Privacy policy

Last updated: 10 October 2026

Who is responsible for your data?

The controller of personal data processed for e-grin is M. Triggiani, based in Italy. For privacy questions or requests, contact info@egrinworld.com.

Scope of this policy

This policy covers egrinworld.com, our correspondence and records retained from the site's former online store and affiliate programme. e-grin is transitioning to an editorial website about outdoor gear. Purchases made on external retailers' websites are handled by those retailers under their own privacy policies.

Data we process and why

• Website operation and security: technical information, such as IP addresses, browser details, request logs and essential cookie identifiers, is processed to deliver and protect the website. Where applicable, the legal basis is our legitimate interest in providing a reliable and secure website.
• Enquiries: we process your email address, message and information you choose to send so that we can respond and handle corrections or business enquiries. The legal basis is our legitimate interest in handling correspondence, or steps taken at your request before entering a contract where relevant.
• Analytics: we use Google Analytics through Shopify's Google & YouTube integration to understand website usage. Depending on your privacy choices and the integration's configuration, this may involve page views, interaction events, device and browser information, approximate location and identifiers. Consent is the legal basis for non-essential analytics cookies and related personal-data processing where required.
• Historical customer records: Shopify retains records from the former store, which may include contact details, marketing preferences, addresses and order information. Necessary records are processed to manage past transactions and enquiries, meet applicable legal obligations and establish or defend legal claims. The relevant bases are contractual obligations, legal obligations and legitimate interests, as applicable.
• Former affiliate programme: GOAFFPRO holds registration and account information for participants in the former programme. The programme has been disabled. Necessary records are retained to administer its closure, handle participant enquiries and resolve contractual matters or claims. The relevant bases are contractual obligations and legitimate interests, and legal obligations where applicable.

Email subscriptions

Our historical contact database includes both subscribers and people who have not subscribed to marketing. Being listed as a customer does not, by itself, authorise newsletter emails. We are not currently sending newsletters or accepting subscriptions through the new editorial website. Before introducing a newsletter, we will update this policy and provide information about the service and subscription choices. Historical subscription records are reviewed before any marketing use.

Cookies and privacy choices

Shopify provides the website's cookie preference tools. Necessary cookies support core functions. You can accept or decline optional categories through the cookie banner, where displayed, and use the cookie preference control where available. You can also manage cookies through your browser; blocking necessary cookies may affect website functions. Shopify Network Intelligence is disabled.

Service providers and other recipients

Shopify provides hosting and website infrastructure. Read the Shopify Consumer Privacy Policy. Google provides analytics; see Google's Privacy Policy. GOAFFPRO retains former affiliate programme records; see GOAFFPRO's privacy information. Our email service provider processes correspondence sent to our contact address.

Providers may process data on our behalf and, for some activities, for their own purposes as described in their notices. Relevant records may also be disclosed to professional advisers or competent authorities where necessary to comply with law or protect legal rights.

International processing

Data may be processed outside the European Economic Area, including in the United States. Shopify uses the transfer mechanisms described in its Data Processing Addendum, including applicable adequacy decisions, binding corporate rules and standard contractual clauses. Google describes its applicable safeguards in its data transfer information. GOAFFPRO states that it operates from India and uses data centres in the United States, Germany and Singapore, with safeguards such as standard contractual clauses. Contact us for further information about relevant safeguards.

How long we retain information

Retention depends on the purpose and type of record. Correspondence is retained while needed to resolve the enquiry and any reasonably related follow-up or dispute. Historical transaction records are retained for applicable statutory recordkeeping periods and, where necessary, until relevant claims or proceedings are resolved. Former affiliate records are retained while programme closure and any related obligations or disputes require them; records no longer needed for these purposes are deleted or anonymised. Historical marketing records are reviewed for a valid purpose and basis; minimal consent or suppression records may be kept where needed to demonstrate choices and prevent unwanted messages.

Analytics retention depends on the configured Google Analytics retention settings; aggregated reports may be retained separately. Providers' operational logs and backups are subject to their applicable retention arrangements. Contact us if you need information about a particular record.

Your rights

Where applicable, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Send requests to info@egrinworld.com. We may request information necessary to verify your identity.

You may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or the competent authority where you live or work.

Providing information and external websites

You can browse without sending us a message. Providing correspondence details is voluntary, but without sufficient information we may be unable to respond. Technical data needed to deliver the website is processed when you visit. External retailers and social platforms apply their own privacy policies when you follow their links.

Updates

We may update this policy when the website or processing activities change. The update date appears above. Privacy enquiries can be sent to info@egrinworld.com.