Teaming up to keep your privacy private

Our motto at Grove LLC (“Grovemade,” “we,” “us,” etc.) is “Made the hard way.” We believe that great design inspires others, that craftsmanship and care matter, that there are no shortcuts when it comes to delivering office desk accessories that will help create your ideal workspace.

But what shouldn’t be hard is respecting our customers’ privacy. When it comes to handling your personal information, we want you to rest easy, certain that we’re collecting, protecting, sharing, and using it responsibly, with an eye toward transparency. We also want to share how you can manage that information. This Privacy Policy is part of our effort to achieve these goals.

As you interact with us, you will share your personal information in various ways. Sometimes we collect it directly from you on a voluntary basis. Other times, we use technology to automatically collect personal information. We also share our customers’ personal information with certain third parties that help support our business.

This Policy applies to our Website (https://grovemade.com/) and any sites or products that display these terms. It does not apply to any website, mobile app, service, or product that does not display or link to this Privacy Policy or that contains its own privacy notice. If you do not agree with our policies and practices, please do not use our services. By accessing the Website or using our services, you agree to our use of your personal information in accordance with this Policy.

How we collect personal information

We may collect personal information from you directly or indirectly. When you fill out a form on our Website (to purchase one of our products, sign up for our email newsletter or submit a question or request using one of our online forms), you provide personal information directly to us. Other times, personal information is collected automatically as you use our Website. We also may receive personal information from third parties with whom we work.

We collect personal information when you provide it

When you purchase a product from us, you will provide personal information that includes your name, email address, mailing address, and your phone number. When you opt to receive our email newsletters, you will provide your email address.

If you contact us by phone, you may provide personal information we use to answer your questions, resolve problems, or provide support. We also may collect personal information from you if you use our Website’s online chat feature to answer questions about products or orders.

If you would like to join the Grovemade team, you may provide us with personal information that includes your name and contact information (email and physical address, phone number), employment history, and job title (either the one you have or the one you are applying for).

We collect personal information from third-party sources

We may collect personal information about you from third parties that help support our business, such as payment processors and companies that help our marketing efforts, or when you use social media networks to connect to our Website. Read more about our third-party sources here.

We encourage customers to share their experiences with our products both on our site and social media networks. If you take part in a public conversation, for example, on Facebook, YouTube, or Twitter, we may collect personal information, such as your name and other information you have agreed to make available through your agreement with the social network. Another instance where we may collect personal information is when you click “Share This” or “Like” buttons or otherwise use social media buttons or plug-ins.

We collect personal information using automated technologies

Sometimes personal information is collected by automated technologies and shared with us when visitors or customers navigate through our Website. We may track your browsing actions, log your IP address, and identify your device (mobile phone, tablet, or computer and operating system).

Other automated collection technologies – such as cookies, beacons, tags, and scripts – are used by us to analyze trends, administer the Website, and track users’ movements around the site. We, and our third-party partners, also use these technologies to gather demographic information about our user base as individuals and in the aggregate. Read more about our use of cookies here.

We will not knowingly collect information from anyone younger than 16 years

Our products may be used by anyone, including those younger than 16 years old. But we never knowingly sell products to anyone that young, nor do we collect personal information from them. If we become aware that personal information of anyone younger than 16 has been provided to us, without the proper consent, we will delete the information from our files.

Do-not-track requests

Some Internet browsers offer a “Do Not Track” privacy preference. Generally, when a user turns on the Do Not Track Signal, their browser sends a message to websites requesting that the user not be tracked. Our Website currently does not respond to “Do Not Track” signals.

How we use personal information

We know your personal information is important to you, so we want to be transparent about our use of that information. We use it for a variety of reasons, among them to provide easier, quicker access to our Website and products, make it convenient to pay for those products, and provide information about desktop accessories that may be of interest to you, both through our newsletter and posts on the Website.

As visitors and customers navigate the Website, their movements will be tracked and analyzed on an aggregated basis. This information allows us to improve their Website experience. We sometimes combine personal information from specific customers that allow us to predict who will find particular products most appealing. Tracking product purchases also helps us design and refine marketing campaigns.

We also use personal information:

• To send marketing communications and newsletters through email, once you have subscribed.


• To provide advertisements through social media channels and other sites that are targeted to you based on your product purchases and interest.


• To respond to requests for support or exercise of legal rights.


• To detect fraud, provide access to and maintain the security and integrity of the Website.


• To provide updates regarding the Website and marketing information, such as special promotions or surveys, etc.


• To comply with legal and regulatory requirements applicable to our business and internal policies for maintaining records.


• To protect all parties in the event of disputes.


• To comply with court orders and legal processes, and to enforce our Terms and Conditions and this Privacy Policy.


• For any other legal, business, or marketing purposes that comply with the practices described in this Policy.

When we share personal information

Once your personal information is collected, as detailed above, we may share it with certain third parties for various reasons including to:

• make it easier to purchase our products.


