Privacy policy

Last updated: October 3, 2026

This Privacy Policy explains what personal data grabNade collects, why, who it is shared with, how long it is kept and what your rights are.

1. Who is responsible for your data

The data controller is Gabriel Weider EI (trade name grabNade), 320 Rue Saint-Honoré, 75001 Paris, France. Contact for any privacy question: support@grabnade.com or +33 7 83 38 77 84.

2. What data we collect

  • Order data: name, email, phone, billing and shipping address, items ordered, order history.
  • Payment data: handled by the payment provider. We never see or store your full card number.
  • Account data (if you create an account): email, name, saved addresses.
  • Messages you send us (email, contact form, chat).
  • Reviews you choose to leave, with the name you choose to display.
  • Technical and usage data: IP address, device and browser type, pages visited, cookies (see section 6).

3. Why we use it, and on what legal basis

  • To process and deliver your order, handle returns and answer you: performance of the contract.
  • To keep invoices and accounting records: legal obligation.
  • To prevent fraud and secure the store: legitimate interest.
  • To ask for a review after delivery: legitimate interest. You can opt out from any review email.
  • To send newsletters and offers by email or SMS: your consent. You can unsubscribe at any time from any message.
  • Non-essential cookies (analytics, advertising, affiliate tracking): your consent, given through the cookie banner.

We do not sell your personal data.

4. Who we share it with

We only share what each service needs to do its job:

  • Shopify (Shopify International Limited, Ireland, and its group): hosting of the store, checkout, payments (Shopify Payments), customer chat, order emails.
  • Printful (in the EU: Sinden Ventures Limited, Cyprus): production and shipping of your order. Receives your name, shipping address, phone, email and the items ordered.
  • Carriers (for example USPS, DHL, FedEx, national postal services): delivery.
  • Google: product listings and ads on Google, and measurement of visits and purchases, only with your consent to analytics/advertising cookies.
  • Pinterest: product pins and measurement of visits from Pinterest, only with your consent to advertising cookies.
  • Klaviyo: newsletter and marketing emails/SMS, only if you subscribed.
  • Judge.me: review requests and display of reviews.
  • Klarna: payment information messages on product pages and, if you choose to pay with Klarna, the payment itself (Klarna then acts under its own privacy policy).
  • GoAffPro: affiliate program (tracking of purchases made through a partner's link).
  • Blockify: fraud filtering based on IP address and location.
  • Oxilayer: creation of invoices.
  • Authorities, when the law requires it.

5. Transfers outside Europe

Some of these providers process data outside the European Economic Area, for example in the United States or Canada. These transfers rely on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses.

6. Cookies

Essential cookies (cart, checkout, security, language and currency) are always on. Analytics, advertising and affiliate cookies are only placed if you accept them in the cookie banner. You can change your choice at any time through the "Cookie preferences" link in the footer or by deleting cookies in your browser.

7. How long we keep it

  • Orders and invoices: 10 years (French accounting obligations).
  • Customer account: until you delete it, or 3 years after your last activity.
  • Newsletter: until you unsubscribe, or 3 years after your last interaction with our emails.
  • Support messages: 3 years after the last exchange.
  • Cookies: 13 months maximum.

8. Your rights

You can ask to access, correct or delete your data, to receive a copy (portability), to restrict or object to its use, and to withdraw your consent at any time. Email support@grabnade.com. We reply within one month.

California and other US states: you can opt out of the use of your data for targeted advertising here. We honor the Global Privacy Control signal.

If you think your rights are not respected, you can file a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.

9. Children

The store is not intended for children under 15. We do not knowingly collect their data.

10. Changes

We update this policy when our services change. The date at the top shows the latest version.