Privacy and cookies
Privacy policy
How Grokachu collects, uses and protects your personal data under the GDPR.
Version 1.0 — 3 July 2026
Data controller
Grokachu SAS, 60 rue François 1er, 75008 Paris, France. SIREN 101 302 115. Email: contact@grokachu.fr.
Data we collect
When you browse or buy from Grokachu, we may collect your first and last name, email address, postal address, phone number if supplied, order history, IP address, browser type, pages viewed and interactions with the Site. Payment data is handled solely by Stripe — Grokachu cannot access it.
Purposes and legal bases
We use data to manage orders and deliveries, meet invoicing and accounting duties, prevent fraud and secure transactions, produce minimised operational statistics, improve the Site with consent, and provide customer support.
PostHog analytics
Grokachu uses PostHog hosted in the European Union. In your browser, PostHog starts only after you consent, and is used to measure page views; session recording and advertising retargeting are disabled. Grokachu also sends minimised server-side ecommerce events without names, emails or addresses. Those server events place no tracker on your device.
Cookies
Grokachu uses strictly necessary cookies for sessions, carts and authentication; these do not require consent. We place no advertising or retargeting cookie. PostHog cookies and local analytics storage are used only with your consent and kept for no more than 13 months. You can change your preference at any time.
Recipients and processors
Data may be shared with Stripe for payments, Mondial Relay for delivery, Hostinger for hosting and PostHog for analytics. Where a provider operates outside the European Union, appropriate safeguards are put in place.
Retention periods
Order data is kept for five years. Account data is kept throughout the commercial relationship, then archived for three years after the last contact. Cookie-related browsing data is kept for up to 13 months, and marketing data for three years after the last active contact.
Your GDPR rights
Under the GDPR, you may request access, correction, deletion, restriction, objection or portability. Email contact@grokachu.fr to exercise these rights. We will reply within one month and may ask you to verify your identity.
Minors
The Site and its services are intended for adults. Orders must be placed by someone aged 18 or over.
Changes
We may update this policy to reflect legal, technical or functional changes. The version in force on the date of your visit applies.
GDPR contact
For any question about your personal data, email contact@grokachu.fr.
