Privacy Policy

JOHN GRAHAM (METALS) LIMITED is the data controller responsible for your personal data.

Registered address: 8 Munro Road Springhouse Industrial Estate, FK7 7UU.

Contact for privacy matters: support@johgramet.shop, phone +44 7598982256.

• Order and delivery data: name, email, phone, billing and shipping address, items ordered and order value.
• Account and membership data: email, membership tier, subscription status and renewal dates.
• Payment data: processed by Stripe. We receive confirmation of payment, the last four digits and card brand, and billing country. We never receive or store your full card number, CVC or PIN.
• Support and enquiry data: the content of messages you send through our contact and wholesale forms.
• Finder inputs: the answers you give the Sorting System Finder to generate a recommendation.
• Technical and usage data: device, browser type, IP address and essential cookies needed to run the cart and checkout.

We collect your personal data from the following collection sources:

• Directly from you — when you place an order, subscribe to a membership, create an account, use the Sorting System Finder, or contact us through our forms.
• Automatically from your device — essential cookies and local storage needed to run the cart, checkout and security features (see our Cookie Policy).
• From our payment processor (Stripe) — payment confirmation, the card brand and last four digits, billing country and fraud signals.
• From delivery carriers — delivery status and tracking updates relating to your order.

Because we ship physical products, we process specific data to handle order fulfilment:

• Delivery address and recipient details — the shipping address, name and phone you provide, used solely to fulfil and deliver your order.
• Order fulfilment records — the items ordered, order value, dispatch status and order reference, kept to fulfil the contract and meet tax and accounting duties.
• Returns and customer-service data — the information you give us when you request a return, refund, replacement or support, used to resolve your request.
• Logistics carrier sharing — we share the minimum delivery details with the parcel or freight carrier assigned to your order so it can be delivered and tracked.
• Payment and billing data — billing name, address and country are processed by Stripe for payment and invoicing; we never receive your full card number.

See our Shipping & Delivery Policy and Refund & Returns Policy for how fulfilment and returns work.

• To fulfil your order and deliver products — performance of a contract.
• To manage memberships and subscriptions — performance of a contract.
• To provide customer support — performance of a contract and our legitimate interest in helping you.
• To prevent fraud and secure our store — legitimate interests and legal obligation.
• To send service messages (order and shipping updates) — performance of a contract.
• To send marketing (only where you opt in) — consent, which you can withdraw at any time.
• To meet tax and accounting obligations — legal obligation.

Card payments are handled by Stripe, our PCI-DSS compliant payment processor. When you pay, you are taken to Stripe’s secure checkout. Full card details are entered on Stripe’s systems, not ours. Stripe (and PayPal, where offered) never share your complete card number with us. See Stripe’s own privacy notice for how they process payment data.

We share the minimum data necessary with:

• Payment processing: Stripe (and PayPal where offered).
• Hosting and infrastructure: our website host and cloud database/storage provider.
• Email and support tooling: the providers we use to receive and answer your messages.
• Delivery and logistics carriers: to ship your order to the address you provide.
• Professional advisers and authorities: where required by law.

We do not sell your personal data.

Some of our providers process data outside your country, including outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

Order and tax records are kept for the period required by law (generally up to 6–7 years). Account, membership and marketing data are kept for up to 24 months after your last interaction, unless you ask us to delete them sooner or a longer legal retention applies. Finder inputs and unfinished-checkout leads are kept for up to 24 months for support and re-contact, then deleted.

You have the right to access, correct, delete or restrict processing of your data; to object to processing based on legitimate interests or direct marketing; to data portability; and to withdraw consent at any time. To exercise any right, email support@johgramet.shop. You can also complain to the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

California residents may request the categories and specific pieces of personal information we hold, request deletion, and are protected from discrimination for exercising these rights. We do not sell or share personal information as defined by the CCPA.

We do not sell or share your personal information for cross-context behavioural advertising. No action is needed to opt out because we do not engage in these activities.

We use essential cookies to run the cart, checkout and security features. Any non-essential analytics cookies are only set with your consent. See our Cookie Policy for details and controls.

We do not make solely automated decisions with legal or similarly significant effects. The Sorting System Finder gives non-binding suggestions only. Our store is not directed at children: accounts require you to be 18 or older, and buyers aged 13–17 must have a parent or guardian’s consent. We do not knowingly collect data from children under 13.

We use encryption in transit, access controls and reputable processors to protect your data. No method of transmission is completely secure, but we take reasonable steps to protect the data you share with us.

For any privacy question or to make a complaint, email support@johgramet.shop or write to us at 8 Munro Road Springhouse Industrial Estate, FK7 7UU. We aim to respond within 30 days.