GF

Privacy policy

This English version is provided for convenience. The Ukrainian version is legally binding.

This Privacy policy sets out how personal data of users of the Grandfurs online store is collected, used, stored and protected.

1. What data we collect

When you use the website, register and place orders, we may receive:

  • first and last name;
  • phone number;
  • email address;
  • order recipient details;
  • delivery city, branch or parcel locker;
  • information about orders, payments, returns and support requests;
  • technical data: IP address, device and browser type, cookies, information about how you use the website.

We do not store full details of the bank cards the Buyer uses to pay for goods. Payment data is processed by the respective payment service.

2. What the data is used for

Personal data may be used to:

  • place and fulfil orders;
  • process payment and deliver goods;
  • create and operate an account;
  • contact the Buyer about an order;
  • handle exchanges, returns and requests;
  • prevent fraud and keep the website secure;
  • comply with legal requirements;
  • analyse how the website works and improve the service.

3. Sharing data with third parties

We may share the necessary personal data with third parties only to the extent required to run the store and fulfil orders, in particular with:

  • delivery services;
  • payment services and banks;
  • CRM and order processing services;
  • technical infrastructure providers;
  • analytics services;
  • public authorities in cases provided for by the laws of Ukraine.

We do not sell users’ personal data to third parties.

4. Cookies and analytics

The website may use cookies and similar technologies to operate, remember user settings, run analytics and improve the service.

For analytics we use Google Analytics 4 (Google Ireland Limited) and Microsoft Clarity (Microsoft Corporation). They receive technical information about how the website is used: pages and products viewed, cart and checkout actions, device type and approximate location. Microsoft Clarity also records how a visitor moves around a page (scrolling, clicks); data typed into forms (name, phone, address) is hidden and not sent. These services process data in accordance with their own privacy policies.

You can limit or block cookies in your browser settings. Some website features may then not work correctly.

5. Data storage and protection

We apply organisational and technical measures to protect personal data from unlawful access, alteration, loss or disclosure.

Personal data is stored for as long as necessary to fulfil the purposes of processing and to meet legal requirements.

Once processing is no longer necessary, data may be deleted or anonymised unless further storage is required by law.

6. User rights

Users have the right to receive information about the processing of their personal data, to request its correction, and to request that processing stop or that the data be deleted in cases provided for by the laws of Ukraine.

To exercise these rights, contact us using the details on the Contacts page.

7. Consent to data processing

By providing personal data when registering, placing an order or using other website features, the user confirms that they have read this Policy and consents to the processing of personal data within the scope and for the purposes set out in it, where such consent is required by law.

8. Changes to the Policy

We may update this Policy from time to time. The current version is always published on this page.