Welcome to our website grownalchemist.com (the “site”).
Who is the data controller?
For any clarification, question or requirement related to your privacy and the processing of your personal data you can contact us at any time by sending a request to our firstname.lastname@example.org.
What data we process and why
The personal data that Group Fourteen collects is that provided by you to us when finalizing an order and purchasing goods, and those that we collect as you browse or use the services offered by grownalchemist.com. Group Fourteen can collect data about you, such as personal details like name and surname, shipping and billing address, browsing data and your purchase habits.
Your personal data will be processed for the following purposes:
• Conclude and execute the purchase contract for the articles offered on grownalchemist.com;
• Provide you with the services of grownalchemist.com such as subscription to the newsletter;
• Allow registration to the site and use of services reserved for registered users;
• Manage your requests to our customer service.
In the aforementioned cases, the processing of your personal data is legitimate as it is necessary to execute a contract with you or to provide you with the service you have specifically requested.
We also conduct statistical surveys and analyzes with data in aggregate form to understand how users interact with and use the site, to improve our offer and our services.
Only with your express consent, however, we process your personal data to:
• Perform commercial and promotional communication activities;
• Customize the site and the commercial offers based on your interests.
Who will process your data?
Your personal data is processed by duly trained Group Fourteen staff in capacity of data controller. For organizational and functional needs related to the provision of services on grownalchemist.com, moreover, your data could be processed by our suppliers. The latter have been evaluated and chosen by Group Fourteen for their proven reliability and competence. Some of these subjects may also be based in non-EU countries and, in these cases, the transfer of your personal data in these countries is performed in compliance with the guarantees provided by law.
How long do we keep your data?
We keep your personal data for a limited period of time, depending on the purpose for which it was collected, at the end of which your personal data will be deleted or otherwise rendered anonymous in an irreversible way. The retention period is different depending on the purpose of the processing: for example, the data collected during the purchase of goods on grownalchemist.com are processed until the conclusion of all administrative and accounting formalities, and is, therefore, stored in accordance with local tax legislation (ten years); those used to send you our newsletter are kept until you ask to stop receiving it.
What are your rights?
At any time, depending on the specific processing, you can: withdraw your consent to data processing; know what are your personal data in our possession, their origin and how they are used; request the update, correction or integration as well, in the cases provided for by the current provisions, the cancellation, the limitation of processing or oppose to their processing. If you wish, you can request to receive personal data in possession of Group Fourteen that concern you in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party indicated by you.
This policy may undergo changes and additions over time, so we invite you to periodically check its contents. Where possible, we will try to inform you promptly of any changes made.
1. General information
Who is the data controller?
Group Fourteen holdings Pty Ltd. with registered offices 3 Moss Place, North Melbourne VIC 3051, Australia (“Group Fourteen”), as data controller.s the data controller, the subject who decides how and why to process your personal data.
You can always contact Grown Alchemist in writing to the above address writing to our email@example.com.
2. What personal data do we collect?
The categories of personal data that Group Fourteen collects and treats when you browse or purchase on grownalchemist.com are as follows:
A. We collect the personal data required to conclude and execute your purchase on grownalchemist.com such as your name, email address, shipping address, billing address, phone number and payment details;
B. We collect your e-mail address when you sign up for our newsletter service;
C. We process the personal data you provide us when you contact our customer care to request assistance;
D. With your prior consent, we collect your personal data for marketing purposes;
E. For the registration of your grownalchemist.com account, we collect your name and surname, your e-mail address, password and your date of birth. If you are a registered user, we collect information about your access to the reserved area of the site. Subject to your express consent, and through the analysis of your personal data, we process information about your interests and preferences relating to our products and services, in order to customize the site and the commercial offers based on your interests. In case of authentication to the grownalchemist.com account through external social networks, we collect from these third parties the data necessary for registration/authentication through facebook, and through google. We collect information about you also from third parties and, in particular, from facebook and google+. This information includes the following data categories: e-mail address.
F. We collect information about your browsing on grownalchemist.com, such as the pages you visit and how you interact with the single page and we save this information on our servers.
Protecting the safety and privacy of children is very important to us. We do not accept registrations or orders submitted by and will not knowingly collect or use personal data from anyone under the age of sixteen (16) years. We inform you that Group Fourteen does not process personal data relating to minors. If you access grownalchemist.com and use the services offered by Group Fourteen you declare that you are of legal age.
3. How do we use the data we collect?
Group Fourteen collects and processes your personal data for the following purposes:
A. Conclude and execute the purchase contract for the products offered on grownalchemist.com. When you complete your purchase, we will request you for the personal data necessary for the execution of the contract; such as payment, anti-fraud checks if you choose to pay by credit or debit card, billing, shipping of the product and possible management of the made.
B. Registration on the site and use of the services offered to registered users. The registration on the site is possible through the inclusion of some personal information, necessary to ensure your identification and the performance of services offered to registered users.
C. Provision of the services offered on grownalchemist.com. For this purpose, Group Fourteen needs to collect, in relation to each service and its characteristics, the personal data necessary for the performance of the service requested.
D. Management of requests to our customer care, which uses the personal data you provide to meet your requests for information and requests for assistance.
E. Sending of CVS. If you send us your CV to be considered for an open vacancy, we shall use the information contained in your CV exclusively for this purpose. Your CV will be kept for a maximum period of six months, after which it will be deleted: if you want, you are more than welcome to send us a new updated version.
F. Statistical analysis and surveys. We use some information about your use of the site to perform statistical analysis and surveys in order to improve our offer and services;
G. Sending commercial and promotional communications following the purchase of one of our products, so-called soft spam. Following the purchase of one of our products on the site, we will send you to the e-mail address that you provided us communications containing our business proposals and related products and services.
H. Subject to your express consent, we may use the contact details you have provided for commercial communications on our products and services, in order to update you on news, new arrivals, exclusive products, our offers and promotions. In addition, and always with your consent, we will be able to use your contacts as part of market research and surveys for the detection of satisfaction in order to improve our services and the relationship with our users. These communications will take place exclusively through the methods you have chosen (via e-mail, SMS, telephone, paper mail, WhatsApp).
I. Only with your consent, Group Fourteen will be able to personalize your experience as a registered user on grownalchemist.com, proposing anticipations and offers in line with your tastes and sending you commercial communications tailored to your interests, these communications will only take place in the manner you selected (via e-mail, SMS, telephone, paper mail, WhatsApp).
J. The customization is made possible by the analysis of your personal information in our possession, described in the previous section “What personal data do we collect?”. For further information on this data, and on the activity that allows its process, please refer to the section “you’re My Account profile”.
Should you wish to authorize the activities referred to in points h) and i) and subsequently do not wish to receive further communications from Grown Alchemist ,or would like to limit the manner in which you are contacted, you may interrupt these communications at any time by simply clicking on the appropriate cancellation link at the bottom of each communication, accessing your My Account, contacting Grown Alchemist at firstname.lastname@example.org. We inform you that you may receive further communications from us even after submitting your cancellation request, as some submissions may have already been planned, our systems may take some time to process your request.
With regards to all the activities aforementioned, we shall process your personal data mainly through it and electronic tools; the tools we use guarantee high safety standards, in full compliance with current legislation.
4. Your my account profile
As part of your Grown Alchemist account, we offer you the possibility to use the following services:
• My orders: track the shipping of your orders, change or return items that are not for you and see the history of your orders.
• Account information: manage your registration data.
• Shipping address: save or change your addresses to have them always at hand and complete your purchases faster.
With your express consent Group Fourteen will customize your experience and the contents of the commercial communications and offers that you will see when you browse on grownalchemist.com as a registered user, based on your interests. This activity facilitates your search for products and services tailored for you and that might interest you, and at the same time allows us to improve our offer for you. The customization is made possible by the analysis of your personal information in our possession, described in the previous section “What personal data do we collect?”. In particular, the information on purchases you have made in the past and those relating to the sections of the site you visit most often or the services you use most often help us to understand what products and services you are most interested in.
To ensure that the information we have is correct and allow us to carry out the activities aforementioned, we invite you to access the “My Account” section of grownalchemist.com and, if you deem it necessary, to update them.
5. Legal basis of the processing
We treat your personal data only in the presence of one of the conditions provided for by current legislation, and specifically:
A. For the conclusion and execution of a contract of which you are a part.
When we process your data for the conclusion of the purchase contract of which you are a part we take care to use only the minimum information necessary for the execution of the same. This basis legitimizes the processing of personal data that takes place in the following activities:
Conclusion and execution of a purchase contract for the products offered on grownalchemist.com;
Registration on the site and use of services reserved for registered users;
Provision of services offered on grownalchemist.com;
Management of requests to our customer care.
The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data it will not be possible to conclude or execute the contract and your requests. This means that you will not be able to purchase the products and you will not be able to use the Group Fourteen Asia services and that Group Fourteen Asia will not be able to handle your requests;
B. To comply with a legal obligation.
In the event of conclusion of a contract for the purchase of goods on grownalchemist.com, the processing of the data shall take place in order to fulfill the legal obligations to which Group Fourteen is held in accordance with the tax provisions and other regulations to which Group Fourteen is subject. You are free to decide whether to conclude a contract and whether or not to disclose your data, but if you conclude it, your data will be necessary and will be processed to give effect to the aforementioned legal obligations to which Group Fourteen is required.
The processing of a CV spontaneously sent, is performed to assess candidates with respect to a possible job position at Group Fourteen, is legitimate because it is expressly authorized by a law, which specifies that in this case the consent of the person to whom they refer personal data. You are free to share or not with us your CV, but failing that we will not be able to evaluate your candidacy for a job position at Group Fourteen;
C. For our legitimate interest.
Some of your personal data in case of purchase of products on grownalchemist.com by credit or debit card, may be processed to perform anti-fraud verifications: we have a legitimate interest in the performance of activity to prevent and prosecute any fraudulent activity. For internal administrative purposes, data may be processed by companies belonging to Group Fourteen.
D. Based on your consent.
We will perform the following processings only with your express consent:
Marketing activities and public opinion polling and market research;
Analysis of your browsing and consumption habits in the use of your My Account profile, in order to customize your experience on our site.
The provision of your personal data for these activities is completely optional. You are free to provide us with your data for these purposes, but without it, it will not be possible for Group Fourteen to perform marketing activities, opinion polls and market research, and to analyze your habits.
6. Who will process your data
Your personal data will be processed by Group Fourteen internal staff specifically trained and authorized for this purpose. Your personal data will also be transmitted to third parties that we use to provide our services; these subjects have been adequately selected and offer a guarantee of compliance with the rules on the processing of personal data. These persons have been appointed as data controllers and carry out their activities according to the instructions given by Group Fourteen and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialized in it and telematic services; couriers; companies that carry out marketing activities; companies specialized in market research and data processing.
Your data may be transmitted to police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow Group Fourteen to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
7. App version of the site
In addition to the data referred to in the paragraph “What personal data do we collect?”, when you use the app version of our site, Group Fourteen may, with your express consent:
A. Collect personal data within the marketing activity, in order to send notifications to your device. At any time you can disable the notifications by changing your choice from the settings of your mobile device;
B. Collect information in an automated way, such as data relating to your traffic and your stay on the app or your IP address, in order to improve our offer of products and services.
8. Web push notification
Depending on which device you use, you may receive, upon giving your consent, push notifications regarding our offers, new items, your wish list and your cart.
