Privacy Policy

Plain-language note: this page is a starting template, not a substitute for advice from a Cyprus-qualified lawyer, and it only lists the processors we actually use in this build (Stripe and Resend). Confirm it matches your real data handling before relying on it.

1. Who we are

GridCast Networks ("GridCast", "we", "us"), 18 Digeni Akrita Ave, Strovolos, 2028 Nicosia, Cyprus, is the data controller for personal data collected through this website (the "Site"). Contact us at [email protected] for any privacy question or request.

2. What we collect

• Account data: name and email address, via Google sign-in or email/password.
• Order data: shipping address, items purchased, order history.
• Payment data: handled entirely by Stripe — we receive confirmation that payment succeeded, never your full card number.
• Support data: anything you send us via the contact form or email.
• Technical data: basic device/browser information collected automatically for security and to keep the Site working correctly.

3. Why we process it

• To fulfil and deliver your order, and handle returns or warranty claims — necessary to perform our contract with you.
• To keep financial and tax records — required by law.
• To respond to support requests and prevent fraud — our legitimate interest, balanced against your rights.
• To send you marketing emails, only if you've opted in — your consent, which you can withdraw at any time.

4. Who we share it with

We don't sell your data. Your account, order, and product data is stored on our own servers, not a third-party database provider. We share the minimum necessary with the services that help us run the Site:

• Stripe — payment processing.
• Resend — sending account and order emails (password resets, order confirmations).
• Delivery couriers, solely to fulfil shipments.

These providers may process data outside the EU/EEA; where they do, they rely on mechanisms such as Standard Contractual Clauses to keep it protected.

5. Cookies

We use only the cookies/local storage needed to keep you signed in and remember your cart — no third-party advertising trackers. If that changes, this section will be updated and, where required, we'll ask for your consent first.

6. How long we keep it

Order and invoice records are kept for as long as Cyprus tax law requires (currently up to 6 years). Account data is kept while your account is active and deleted within a reasonable period after you close it, unless we're legally required to keep it longer.

7. Your rights (GDPR)

As an EU resident, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request erasure, where the law allows it;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, for anything based on consent;
• lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection, or your local data protection authority.

To exercise any of these, email [email protected].

8. Security

We use industry-standard measures (encrypted connections, access controls, and a PCI-compliant payment processor) to protect your data. No system is 100% secure, but we take reasonable steps to keep yours safe.

9. Children

The Site is not directed at children, and we don't knowingly collect data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time; material changes will be reflected in the "Last updated" date above.

11. Contact

Privacy questions or requests: [email protected].