Your Privacy Rights – Grumbleberry

U.S. State Privacy Rights and Other Applicable Privacy Rights

 

GDPR & CCPA Rights

Effective Date: August 1, 2026

Grumbleberry respects your privacy and is committed to handling personal information responsibly.

This page explains privacy rights that may be available to you under applicable privacy and data-protection laws. The specific rights available to you depend on factors including where you live, which laws apply to Grumbleberry, the type of personal information involved, and the circumstances in which that information was collected or used.

Grumbleberry is a Becca Bleu site and currently sells products only within the United States. However, Grumbleberry.com may be accessible from other locations.

Nothing on this page is intended to limit privacy rights that cannot legally be waived.

Your Privacy Rights

Depending on applicable law, you may have the right to request certain actions regarding personal information Grumbleberry maintains about you.

These rights may include:

  • Accessing personal information
  • Learning what categories of personal information have been collected
  • Requesting correction of inaccurate personal information
  • Requesting deletion of certain personal information
  • Receiving information about how personal information is used or disclosed
  • Receiving a portable copy of certain personal information
  • Opting out of certain uses or disclosures where required by law
  • Withdrawing consent where processing is based on consent and applicable law provides that right
  • Appealing certain decisions concerning a privacy request where applicable
  • Exercising applicable privacy rights without unlawful discrimination or retaliation

Not every right applies to every person, business, or type of information.

Right to Know and Access

Where applicable, you may request information about personal information Grumbleberry has collected or maintains about you.

Depending on applicable law, this may include information concerning:

  • Categories of personal information collected
  • Specific pieces of personal information maintained about you
  • Categories of sources from which information was collected
  • Purposes for collecting or using personal information
  • Categories of third parties or service providers with whom information is disclosed
  • Other information required by applicable privacy law

Some information may be withheld or limited where permitted or required by law, including when disclosure could compromise security, expose another person's information, facilitate fraud, or conflict with a legal obligation.

Right to Correct

Where applicable, you may request correction of inaccurate personal information maintained by Grumbleberry.

When submitting a correction request, please clearly identify the information you believe is incorrect and provide the correct information.

We may take reasonable steps to verify the accuracy of the requested correction before making changes.

Right to Delete

Where applicable, you may request deletion of certain personal information associated with you.

The right to deletion is not absolute.

Grumbleberry may retain information when permitted or required by law, including information reasonably necessary to:

  • Complete transactions
  • Maintain order records
  • Process or document returns and replacements
  • Maintain tax, accounting, and financial records
  • Detect or prevent fraud
  • Protect against fraudulent chargebacks or payment disputes
  • Maintain security
  • Establish, exercise, or defend legal claims
  • Enforce agreements, licenses, and policies
  • Protect Grumbleberry's intellectual property
  • Comply with legal or regulatory obligations
  • Maintain other records that applicable law permits us to retain

For example, requesting deletion of your personal information does not necessarily require Grumbleberry to erase legally required transaction or tax records associated with a previous purchase.

Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a portable and reasonably usable format.

The information subject to portability and the format in which it must be provided depend on applicable law and the technical circumstances involved.

Right to Opt Out of Certain Data Practices

Some U.S. state privacy laws provide qualifying consumers with rights to opt out of certain activities involving personal information, such as:

  • Sale of personal information
  • Sharing of personal information for certain advertising purposes
  • Processing for targeted advertising
  • Certain forms of profiling producing significant effects

Whether these rights apply depends on the applicable law and Grumbleberry's actual data practices.

Grumbleberry does not sell personal information to third parties in exchange for money.

However, privacy laws may define terms such as “sale,” “sharing,” and “targeted advertising” more broadly than an ordinary monetary sale. Certain website technologies, analytics services, advertising technologies, or third-party integrations may therefore be subject to additional requirements depending on how they are configured and which laws apply.

Where Grumbleberry engages in an activity subject to a legally required opt-out right, we will endeavor to provide the required method of exercising that right.

California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), when those laws apply.

Depending on the circumstances, qualifying California residents may have rights including:

Right to Know

You may have the right to request information concerning personal information collected about you and how it has been used or disclosed.

Right to Access

You may have the right to request access to certain personal information maintained about you.

Right to Delete

You may have the right to request deletion of certain personal information, subject to exceptions permitted by law.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

Where applicable, California residents may have the right to opt out of the sale or sharing of personal information.

Grumbleberry does not sell personal information to third parties in exchange for money.

If Grumbleberry uses technologies that constitute “sharing” or another regulated activity under applicable California law, legally required opt-out rights will be provided where applicable.

Right to Limit Certain Uses of Sensitive Personal Information

California law may provide qualifying consumers with rights relating to certain uses or disclosures of sensitive personal information.

Grumbleberry does not intentionally collect sensitive personal information for the purpose of inferring characteristics about customers.

Certain information used for transactions, fraud prevention, account security, or payment processing may nevertheless fall within legally defined categories of sensitive information.

Where applicable law provides a right to limit a particular use of such information and that right applies to Grumbleberry's practices, we will honor qualifying requests as required.

Right to Non-Discrimination

Grumbleberry will not unlawfully discriminate against you because you exercised a privacy right provided by applicable law.

Exercising an applicable privacy right will not result in unlawful denial of products or services, unlawful differences in pricing, or other treatment prohibited by applicable privacy law.

Privacy Rights in Other U.S. States

A growing number of U.S. states provide residents with privacy rights concerning personal information.

Depending on your state of residence and whether the applicable law applies to Grumbleberry, you may have rights relating to:

  • Access
  • Correction
  • Deletion
  • Data portability
  • Opting out of certain sales of personal information
  • Opting out of targeted advertising
  • Opting out of certain profiling
  • Appealing a denied privacy request
  • Other rights established by applicable state law

Because state privacy laws differ, the exact rights and procedures available to you may vary.

If a state privacy law applies to Grumbleberry and grants you a qualifying right, we will endeavor to honor that right as required by law.

Visitors Outside the United States

Grumbleberry currently sells products only within the United States.

However, Grumbleberry.com may be accessible to visitors located outside the United States.

Depending on where you are located and whether a particular data-protection law applies to Grumbleberry's activities, you may have additional rights concerning personal information.

These could include rights relating to:

  • Access
  • Correction
  • Deletion
  • Restriction of processing
  • Objection to certain processing
  • Data portability
  • Withdrawal of consent
  • Complaints to an applicable data-protection authority

The ability to access Grumbleberry.com from another country does not mean that Grumbleberry offers products, shipping, or services in that jurisdiction.

Where an applicable privacy or data-protection law legally applies to Grumbleberry, we will endeavor to comply with its requirements.

Automated Privacy Preference Signals

Certain browsers or technologies may allow users to communicate privacy preferences automatically, including recognized opt-out preference signals.

Where applicable law requires Grumbleberry to recognize a particular browser-based or device-based privacy signal, we will endeavor to process supported signals as required by law and according to the technologies available on the Site.

How to Submit a Privacy Request

To submit a privacy request, contact:

Email: hello@grumbleberry.com

Please include:

  • Your full name
  • The email address associated with your Grumbleberry account or order, if applicable
  • A clear description of the privacy right you wish to exercise
  • Enough information for us to understand and reasonably locate the information associated with your request

Please do not send passwords, full credit card numbers, Social Security numbers, or other unnecessary sensitive information by email.

Identity Verification

We may need to verify your identity before fulfilling certain privacy requests.

Verification helps prevent someone else from obtaining, changing, or deleting your personal information without authorization.

Depending on the request, we may ask you to confirm information reasonably related to your previous interactions with Grumbleberry.

We will not intentionally request more information than reasonably necessary to verify and process the request.

If we cannot reasonably verify your identity, we may be unable to complete certain requests.

Authorized Agents

Where applicable law allows you to use an authorized agent to submit a privacy request on your behalf, Grumbleberry may require reasonable documentation showing that the agent is authorized to act for you.

We may also require you to verify your identity directly with us or otherwise confirm that you authorized the request, except where applicable law provides a different procedure.

Response Times

Grumbleberry will respond to qualifying privacy requests within the timeframe required by applicable law.

The amount of time available to respond may differ depending on the law governing the request.

Where permitted, additional time may be taken when reasonably necessary, and we will provide notice when applicable law requires us to do so.

Requests We May Deny or Limit

A privacy request may be denied or limited when permitted by applicable law.

Examples may include situations where:

  • We cannot reasonably verify the requester's identity.
  • The request concerns information we are legally required or permitted to retain.
  • Disclosure would adversely affect another person's privacy or rights.
  • The request is fraudulent or abusive.
  • The request is manifestly unfounded or excessive where applicable law permits denial on that basis.
  • The information falls within an applicable legal exception.
  • Compliance would interfere with fraud prevention, security, legal obligations, or another legally protected purpose.

If we deny a qualifying request, we will provide the information or explanation required by applicable law.

Appeals

Certain state privacy laws may give qualifying consumers the right to appeal our decision regarding a privacy request.

If applicable law provides you with an appeal right and you believe your request was improperly denied, you may contact hello@grumbleberry.com and clearly state that you are submitting a privacy-request appeal.

Please include enough information for us to identify the original request and understand why you believe the decision should be reconsidered.

Information We May Need to Keep

Even after a valid deletion request, certain information may need to remain in our records.

For example, Grumbleberry may need to retain information associated with:

  • Completed purchases
  • Tax records
  • Accounting records
  • Payment transactions
  • Returns
  • Replacement claims
  • Shipping disputes
  • Chargebacks
  • Fraud investigations
  • Intellectual property violations
  • Customer communications
  • Legal claims or disputes

Retention of this information does not mean it may be used for unrelated purposes without regard to applicable privacy law.

Payment Information

Grumbleberry uses third-party payment processors to handle transactions.

Grumbleberry does not directly store complete credit or debit card numbers.

Certain privacy requests relating to information maintained independently by a payment provider may need to be directed to that provider because Grumbleberry may not possess or control all information maintained in the provider's systems.

Production, Fulfillment, and Shipping Information

Because Grumbleberry currently uses third-party production and fulfillment partners for physical products, certain customer information must be provided to those partners to manufacture and ship orders.

This may include information such as:

  • Customer name
  • Shipping address
  • Product ordered
  • Order specifications
  • Other information reasonably necessary to fulfill the purchase

Shipping carriers may also receive information necessary to deliver packages.

A deletion request generally cannot undo information that was lawfully used to complete a transaction that has already occurred.

Third-party providers may also have independent legal obligations requiring them to maintain certain records.

Digital Product Information

For digital purchases, Grumbleberry or its service providers may maintain information concerning:

  • The purchase
  • File delivery
  • Download access
  • Account information
  • Access history
  • Technical information reasonably necessary to deliver or protect the product

Some of this information may be retained when reasonably necessary to maintain transaction records, provide customer support, investigate unauthorized distribution, prevent fraud, or protect Grumbleberry's intellectual property.

No Sale of Personal Information for Money

Grumbleberry does not sell customer personal information to third parties in exchange for money.

We may disclose information to service providers and other companies when reasonably necessary to:

  • Process payments
  • Produce orders
  • Fulfill purchases
  • Ship packages
  • Operate Grumbleberry.com
  • Provide digital products
  • Prevent fraud
  • Maintain website security
  • Provide analytics
  • Communicate with customers
  • Comply with legal obligations

These disclosures are described more fully in our Privacy Policy.

Children's Privacy

Grumbleberry is not directed toward children under 13 and does not knowingly collect personal information directly from children under 13 in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to Grumbleberry, please contact hello@grumbleberry.com.

Changes to This Privacy Rights Notice

Privacy laws and Grumbleberry's business practices may change over time.

We may revise this page to reflect changes in:

  • Applicable privacy laws
  • Our Site
  • Our products or services
  • Technologies used by Grumbleberry.com
  • Service providers
  • Data practices
  • Methods available for submitting privacy requests

When this notice is revised, the updated version may be posted on Grumbleberry.com with a revised effective or updated date.

Additional Information

For more information about the personal information Grumbleberry collects, how that information is used, cookies and similar technologies, third-party service providers, security, and data retention, please review our:

  • Privacy Policy
  • Cookie Policy
  • Terms of Service

Contact Information

For questions about your privacy rights or to submit a privacy request, please contact:

Grumbleberry
A Becca Bleu Site
Email: hello@grumbleberry.com
Website: Grumbleberry.com

Business Ownership and Brand Information

Grumbleberry is a Becca Bleu site.

Becca Bleu is the company and creative identity behind Grumbleberry. Grumbleberry primarily offers physical and digital products featuring original artwork and illustrations by Becca Bleu.