Privacy policy

Last updated: 20 October 2026

Grobytek is the data controller for personal data collected through . You can reach us about privacy matters at info@grobytek.my, by phone at +33611535889, or by post at 22 Lotissement Chemin de Mezoargues, 13150 Tarascon, France. Grobytek’s company registration details are displayed in the website footer and on the legal notice page.

What we collect and why

When you place an order, we collect your name, delivery address, email address, phone number, and the details of the products you ordered. We also receive confirmation from our payment providers that a payment has been authorised, but we do not receive or store your full card number or PayPal credentials. We use this information to fulfil your order, to communicate with you about the order, to handle returns and refunds, and to meet our accounting and legal obligations. The legal bases are performance of the contract (order fulfilment), compliance with legal obligations (record-keeping), and our legitimate interest in responding to customer enquiries and preventing fraud.

If you contact us by email, phone, or the form on our Contact Us page, we keep a record of that correspondence so that we can resolve the issue and refer back to it if needed. We do not use your contact details for marketing emails unless you have separately opted in, and you can withdraw that consent at any time.

Cookies and analytics

We use essential cookies to keep the shopping cart and checkout functioning. We may also use privacy-respecting analytics to understand which pages are visited and where users encounter problems, so that we can improve the site. Non-essential cookies are not set unless you agree through the cookie banner. You can clear or block cookies in your browser settings, although blocking essential cookies may prevent checkout from working.

Who we share data with

We share only what is necessary with the carriers listed in our Shipping Policy (Colissimo, Chronopost, and Colis Privé), our payment processors (Visa and MasterCard through our payment gateway, and PayPal), and our hosting and email providers. We do not sell personal data. We do not share your data with advertising networks for cross-site behavioural targeting.

Some of our service providers may process data outside the European Economic Area. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

How long we keep data

Order and invoice records are kept for the period required by French tax and accounting rules. Customer service correspondence is kept for up to two years after the last exchange, unless a longer period is needed to resolve an ongoing dispute. Analytics data is retained in aggregate or pseudonymised form for no longer than 13 months.

Your rights

Under the GDPR, you have the right to access your personal data, to correct inaccurate data, to request erasure, to restrict processing, to object to processing based on legitimate interests, and to receive a copy of data you provided in a portable format. To exercise any of these rights, email info@grobytek.my. We will respond within one month. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l’Informatique et des Libertés).

California residents

If you are a California resident, the CCPA gives you the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. Grobytek does not sell personal information. To make a CCPA-related request, contact info@grobytek.my.