Privacy Policy

Last Updated: August 2026

This Privacy Policy describes how Olson Gray (operated commercially under Feedflow, "the Site", "we", "us", or "our") collects, uses, and discloses your Personal Information when you visit, make a purchase, or interact with us.

We are committed to protecting your privacy in full compliance with applicable international data protection standards, including the General Data Protection Regulation (GDPR / UK GDPR), the California Consumer Privacy Act (CCPA/CPRA), various US state privacy laws, and the Personal Information Protection and Electronic Documents Act (PIPEDA - Canada).

1. Information We Collect, Purposes & Legal Basis

When you interact with our Site, we collect certain information necessary to process your orders, optimize your experience, and comply with legal obligations. Under the GDPR and UK GDPR, we rely on the following lawful bases to process your personal data:

2. Sharing Personal Information

We share your Personal Information with trusted third-party service providers to help us operate our business and fulfill our services to you:

• E-Commerce Platform: We use Shopify to power our online store.
• Logistics & Courier Partners: We share necessary shipping details with regional postal services and fulfillment centers across Europe, the UK, the US, Canada, and Asia to deliver your packages safely.
• Payment Processors & Fraud Detection: To securely process transactions and prevent fraudulent orders.
• Marketing & Analytics: Partners such as Google and Meta, to help us understand site interaction and deliver relevant advertisements.
• Legal Compliance: We may share information to comply with applicable laws, subpoenas, search warrants, or lawful regulatory requests.

3. Cookies & Behavioral Advertising

We use your Personal Information to provide targeted advertisements or marketing communications we believe may interest you. This includes cross-context behavioral advertising and retargeting using tools like Google Analytics and Meta Pixels.

Cookie Consent: For users in regions requiring prior consent (e.g., EU/UK), non-essential analytics and advertising cookies are only loaded if you explicitly accept them via our Cookie Consent Management Platform (CMP) banner. You can manage or revoke these preferences at any time via the banner, or block cookies directly in your browser settings.

4. International Data Transfers

We may transfer and process personal information in countries outside the European Economic Area (EEA), the United Kingdom, Canada, or your country of residence, including countries where our service providers (e.g., Shopify, fulfillment hubs in Asia) operate. Where required by applicable law, we implement appropriate safeguards for international data transfers, such as adequacy decisions, Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement/Addendum, or other legally recognized transfer mechanisms.

5. Your Privacy Rights

General Rights (EU, UK, Canada, & Global)

Depending on your place of residence, you hold specific rights regarding your personal data, including the right to Access, Correct, Delete/Erase, Restrict Processing, and Data Portability. You may also withdraw marketing consent at any time using the "Unsubscribe" link in our emails.

California (CCPA/CPRA) & US State Privacy Rights

If you are a resident of California or another applicable US state, you have the following specific rights under state law:

• Right to Know & Access: To know what personal information is collected, used, shared, or sold.
• Right to Delete & Correct: To request deletion or correction of inaccurate personal data.
• Right to Opt-Out of Sale/Sharing: We may "share" data (as defined by CCPA) for cross-context behavioral advertising via cookies/pixels. You have the right to opt-out of this sharing.
• Right to Limit Use of Sensitive Information: We do not collect sensitive personal information beyond what is necessary to fulfill your order.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising these rights.

*Residents of other U.S. states (e.g., Virginia, Colorado, Connecticut, Utah) may have additional privacy rights under applicable state privacy laws. Where applicable, we provide those rights and required disclosures in accordance with the law of the relevant state.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfill contractual obligations, comply with strict legal, tax, and accounting requirements, resolve disputes, enforce agreements, and protect our legitimate business interests. Retention periods vary depending on the type and purpose of the information. Once the retention period expires, data is securely deleted or anonymized.

7. Privacy Officer & Contact Information

To exercise any of your privacy rights, manage your consent, or submit inquiries/complaints (including Canadian residents exercising rights under PIPEDA), please contact our designated Privacy Officer using the details below: