Privacy policy

Last updated: October 26, 2026

This Privacy Policy explains how EY Digital Brands LLC, doing business as TGP (The Great Project) ("we", "us"), collects, uses and shares personal information when you visit thegreatproject.com or our order pages, buy from us, or contact us.

Information we collect

  • Contact and order details: name, email, phone number, shipping and billing address, products bought, order and refund history.
  • Payment details: payments are handled by our payment processors. We do not store full card numbers.
  • Device and usage data: IP address, browser and device type, pages viewed, links clicked, referring site, and cookie or advertising identifiers.
  • Messages: emails, texts, chats, reviews and survey answers you send us.

We do not ask for health records. If you choose to tell us about a health condition in a message, we use it only to answer you.

How we use it

  • To process, ship and track orders, and to manage subscriptions, returns and refunds.
  • To answer questions and provide support.
  • To send marketing emails and texts when you have agreed to receive them.
  • To measure and improve our website, products and advertising.
  • To prevent fraud and keep our systems secure.
  • To meet legal, tax and accounting duties.

Cookies, pixels and advertising

We use cookies, pixels and similar tools to keep your cart working, understand how our pages are used, and show and measure ads. These include tools from advertising and analytics partners such as Meta (Facebook and Instagram, including the Meta Pixel and Conversions API), Google (Google Analytics and Google Ads) and TikTok. These partners may receive device and browsing data and information about purchases, and may use it under their own privacy policies.

You can block or delete cookies in your browser settings, and adjust ad preferences in your Meta, Google and TikTok accounts. Blocking essential cookies may stop the cart or checkout from working.

Email and SMS marketing

We send marketing emails and texts through Klaviyo and similar service providers, only when you have opted in. You can opt out at any time:

  • Email: click "unsubscribe" in any marketing email.
  • SMS: reply STOP to any text. Message and data rates may apply. Message frequency varies.

We honor unsubscribe requests within 10 business days. We may still send messages about your orders, shipping and subscriptions. We do not share your phone number with third parties for their own marketing.

Who we share information with

We do not sell your personal information for money. We share it only as needed with:

  • Payment processors, to take payments and prevent fraud.
  • Our ecommerce platform and hosting providers.
  • Shipping carriers and fulfillment partners, to deliver your order.
  • Email, SMS and customer support providers.
  • Advertising and analytics partners, as described above.
  • Authorities or advisers, when the law requires it or to protect our rights, and a buyer if our business is sold or merged.

Our service providers must protect your information and may use it only to provide their services to us.

How long we keep it

  • Order and payment records: 7 years, for tax and accounting.
  • Marketing data: until you unsubscribe, or 3 years after your last interaction.
  • Support messages: 3 years after the issue is closed.

Security

We use encrypted connections (SSL/TLS), PCI-compliant payment processing and restricted access. No system is completely secure, so we cannot guarantee absolute security.

Children

Our products are for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, contact us and we will delete it.

Your rights

Depending on where you live, you can ask to see, correct, delete or receive a copy of your personal information, to opt out of targeted advertising, and to withdraw consent. To make a request, email support@thegreatproject.com with the subject "Privacy request". We will verify your identity and reply within the time the law requires.

  • California residents: you may opt out of the "sale" or "sharing" of personal information for targeted advertising on our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals. We will not treat you differently for using your rights.
  • EU, EEA and UK residents: we process data to perform our contract with you, for our legitimate interests (such as fraud prevention and analytics), with your consent (such as marketing and non-essential cookies), and to meet legal duties. You may complain to your local data protection authority.
  • Canadian residents: you have rights under PIPEDA and may contact the Office of the Privacy Commissioner of Canada.

We are based in the United States, and your information is processed and stored there.

Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, tell you by email or on our website.

Contact us