Privacy policy

PRIVACY POLICY

Last updated: 24 July 2026

1. Introduction

OASIS PROJECT LTD, trading as Grillpova (“Grillpova”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit grillpova.co.uk, place an order, contact us or otherwise use our services.

For the purposes of UK data protection law, OASIS PROJECT LTD is the data controller responsible for the personal information described in this policy.

2. Information We Collect

Depending on how you interact with us, we may collect the following information:

Identity and contact information

  • Full name

  • Billing and delivery address

  • Email address

  • Telephone number

Order and transaction information

  • Products purchased

  • Order number and order history

  • Delivery and tracking information

  • Returns, refunds, cancellations and warranty requests

  • Communications relating to your order

Payment information

Payments are processed securely by our payment service providers. We generally receive limited payment information, such as payment status, payment method and transaction reference.

We do not intentionally collect or store your complete payment card number or card security code.

Customer service information

We may collect information you provide when you contact us, including messages, enquiries, complaints, product reviews and supporting photographs or documents.

Technical and usage information

When you use our website, we and our service providers may automatically collect:

  • IP address

  • Browser and device type

  • Operating system

  • Cookie identifiers

  • Pages viewed and links selected

  • Approximate location based on IP address

  • Website activity and security information

Marketing preferences

If you subscribe to marketing communications, we may collect your email address, subscription status and communication preferences.

3. How We Collect Your Information

We may collect personal information:

  • Directly from you when you place an order, create an account, contact us, request a return or subscribe to marketing.

  • Automatically through cookies and similar technologies when you use our website.

  • From service providers involved in operating our store, processing payments, preventing fraud and delivering orders.

  • From publicly available or legally permitted sources where necessary to protect our business and customers.

4. How We Use Your Information

We use personal information for the following purposes and legal bases:

To fulfil our contract with you

We use your information to:

  • Process and confirm orders.

  • Take and verify payments.

  • Deliver products and provide tracking.

  • Process cancellations, returns, refunds and warranty claims.

  • Communicate with you about your order.

  • Provide customer support.

To comply with legal obligations

We may process information to:

  • Maintain tax, accounting and transaction records.

  • Comply with consumer protection and product safety requirements.

  • Respond to lawful requests from regulators, courts or law-enforcement authorities.

  • Prevent and investigate unlawful activity where required by law.

For our legitimate interests

Where those interests are not overridden by your rights, we may use information to:

  • Operate, secure and improve our website.

  • Prevent fraud, abuse and unauthorised transactions.

  • Diagnose technical problems.

  • Respond to general enquiries and complaints.

  • Maintain appropriate business and customer-service records.

  • Understand how customers use our store.

  • Protect our legal rights and resolve disputes.

With your consent

Where consent is required, we may use information to:

  • Send promotional emails.

  • Use non-essential analytics or advertising cookies.

  • Personalise marketing and measure advertising performance.

You may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. How We Share Your Information

We only share personal information where necessary for the purposes described in this policy. Recipients may include:

  • Shopify and ecommerce service providers that host and operate our online store.

  • Payment service providers that securely process payments and help prevent fraud.

  • Delivery providers, including DHL, for order fulfilment, delivery and tracking.

  • Website, IT and security providers that help us operate and protect our systems.

  • Analytics, email and marketing providers, where these services are enabled and legally permitted.

  • Professional advisers, including accountants, insurers and legal advisers.

  • Public authorities, regulators or law enforcement, when disclosure is legally required.

  • Potential business purchasers or successors, if our business or assets are reorganised, sold or transferred.

Service providers may only use your information to provide their contracted services or as otherwise permitted by law.

We do not sell your personal information for money.

6. Shopify

Our online store is hosted by Shopify. Shopify processes personal information to provide the ecommerce platform, operate store functions, secure transactions and support related services.

Depending on the service involved, Shopify may process information on our behalf or for its own specified purposes under its privacy terms.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies. These may include:

  • Strictly necessary cookies: Required for functions such as the shopping basket, checkout, security and account access.

  • Preference cookies: Remember choices such as language or display settings.

  • Analytics cookies: Help us understand how visitors use our website.

  • Advertising cookies: May be used to measure campaigns or show relevant advertising where these services are enabled.

Where required by law, non-essential cookies will only be used after you provide consent through our cookie banner.

You can accept, reject or manage available cookie categories through the cookie settings displayed on our website. You can also block or delete cookies through your browser settings, although some website features may not function correctly.

8. Marketing Communications

We may send marketing communications where you have consented or where otherwise permitted by law.

You can unsubscribe at any time by:

Service messages concerning an existing order, delivery, return, warranty request or account are not marketing communications and may still be sent when necessary.

9. International Transfers

Some service providers may process personal information outside the United Kingdom.

When personal information is transferred internationally, we take reasonable steps to ensure an appropriate safeguard recognised under UK data protection law is used. This may include an adequacy regulation, approved contractual protections or another lawful transfer mechanism.

10. Data Retention

We keep personal information only for as long as reasonably necessary to:

  • Complete orders and provide customer service.

  • Handle returns, refunds, disputes and warranty claims.

  • Maintain required accounting and transaction records.

  • Comply with legal and regulatory obligations.

  • Prevent fraud and protect our legal rights.

Retention periods vary according to the type of information and the reason it is held. When information is no longer required, it will be securely deleted or anonymised where reasonably possible.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Customers are responsible for keeping their account credentials confidential.

12. Automated Fraud and Payment Checks

Our ecommerce and payment providers may use automated tools to identify potentially fraudulent or unauthorised transactions.

These tools may produce risk indicators or recommendations. We do not intend to make decisions based solely on automated processing that have a legal or similarly significant effect on you unless this is permitted by law and appropriate safeguards are in place.

13. Your Data Protection Rights

Subject to applicable conditions and exemptions, you may have the right to:

  • Request access to your personal information.

  • Ask us to correct inaccurate or incomplete information.

  • Request deletion of your information.

  • Request restriction of processing.

  • Receive certain information in a portable format.

  • Object to processing based on legitimate interests.

  • Object at any time to direct marketing.

  • Withdraw consent where processing relies on consent.

  • Ask for human intervention in certain automated decisions.

  • Make a complaint to the Information Commissioner’s Office.

To exercise your rights, contact support@grillpova.co.uk. We may need to request information to confirm your identity before completing a request.

If you are dissatisfied with our response, you may complain to the UK Information Commissioner’s Office at:

Website: https://ico.org.uk/make-a-complaint/

14. Children’s Privacy

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under the age of 18.

If you believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete it.

15. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

We recommend reviewing the privacy policy of any external website before providing personal information.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, legal requirements or business practices.

The latest version will be published on this page with an updated revision date. Material changes may also be communicated through our website or by another appropriate method.

17. Contact Us

For questions about this Privacy Policy or how we process personal information, contact:

OASIS PROJECT LTD trading as Grillpova
Company Number: 03447762
Registered Address: 113 Queens Road, Brighton, East Sussex, England, BN1 3XG, United Kingdom
Email: support@grillpova.co.uk
Phone: +44 7446 371844
Customer Support Hours: Monday–Friday, 9:00–18:00