To deactivate notifications, depending on the platform and/or browser used, follow the steps listed below:
Desktop: right-click on notification > disable notifications from www.grownalchemist.com
Mobile: access the notification center > site parameters > notifications > block notifications from www.grownalchemist.com
• Chrome: settings > show advanced settings > privacy – content settings > notifications - manage exceptions > enter www.grownalchemist.com and select “block”
• Firefox: options > content > notifications – select > www.grownalchemist.com – “block”
• Safari: preferences > notifications > from here select “deny”
9. Transfer of the data
Some of the third parties listed in the previous paragraph “who will process your data?” May be located in countries outside the European Union which, nevertheless, offer an adequate level of data protection, as established by specific decisions of the European Commission. (http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1).
The transfer of your personal data to countries that do not belong to the European Union and that do not ensure adequate levels of protection will be performed only after conclusion between Group Fourteen and said subjects of specific agreements, containing safeguard clauses and appropriate safeguards for the protection of your data personal so-called “standard model clauses”, also approved by the European Commission, or if the transfer is necessary to the conclusion and execution of a contract between you and Group Fourteen (for the purchase of goods offered on our site, for registration on the us site or the use of services on the site) or for the management of your requests.
10. For how long do we keep your data?
We keep your personal data for a limited period of time; depending on the type of activity that involves the processing of your personal data.
After this period, your data will be permanently erased or otherwise rendered anonymous in an irreversible way.
Your personal data is stored in compliance with the terms and criteria specified below:
A. Data collected to conclude and execute contracts for the purchase of goods on grownalchemist.com: until the administrative and accounting formalities have been met. The billing data will be kept for ten years from the date of the invoice;
B. The data of the registered user: the data will be stored until you request cancellation of you’re My Account profile;
C. Payment data: until payment certification and the conclusion of its administrative and accounting formalities resulting from the expiration of the right of withdrawal and the terms applied for contesting the payment;
D. Data collected in the context of the use of services offered on grownalchemist.com to the user: these data are retained until the termination of service or cancellation of the subscription to the service by the user;
E. Data related to the requests of the users to our customer service: the useful data to assist you will be kept until the fulfillment of your request;
F. CV: for six months from receipt;
G. Data used for commercial communication activities towards users who purchase products on grownalchemist.com (soft spam): these data are kept until the termination of service or the exercise of the opposition by cancellation by the user;
H. Data provided for commercial communications activities, opinion polls and market research: until the request to interrupt the activity and in any case within 2 years from the last interaction of any kind of user with Group Fourteen;
I. Data used to personalize the site and to show customized commercial offers: as long as the user does not request the cessation of the activity and in any case within two years from the last interaction of any kind of user with Group Fourteen;
J. Data used for conducting market research and surveys for the detection of satisfaction: as long as the user does not request the termination of the activity.
In any case, for technical reasons, the termination of the processing and the subsequent cancellation or irreversible anonymisation of the related personal data will be final within thirty days of the terms indicated above.
11. Your rights
At any time you can exercise the rights with reference to the specific processing of your personal data by Group Fourteen. Find below their general description and how to practice them.
A. Access your data and modify it: you have the right to access your personal data and to request that they be correct, modified or integrated with other information. If you wish, we will provide you with a copy of your data in our possession.
B. Revoke your consent: you can revoke at any time a consent you have given for the processing of your personal data in relation to any activity for marketing purposes. In this regard, we remind you that marketing activities are considered the sending of commercial and promotional communications, the conduct of market research and surveys for the detection of satisfaction for the customization of the site and commercial offers according to your interests. Upon receipt of your request, we will promptly cease the processing your personal data based on this consent, while different processings or based on other conditions will continue to be carried out in full compliance with the provisions in force.
C. Opposing the processing of your data: you have the right to object at any time to the processing of your personal data on the basis of our legitimate interest, explaining the reasons that justify your request; before accepting it, Group Fourteen will have to assess the reasons for your request.
D. Delete your data: in the cases provided for by current legislation you can request the deletion of your personal data. Upon receipt and assessment of your request and, if legitimate, it will be our care to cease timely processing and delete your personal data.
E. Request that the processing of your personal data is temporarily limited: in this case, Group Fourteen will continue to keep your personal data but will not process it, unless it is subject to your different request and the exceptions established by law. You can get the limitation of processing when you dispute the accuracy of your personal data, when the processing is unlawful but you oppose to the deletion of your data, when your data is no longer relevant for anymore but you need to exercise your right in court and when you oppose your processing, in the period in which we evaluate the reasons for your request.
F. Request your data or transfer it to a person other than Group Fourteen (“right to data portability”). You may request to receive your data that we process based on your consent or on the basis of a contract with you in a standard format. If you wish, and where technically possible, we can, upon request, transfer your data directly to a third party of your choice.
In order to exercise some of your rights aforementioned you can access you’re My Account, or alternatively, you can contact us by calling by writing to email@example.com. , or by writing to the address of the data controller aforementioned.
In order to ensure that the data of our users is not infringed or illegitimately used by third parties, we will request you for some information to be sure of your identity before accepting your request to exercise one of the rights indicated.
12. Security measures
We protect your personal data with specific technical and organizational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. In particular, we use security measures that guarantee: the pseudonymisation or the encryption of your data; the confidentiality, integrity, availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. Furthermore, Group Fourteen undertakes to test, verify and regularly evaluate the effectiveness of technical and organizational measures in order to guarantee the continuous improvement in the safety of processings.
For the best possible protection of your personal data outside the limits of our control, your device should be protected (such as by updated antivirus systems) and your internet service provider should take appropriate measures for the security of network data transmission (such as, for example, firewalls and anti-spam filtering).
While we take reasonable steps to protect your personal data, we cannot guarantee that the personal data you disclose to us will be 100% secure, nor that any data breach will not occur.
You accept the inherent security implications of dealing online over the internet and will not hold Grown Alchemist or their processors responsible for any data breach unless it is due to our negligence.
If you believe that the processing of your personal data has been unlawfully done, you can file a complaint with the competent authority regarding the protection of personal data in your country. We also inform you that, according to the European legislation to which the data processor of Italy is subject, you can also contact the Italian Data Protection Authority. Further information on how to file a claim is available on the site of the Italian Data Protection Authority, at http://www.garanteprivacy.it.
14.Changes to the present policy
The constant evolution of our services may involve changes in the characteristics of the processing of your personal data described up to now. Consequently, this privacy notice may be subject to changes and additions over time, which may also be necessary with regard to new regulatory measures regarding the protection of personal data.
We request of you, therefore, to periodically check the contents: where possible, we will try to inform you promptly about the changes made and their consequences.
The updated version of the privacy notice, in any case, will be published on this page, with indication of the date of its last update.
15. Legislative references and useful links
The processing of your personal data is performed by Group Fourteen, is subject to the General Data Protection Regulation (EU) 2016/679, the rules on the processing of personal data.
Group Fourteen uses automatic systems of data collection, such as cookies.
We disseminate cookies in connection with functions such as browsing the catalogue, purchasing products on-line and supplying “My Account” services.
1. What is a cookie?
A cookie is a small text file that is placed on the hard drive of an internet user’s device when you visit a website. They allow the site to “remember” your computer, but not specifically who is using it, and improve your user experience. By associating identification numbers in the cookies with other customer information when, for example, you log-in to the site, then the site knows that the cookie information relates to you
We disseminate cookies in connection with functions such as browsing the catalogue, purchasing products on-line and supplying “My account” services.
Cookies help us operate the website through customising the website according to the user’s navigation behaviour and user profile. This enhances and personalises the customer experience across the website, improves the browsing experiences, provides analytics and delivers relevant advertising to you and your interests.
We use third party cookies across our website to enable third party features or functionality, such as advertising and analytics.
3. What cookies do we use?
Below you will find a list of the cookies used on the site. The cookies used on the site are changed from time-to-time. If you think there is a cookie that isn’t listed below, please contact us.
• Guest-view: stores the order id that guest shoppers use to retrieve their order status.
