consent. See our Cookie Policy for details.
10. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time
To exercise your rights, contact us at [privacy email address]. We will respond within one month.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
11. Minors
Our website and products are intended only for persons aged 21 and over. We do not knowingly collect data from anyone under 21. If we learn that we have done so, we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of the last update.
13. Contact
For questions about this Privacy Policy or your personal data, contact:
Gray Matter Chemicals – [email protected]