• manage customer requests and track product purchases.


• manage customer emails and send marketing communications to customers who are likely to be interested in specific products.


• help us evaluate Website traffic.

When we share your personal information with vendors and other third parties, we have entered into contracts that limit their use of the information to deliver the contracted services to us. We do not share your personal information, except as detailed in this Policy.

If you make a public post, other users may see it

If you make a post on a third-party social media site, such as Facebook, or by identifying us in your social media feed by tagging us using a hashtag (like #resetthedesk) or “at” (@grovemade), your personal information may be publicly available and is subject to the privacy policies of those third-party social media sites. As a reminder, this Policy describes how we will treat your personal information once it is in our possession.

We recommend you review the privacy policies of any third-party sites you visit to understand the data collection and practices of that third party.

We may share feedback you provide to us

We want to hear how we’re doing. If you have suggestions to improve our products and services, add to our product menu, or what to include in our newsletters, behind-the-scenes stories, and customer profiles, we want those as well.

We love to share success stories, particularly when customers are using our products. We encourage them to submit photos of themselves (or just their favorite desk accessories), which we believe develops community around better workspaces. By submitting a photo to us, we consider this your permission to use it on our Website. If you do not want us to use your image in this way, please do not submit it to us.

Please be aware that any feedback relating to our products and services on our Website or social media channels may be publicly shared.

Eventual successors may access information

In the event of a merger, acquisition, reorganization, bankruptcy, or other sale of all or a portion of our assets, any customer information owned or controlled by us may be among the assets transferred to third parties as successors in interest. As part of this type of transaction, we reserve the right to transfer or assign your personal information to third parties. Other than to the extent ordered by a bankruptcy or other court, or as otherwise agreed to by you, the use and disclosure of all transferred customer information will be subject to this Policy.

We need to comply with legal requirements

We may disclose your information to government authorities or other third parties if any lawful circumstances arise, including when:

• You have given us permission to share your information.


• We are required to do so by law, or in response to a subpoena or court order.


• We believe, in our sole discretion, that disclosure is reasonably necessary to protect against fraud, or to protect our property or other rights or those of other users of the Website, third parties, or the public at large.


• We believe that you have misused the Website by using it to attack or gain unauthorized access to a system or to engage in spamming or other conduct that violates applicable laws or our Terms and Conditions.

How we secure personal information

We have implemented commercially reasonable administrative, physical, and technology-based security measures to protect against loss, misuse, unauthorized access, and alteration of personal information in our systems. We ensure that any employee, contractor, corporation, organization, or vendor who has access to personal information in our systems is subject to legal and/or professional obligations to safeguard that personal information.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or form of electronic storage is 100 percent secure. Therefore, we cannot guarantee its absolute security.

Questions or concerns about our security or privacy.

If you feel that any of our privacy practices or security standards detailed in this Policy have not been followed, please contact us (see Contact Us at the end of this Policy for additional details).

If you have received unwanted or unsolicited e-mail from us or purporting to be sent by us, please forward a copy of that email with your comments to hello@grovemade.com for our review.

Your Rights

We understand that you want to protect and control your personal information. This section details how you may review, update, correct, or delete that information.

Updating or deleting your personal information

You may request that we update or delete your personal information by sending an email to hello@grovemade.com with “Personal Information Updates” in the subject line or by completing our online Web form and selecting “Personal Information Request”. Upon receiving your request, we will update or delete your personal information where allowed or required by applicable law.

Opting out of promotional emails

If you do not wish to receive promotional e-mails from us, you may follow the unsubscribe process at the bottom of the promotional e-mail you received or by emailing us at hello@grovemade.com. Please keep in mind that you still may receive transactional e-mails from us (such as e-mails related to the completion of your purchases, correction of user data, reminder e-mails you have requested, and other similar communications) that may be necessary for us to make the Website available to you or respond to your inquiries and support requests.

European Economic Area, Switzerland, and United Kingdom

Individuals residing in the European Economic Area (EEA), including Switzerland, and the United Kingdom (UK) have additional rights granted under the General Data Protection Regulation (GDPR), the UK Data Protection Act and/or ePrivacy Directive, as applicable. In addition to any of the general rights granted to you under this Privacy Policy, you have the following data protection rights:

• You may request to access, correct, update or request deletion of your personal information based on information collected from accessing our Website.


• You may request additional information related to the purposes for which we process your personal information, the categories of personal information we process, where we originally collected the information, who we share it with, and how long we will retain it.


• You may object to our processing of your personal information, request that we restrict the processing of your personal information or request portability.


• You have the right to opt-out of marketing communications we sent you at any time. You can do so by clicking the “unsubscribe” or “opt-out” link in the marketing emails we send to you. You may also opt-out of other forms of marketing (such as postal or telemarketing).


• Where we have collected and processed your personal information with your consent, you can withdraw your consent at any time. However, withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.


• You have the right to submit a complaint to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authorities. Contact details are available here.

