Privacy Policy

Last updated: 11.12.2025

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our online shop, create an account, or make a purchase.

By using our website, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect personal information that you provide directly, automatically through your device, or from third-party services.

1.1 Information You Provide

Account information (name, email address, password)
Billing and shipping information
Order details and purchase history
Customer support messages
Optional profile information

1.2 Automatically Collected Data

When you browse the shop, we automatically receive:

IP address
Browser type and version
Device identifiers
Pages viewed and usage data
Cookies and tracking technologies

1.3 Payment Information

We do not store full credit card details.
Payments are processed securely through trusted third-party payment processors (e.g., Stripe, PayPal, etc.).

2. How We Use Your Information

We use your data to:

Create and maintain your user account
Process orders and provide delivery
Communicate about orders, updates, and support
Improve website performance and user experience
Prevent fraud and enhance security
Comply with legal obligations

We do not sell your personal data.

3. Cookies & Tracking

We use cookies for:

Website functionality
User session management
Shopping cart and checkout
Analytics and performance

You may choose to disable cookies in your browser, but some features may not work properly.

4. Legal Basis (for EU/EEA Users)

If you are in the EU/EEA, we process your data based on:

Contract fulfillment (orders, accounts)
Legitimate interests (security, analytics, improving services)
Legal obligations (tax, accounting)
Consent (newsletter, marketing cookies)

5. How We Share Your Information

We may share your data with:

Payment processors
Shipping carriers
Analytics providers
Hosting providers
Customer support tools

These partners only access data necessary to perform their service.

We do not share, sell, or rent your data to unaffiliated third parties for marketing.

6. Data Security

We implement technical and organizational measures to protect your information, including:

Encrypted connections (HTTPS)
Secure password hashing
Limited access to personal data

However, no online transmission is 100% secure.

7. Data Retention

We keep your data only as long as necessary:

Account data: until you delete your account
Order data: as required by tax and accounting laws
Support messages: as needed for service quality

8. Your Rights (EU/EEA Users)

You may request:

Access to your data
Correction of inaccurate data
Deletion of your data
Restriction of processing
Data portability
Objection to processing

You may also withdraw consent at any time.

9. Children’s Privacy

Our services are not intended for children under 16.
We do not knowingly collect data from minors.

10. International Data Transfers

If you access our services from outside your country, your data may be transferred to servers located elsewhere.
Where legally required, we apply appropriate safeguards (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time.
The “Last updated” date indicates the latest revision.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: Info@Grab.ba
Address: notgrabba oü, Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 10151, Estonia

Grabba