• Login_redirect: preserves the destination page the customer was navigating to before being directed to log in.
• Mage_messages: tracks error messages and other notifications that are shown to the user, such as the cookie consent message, and various error messages. The message is deleted from the cookie after it is shown to the shopper.
• Mega-translation-storage: stores translated content when requested by the shopper.
• Product_data_storage: stores configuration for product data related to ‘recently viewed’ / ‘compared products’
• Recently_compared_product: stores product ids of recently compared products.
• Recently_commpared_product_previous: stores product ids of previously compared products for easy navigation.
• Recently_viewed_product: stores product ids of recently viewed products for easy navigation.
• Recently_viewed_product_previous: stores product ids of recently previously viewed products for easy navigation.
• Stf: records the time messages that are sent by the sendfriend.
• X-magento_vary: configuration setting that improves performance when using varnish static content caching.
• Amz_auth_err: used by amazon pay.
• Amz_auth_logout: used by amazon pay.
• Form_key: a security measure that appends a random string to all form submissions to protect the data from the cross-site request forgery (csrf).
• Mage-cache-sessid: the value of this cookie triggers the cleanup of local cache storage. When the cookie is removed by the backend application, the admin cleans up local storage, and sets the cookie value to “true”.
• Mage-cache-storage: local storage of visitor-specific content that enables ecommerce functions.
• Mage-cache-storage-section-invalidation: forces local storage of specific content sections that should be invalidated.
• Persistent_shopping_cart: stores the key (id) of persistent cart to make it possible to restore the cart for an anonymous shopper.
• Private_content_version: appends a random, unique number and time to pages with customer content to prevent them from being cached on the server.
• Section_data_ids: stores customer-specific information related to shopper-initiated actions such as display wish list, checkout information, etc.
•Store: tracks the specific store view / locale selected by the shopper.
Third Party Cookies
• Google Analytics:
For more details on this service and how google uses your data visit: http://www.google.com/analytics and www.google.com/policies/privacy/partners/
• Google Adwords:
Google adwords is used to communicate relevant information and ads to customers and measure the effectiveness of campaigns.
For more details on google advertising cookies policy visit:
• Facebook pixel cookie
Facebook pixel cookies are used to deliver relevant information and ads, and measure the effectiveness of campaigns.
For more information on the facebook cookies policy visit:
• Bronto Cookie
Grown Alchemist uses Bronto as a marketing automation platform so your experience with us can be personalised and the effectiveness of campaigns can be measured.
For more information on the Bronto Cookies Policy, visit:
4. How can you manage your cookie preferences?
Your interest browser contains instructions on how to carry out these procedures of deletion. The below links provide instructions on how to alter these settings for each browser:
• Google Chrome: https://support.google.com/chrome/answer/95647?co=genie.platform%3ddesktop&hl=en
• Mozilla Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences
• Microsoft Internet Explorer: https://support.microsoft.com/en-nz/help/17442/windows-internet-explorer-delete-manage-cookies
• Safari: https://support.apple.com/en-nz/guide/safari/manage-cookies-and-website-data-sfri11471/mac
If you use multiple browsers (e.g. Google Chrome, Firefox, etc.) You must repeat this procedure with each one, and if you connect to the web from multiple devices (e.g. Your mobile or computer), then you will need to set your preferences on each browser on each device.
Please note that if you decide to disable our cookies, then it is possible that some parts of our website will not function properly such as the normal surfing or the purchase activity. You may also lose any personalized activity, and the advertising you receive when you visit this website will not be tailored to your interests.
5. How to disable Third Party Cookies and advertising or targeting cookies from grownalchemist.com
For information on how to disable third party cookies and advertising or targeting cookies on your device here.
6. More information
If you’d like to learn more about cookies, or any questions or suggestions, please contact us at Grown Alchemist Pty Ltd. with registered offices 3 Moss Place, North Melbourne VIC 3051, Australia (“Group Fourteen”), firstname.lastname@example.org.