International Transfers

Grovemade is headquartered in the United States. Your personal information will be transferred to, processed, and maintained on computer systems located in the United States.

The United States currently is not a country the European Union has deemed “adequate” under applicable data protection laws. Grovemade collects, transfers, and processes personal information under terms required by applicable law, including: when you provide your consent, to perform a contract with you (such as to deliver products), or to fulfill a compelling legitimate interest of Grovemade in a manner that does not outweigh your rights and freedoms. Grovemade may enter into data protection agreements or other legally approved mechanisms with its vendors to support compliance with applicable law.

We have taken appropriate safeguards to require that the personal information we process will remain protected in accordance with this Policy when transferred internationally, including when processed internationally by third-party service providers and partners. The safeguards we have taken include implementing the European Commission's Standard Contractual Clauses or Binding Corporate Rules, for any transfer of personal information to non-EEA third-party service providers or business partners.

To make a request, please contact us at hello@grovemade.com with “Personal Information Request” in the subject line. Provide full details relating to your request, including your contact information and any other details you believe are relevant. We are committed to responding to requests to exercise data protection rights in accordance with applicable data protection laws.

California Consumer Rights

The California Consumer Privacy Act and the California Privacy Rights Act provides specific rights to those who live in the state of California. If you are a California-based consumer, as that term is defined under California law, this section shall apply in addition to all other applicable rights and information contained in this Policy:

• You have the right to request that we provide you with information about what personal information we collect, use, and disclose.


• You have the right to request that we delete personal information we, or our service providers, store about you.


• You have the right to correct inaccuracies in personal data.


• You have the right to limit use and disclosure of sensitive personal information.


• You have the right to initiate a private cause of action for data breaches.


• We will not discriminate or retaliate against you if you elect to exercise any rights under this section of our Privacy Policy.


• You may request that we not sell your personal information. We do not sell, rent, lease, or trade your personal information with third parties, except as described in this Policy.


• You have the right to designate an authorized agent to make a request on your behalf. Please see the Identity Verification Requirement below for information on our process for verifying we have received a legally valid request.

If you are a California consumer and have additional questions based on this section of our Privacy Policy, email us at hello@grovemade.com or submit a request via our Web form and select “Personal Information Request” from the dropdown list. Be sure to check this Policy for updates, as we will review it at least every 12 months and make necessary changes.

Virginia Consumer Rights

The Virginia Consumer Data Protection Act provides specific rights to those who live in the state of Virginia. If you are a Virginia-based consumer, as that term is defined under Virginia law, this section shall apply in addition to all other applicable rights and information contained in this Policy:

• You have the right to request that we provide you with information about what personal information we collect, use, and disclose.


• You have the right to request that we delete personal information we, or our service providers, store about you.


• You have the right to correct inaccuracies in personal data.


• You have the right to data portability.


• You have the right to opt out of the processing of personal data for targeted advertising purposes.


• You have the right to opt out of profiling based upon personal data.


• We will not discriminate or retaliate against you if you elect to exercise any rights under this section of our Privacy Policy.


• You may request that we not sell your personal information. We do not sell, rent, lease, or trade your personal information with third parties, except as described in this Policy.


• You have the right to designate an authorized agent to make a request on your behalf. Please see the Identity Verification Requirement below for information on our process for verifying we have received a legally valid request.

If you are a Virginia consumer and have additional questions based on this section of our Privacy Policy, email us at hello@grovemade.com or submit a request via our Web form and select “Personal Information Request” from the dropdown list. Be sure to check this Policy for updates, as we will review it at least every 12 months and make necessary changes.

Identity verification requirement

The law requires us to verify that any request submitted was made by someone with the legal right to access the information. Therefore, before accessing or disclosing any information pursuant to a data access request, we may request additional information to verify your identity and legal authority, particularly when the information provided with the request is insufficient for us to confirm legal authority and/or identity.

To make a request, please contact us at hello@grovemade.com with “Personal Information Request” in the subject line or submit a request via our Web form and select “Personal Information Request” from the dropdown list. Please provide full details about your request, including your contact information and anything you believe is relevant. We will provide a response to an access request within the timeframes required by law. If we cannot substantively respond in a timely manner, we will notify you and provide the reason for the delay.

Under certain circumstances, we may not fulfill your request, such as when doing so would interfere with our regulatory or legal obligations, when we cannot verify your identity, if your request involves disproportionate cost or effort, or when the law allows us to retain that information. But we will respond to your request within a reasonable time, as required by law, and provide an explanation.

Updates

This Privacy Policy will be updated to reflect our personal information handling practices. We reserve the right to amend this Policy at any time, for any reason, without additional notice to you, other than through posting the updated Privacy Policy on our Website. We invite you to return to this page to ensure you are informed of any updates we make about how we collect, use, and protect personal information. You can see when this Privacy Policy was last updated by checking the “last updated” date displayed at the beginning of this Policy.

Contact Us

If you have questions about the way we handle personal information, please contact us: