Grokachu

Data controller

Grokachu SAS, 60 rue François 1er, 75008 Paris, France. SIREN 101 302 115. Email: [email protected].

Data we collect

When you browse or buy from Grokachu, we may collect your first and last name, email address, postal address, phone number if supplied, order history, IP address, browser type, pages viewed and interactions with the Site. Payment data is handled solely by Stripe - Grokachu cannot access it.

Purposes and legal bases

We use data to manage orders and deliveries, meet invoicing and accounting duties, prevent fraud and secure transactions, produce minimised operational statistics, improve the Site with consent, and provide customer support.

Google Maps delivery geocoding

When you search for a Pickup Point, the delivery address you entered is sent to Google Maps Platform to locate it and calculate approximate distances to Pickup Points. This location is used only during the search: Grokachu does not cache it or save it with the order.

PostHog analytics

Grokachu uses PostHog hosted in the European Union. In your browser, PostHog starts only after you consent and measures page views and progress to a cart or order; session recording and advertising retargeting are disabled. When you are signed in, your customer ID, email address, and name are associated with your PostHog profile. Technical cart identifiers connect carts to that profile. Grokachu also sends minimised server-side ecommerce events to monitor carts and orders. Those server events place no tracker on your device.

Cookies

Grokachu uses strictly necessary cookies for sessions, carts and authentication; these do not require consent. We place no advertising or retargeting cookie. PostHog cookies and local analytics storage are used only with your consent and kept for no more than 13 months. You can change your preference at any time.

Recipients and processors

Data may be shared with Stripe for payments, Mondial Relay for delivery, Google Maps Platform for geocoding, Hostinger for hosting and PostHog for analytics. Where a provider operates outside the European Union, appropriate safeguards are put in place.

Retention periods

Order data is kept for five years. Account data is kept throughout the commercial relationship, then archived for three years after the last contact. Cookie-related browsing data is kept for up to 13 months, and marketing data for three years after the last active contact.

Your GDPR rights

Under the GDPR, you may request access, correction, deletion, restriction, objection or portability. Email [email protected] to exercise these rights. We will reply within one month and may ask you to verify your identity.

Minors

The Site and its services are intended for adults. Orders must be placed by someone aged 18 or over.

Changes

We may update this policy to reflect legal, technical or functional changes. The version in force on the date of your visit applies.

GDPR contact

For any question about your personal data, email [email protected].