PREMIUM MATERIALS
Privacy policy
Last updated: 27 September 2026
1. WHO WE ARE
PM Company Digital LLC, a limited liability company organized under the laws of the State of Florida, United States, State ID L26000355164, with its principal place of business at 15442 Ventura Blvd, Ste 201-2746, Sherman Oaks, CA 91403, United States, trading as Alassio Grey, is responsible for the personal information collected through alassiogrey.com.
For customers in the United Kingdom, we act as the data controller under the UK GDPR and the Data Protection Act 2018. For customers in California, we are a business under the California Consumer Privacy Act as amended by the CPRA.
For any privacy matter, contact us at contact@alassiogrey.com.
2. WHAT WE COLLECT
| Category | Information |
|---|---|
| Identifiers | Name, email address, telephone number, billing address, shipping address |
| Payment | Payment method, transaction status, amount and confirmation. We never receive, see or store your full card number or security code. These are entered directly into Shopify's encrypted checkout and processed by Shopify Payments |
| Commercial | Items viewed, added to cart, purchased, returned or cancelled, and your order history |
| Communications | The content of messages you send us by email, phone or contact form |
| Internet activity | IP address, device type, browser, operating system, pages visited, time on site, referral source |
| Account | Username, encrypted password, preferences and settings |
We do not knowingly collect sensitive personal information such as health data, racial or ethnic origin, religious beliefs, political opinions, union membership, genetic or biometric data. Please do not send us such information.
3. HOW WE COLLECT IT
- Directly from you, when you create an account, place an order, subscribe to our newsletter or contact us
- Automatically, through cookies and similar technologies as you browse
- From our service providers, such as Shopify, payment processors, carriers and analytics tools acting on our behalf
4. WHY WE USE IT
For customers in the United Kingdom, the table below also shows our lawful basis under Article 6 of the UK GDPR.
| Purpose | Lawful basis (UK) |
|---|---|
| Processing your order, taking payment and arranging delivery | Performance of a contract |
| Handling returns, exchanges and refunds | Performance of a contract |
| Providing customer support | Performance of a contract |
| Covering duties and clearing parcels through customs | Performance of a contract |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and securing our services | Legitimate interests |
| Sending marketing emails | Consent |
| Showing personalised advertising and measuring campaigns | Consent |
| Understanding how our website is used and improving it | Legitimate interests |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.
5. WHO WE SHARE IT WITH
- Shopify, which hosts our store and processes payments through Shopify Payments
- Carriers and fulfilment partners, to deliver your order and clear it through customs
- Accountants and tax advisers, to meet our statutory obligations
- Analytics and advertising providers, where you have consented to marketing cookies
- Public authorities, where required by law, court order or lawful request
We do not sell your personal information for money. We do not rent it out or trade it with third parties for their own commercial purposes.
Our service providers act on our documented instructions and under contractual obligations of confidentiality and security.
6. COOKIES
| Type | Purpose |
|---|---|
| Strictly necessary | Keep your cart, session and checkout working securely. These cannot be switched off |
| Analytics | Show us how visitors use the site so we can improve it |
| Marketing | Allow us and our partners to show relevant advertising and measure performance |
Where required by law, including under the UK Privacy and Electronic Communications Regulations, we ask for your consent before placing non-essential cookies. You can change your preferences at any time through the cookie settings on our website, or block and delete cookies through your browser, though this may affect how parts of the site work.
If you visit our website with the Global Privacy Control signal enabled, we treat it as a request to opt out of the sale or sharing of personal information for the device and browser you are using.
7. HOW LONG WE KEEP IT
| Data | Retention period |
|---|---|
| Order and transaction records | 7 years, to meet tax and accounting requirements |
| Account information | While your account remains open. On deletion request we remove it, except where the law requires us to keep records |
| Customer service correspondence | Up to 3 years after the query is resolved |
| Marketing contact details | Until you unsubscribe or withdraw consent |
| Analytics and advertising data | Up to 26 months |
When we no longer need personal information, we delete it or irreversibly anonymise it.
8. YOUR RIGHTS
If you are in the United Kingdom, under the UK GDPR you have the right to be informed, to access your data, to rectification, to erasure, to restrict processing, to data portability, to object to processing based on legitimate interests and to direct marketing at any time, to withdraw consent, and not to be subject to solely automated decision-making with legal or similarly significant effects.
If you are in California, under the CCPA as amended you have the right to know what personal information we collect, use and disclose, the right to delete it, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information for cross-context behavioural advertising, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of these rights.
If you are elsewhere in the United States, your state may grant similar rights. We extend the rights above to all our customers regardless of location.
To exercise any right, email contact@alassiogrey.com with "Privacy request" in the subject line.
- United Kingdom: we respond within one month, extendable by up to two further months for complex requests, in which case we will tell you
- United States: we acknowledge within 10 business days and respond within 45 days, extendable by a further 45 days where necessary
We may ask for information to verify your identity before acting on a request. There is no charge, and we do not treat you differently for exercising your rights. You may use an authorised agent, with proof of authorisation.
9. MARKETING
If you have agreed to receive marketing from us, you can unsubscribe at any time using the link in any email, or by writing to contact@alassiogrey.com.
Even after unsubscribing, we will still send transactional messages about your orders, such as confirmations, tracking updates and delivery notices, because these are necessary to perform our contract with you.
10. SECURITY
- SSL encryption across the whole site
- A PCI DSS compliant payment environment operated by Shopify
- Access controls limiting who can see personal information
- Passwords stored in encrypted form
No system is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the UK Information Commissioner's Office within 72 hours where the UK GDPR applies, and notify affected individuals as required by applicable state law in the United States.
We never ask for your password, card security code or full banking details by email, telephone or text message. Please be suspicious of any message that does, and tell us about it.
11. INTERNATIONAL TRANSFERS
We are based in the United States, and your personal information will be transferred to, stored in and processed in the United States and in other countries where our service providers operate.
Where we transfer personal information out of the United Kingdom, we rely on recognised safeguards, including the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or adequacy regulations made by the UK government. You may request further information about these safeguards by contacting us.
12. CHILDREN
This website is not intended for children and we do not knowingly collect information from anyone under 18. If you are a parent or guardian and believe a child has provided us with personal information, contact us and we will delete it.
13. THIRD-PARTY SITES
Our website may link to third-party sites, including social media platforms, payment providers and carriers. We do not control them and are not responsible for their privacy practices. Please read their own policies.
14. CHANGES TO THIS POLICY
We may update this policy to reflect changes in our practices or the law. The current version is always on this page with the date of the last update. Where changes are significant, we will tell you through our usual channels.
15. COMPLAINTS
If you are unhappy with how we have handled your personal information, please contact us first at contact@alassiogrey.com so that we can put it right.
United Kingdom: you have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. Website ico.org.uk
California: you may contact the California Privacy Protection Agency or the Office of the Attorney General.
16. CONTACT
PM Company Digital LLC
Trading as Alassio Grey
Florida State ID L26000355164
15442 Ventura Blvd, Ste 201-2746
Sherman Oaks, CA 91403, United States
Email: contact@alassiogrey.com
Phone: +1 (209) 269-5471
Support hours: Monday to Saturday, 7:00 AM to 6:00 PM Pacific Time
