Privacy Policy

1. Controller

Grably, sole proprietorship (Einzelfirma), owner Albert Berisha, Hohlstrasse 201, 8004 Zürich, Switzerland. Email: shopgrably@proton.me.

This policy follows the Swiss Federal Act on Data Protection (revFADP) and, for visitors and customers in the EU/EEA and UK, the General Data Protection Regulation (GDPR / UK GDPR).

2. What we process and why

• Visiting the website: our host Cloudflare, Inc. (USA) processes technical data (IP address, browser, pages requested, time) to deliver the website and protect it from abuse. Basis: legitimate interest in a secure, working website.
• Placing an order: checkout runs on Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA). Stripe processes your name, email, shipping address and payment details. We receive your order and shipping details. Basis: performance of the contract.
• Delivering your order: we pass your name, shipping address, phone number (if given) and order contents to our fulfillment partner CJ Dropshipping (China) and the shipping carrier, solely to deliver your order. Basis: performance of the contract.
• Contacting us: messages from the contact form are forwarded to our inbox via Brevo (Sendinblue SAS, France) and our email provider Proton AG (Switzerland) only to answer your request. Basis: legitimate interest and pre-contractual steps.
• Newsletter (only if you subscribe): if you enter your email address in a newsletter form, we store it with our email provider Brevo (Sendinblue SAS, France) and send you an email whenever a new product is added to the store. Basis: your consent. Every email contains an unsubscribe link; you can also unsubscribe by writing to shopgrably@proton.me. Brevo records whether emails are opened and links clicked, to help us improve them.
• Advertising measurement (only with your consent): if you click "Accept" in the cookie banner, we load the Meta Pixel (Meta Platforms Ireland Ltd.) and/or the TikTok Pixel (TikTok Technology Ltd., Ireland) to measure our ads. Without consent they are not loaded. You can withdraw consent at any time via "Cookie settings" in the footer (shown when such tools are in use). Basis: consent.

3. Transfers abroad

Some recipients are located outside Switzerland and the EU/EEA, in particular in the USA and China. Where no adequacy decision exists, transfers rely on standard contractual clauses or, for delivering your order, on the necessity of the transfer to perform the contract with you.

4. How long we keep data

Order and accounting records are kept for 10 years as required by Swiss law. Contact messages are deleted once your request is resolved, unless they relate to an order. Newsletter addresses are kept until you unsubscribe. Consent choices are stored in your browser until you change them.

5. Your rights

You can request access to your data, correction, deletion, restriction of processing and data portability, object to processing based on legitimate interest, and withdraw consent at any time. Write to shopgrably@proton.me. You may also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU/UK the authority of your country.

6. Changes

We may update this policy when our services change. The current version is always published on this page.