Privacy policy

This policy explains what personal information Granite Peak Research Group LLC, trading as Granite Peak Group, collects when you use granitepeakgroup.store, why we collect it, who it is shared with, how long it is kept and what rights you have over it. We are the controller of that information. You can reach us at support@granitepeakgroup.store, on (508) 304-3311, or by post at 68 Harrison Ave, Suite 605 #591444, Boston, MA 02111.

1. What we collect

Information you give us. When you place an order we collect your name, billing address, shipping address, email address and telephone number. If you contact us, we keep the correspondence and whatever you choose to tell us in it. If you create an account we keep your login email and a hashed password. If you subscribe to stock notifications we keep your email address for that purpose.

Payment information. Card details are entered directly into a hosted, encrypted field supplied by our payment provider. They are transmitted to that provider and are not received by, processed on or stored on our servers. We receive only a confirmation of the outcome, the card brand, the last four digits and an authorization reference. We never see your full card number, expiry date or security code.

Information collected automatically. Our servers log your IP address, browser type and version, operating system, the pages you request, the time of each request and the referring page. We use strictly necessary cookies to keep your cart and your session working, and a cookie to remember that you have dismissed the cookie notice.

2. Why we use it, and our lawful basis

We use your information to take, process, pack, ship and invoice your order; to answer your questions; to handle returns, refunds and warranty claims; to detect and prevent fraudulent transactions; to keep the accounting and tax records the law requires us to keep; and to operate and secure the website. Our lawful bases are performance of the contract you entered into with us, compliance with our legal obligations, and our legitimate interests in preventing fraud and running the business, balanced against your rights.

3. Marketing

We do not send marketing email unless you have asked us to. If you subscribe, every message carries a one-click unsubscribe and we act on it immediately. We do not sell, rent, or trade personal information to anyone, for any purpose, ever.

4. Who we share it with

We share the minimum necessary with: our payment provider, to take payment and to defend a chargeback if one is raised; our shipping carriers, to deliver your parcel; our web host and email provider, who process data on our instructions under contract; and our accountants and, if required, our legal advisers. We disclose information to law enforcement or a regulator only where we are legally required to do so or where it is necessary to investigate fraud against us.

5. International transfers

We operate in the United States and our service providers principally do too. Where a provider processes data outside the United States, we rely on their contractual data protection commitments.

6. How long we keep it

Order records, including name, addresses and order contents, are kept for seven years to satisfy tax and accounting requirements. Correspondence is kept for two years. Server logs are kept for ninety days. Account records are kept until you ask us to close the account, after which we retain only what the order history requires. Marketing subscriptions are kept until you unsubscribe.

7. Security

The site is served over TLS. Administrative access requires individual credentials and is limited to staff who need it. Payment data never touches our systems. We keep our platform and its components patched. No system is perfectly secure, and we will tell you promptly if a breach affects your information.

8. Your rights

You may ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it where we are not required to keep it, object to processing based on legitimate interests, and ask for your data in a portable format. Email support@granitepeakgroup.store and we will respond within thirty days. We will not charge you for a reasonable request and we will not treat you differently for making one.

If you are a California resident, you have the rights described above under the CCPA as amended, including the right to know what we collect and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, but you may still contact us to confirm that.

9. Children

The site is not directed at children under 16 and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

10. Cookies

We use only cookies that are strictly necessary to operate the store — your session, your cart contents, and a record that you dismissed the cookie notice. We do not run advertising trackers or cross-site profiling on this site. You can block cookies in your browser, but the cart will not function without them.

11. Changes

If we change this policy we will update the date below and, where the change is material, tell you by email if we hold your address for that purpose.

Last updated 2 September 2026. Granite Peak Research Group LLC, 68 Harrison Ave, Suite 605 #591444, Boston, MA 02111. Questions: support@granitepeakgroup.store.