Privacy policy
At Groovaly, we value your trust and are committed to protecting your personal data.
This Privacy Policy explains how Groovaly collects, uses and protects personal data when you visit groovaly.com, contact us, subscribe to our communications, use our configurator or place an order. It also sets out how we use cookies and similar technologies — see section 5.
1. Data controller
Groovaly Simplified joint-stock company (SASU) Registered with the Paris Trade and Companies Register under number 990 952 640 Registered office: 21 rue des Épinettes, 75017 Paris, France Email: contact@groovaly.com
2. Personal data we collect
Depending on how you interact with the Website, we may collect and process:
Contact details — name, email address, country, delivery location, telephone number, and any information you provide when contacting us or requesting a quotation.
Order and delivery information — billing details, delivery address, selected products, custom compositions, order history, delivery preferences and customer service exchanges.
Configurator information — the composition you create, selected modules, configuration previews, product options and information submitted through the configurator or quotation forms.
Account information — where customer accounts are available, your login details, order history and account preferences.
Newsletter and marketing preferences — email address, subscription status, consent preferences and communication history.
Technical and browsing data — IP address, device type, browser type, pages visited, referring pages, time spent on the Website, language preferences and approximate location derived from technical data.
Cookie and advertising identifiers — analytics cookies, advertising pixels, social media identifiers and similar technologies.
Payment information — payments are processed by external providers, including Shopify Payments and PayPal. Groovaly does not store full payment card details.
3. How we use your data
To respond to your requests — contact forms, quotation requests, product questions, delivery questions and customer support.
To manage orders and deliveries — order processing, payment confirmation, delivery coordination, invoicing, customer service, returns and after-sales support.
To operate the configurator — generating configuration previews, saving composition details and preparing quotations or orders.
To send newsletters and marketing communications — only where permitted by law or where you have given consent. You can unsubscribe at any time.
To improve the Website — analytics, performance measurement, troubleshooting, fraud prevention and security.
To run advertising and measure campaign performance — where permitted, we may use advertising pixels or similar technologies to measure campaigns and show relevant content on platforms such as Google, Meta, TikTok or Pinterest.
To comply with legal obligations — accounting, tax, consumer law, legal guarantees and dispute management.
4. Legal bases for processing
Contractual necessity — where processing is necessary to prepare, manage or fulfil an order, quotation, delivery, customer account or customer service request.
Consent — for newsletters, non-essential cookies, advertising pixels and certain marketing communications.
Legitimate interest — for Website security, fraud prevention, service improvement, customer relationship management and business development, where your rights and freedoms do not override our interests.
Legal obligation — for accounting, tax, invoicing, consumer protection, legal guarantee obligations and responses to lawful requests from authorities.
5. Cookies and similar technologies
Cookies are small text files stored on your device when you visit a website. They allow the Website to recognise your device, remember your preferences, enable essential features and collect information about how the Website is used. Similar technologies, such as pixels, tags and local storage, may also be used for analytics, embedded content and marketing purposes.
We use cookies and similar technologies in accordance with applicable European rules, including the GDPR and CNIL guidelines.
Strictly necessary cookies
These cookies are essential for the Website to function. They enable core features such as:
- page navigation;
- security;
- cart management;
- checkout and order processing;
- customer account access;
- configurator functionality;
- cookie consent management.
These cookies do not require your consent and cannot be disabled through our cookie banner. You may block them through your browser settings, but parts of the Website may then not function properly.
Analytics cookies
Analytics cookies help us understand how visitors use the Website. They may measure pages visited, time spent on the Website, interactions with product pages and the configurator, navigation paths, and performance issues or errors.
Where required, analytics cookies are placed only after you have given consent.
Marketing and advertising cookies
Marketing and advertising cookies and pixels may be used to measure the effectiveness of our campaigns, understand how visitors interact with our content and show more relevant advertising on third-party platforms, including Google, Meta (Facebook and Instagram), TikTok, Pinterest and YouTube.
These technologies may allow third-party platforms to recognise your browser or device and collect information about your browsing activity, including across different websites.
Marketing and advertising cookies are placed only with your consent where required by law.
Social media and embedded content cookies
Some pages include embedded content or links from third-party platforms, such as videos or social media content. These third parties may place cookies or similar technologies when you interact with their content. Their use of cookies is governed by their own privacy and cookie policies.
Managing your preferences
When you first visit the Website, a cookie banner allows you to accept all cookies, reject non-essential cookies, or customise your preferences by category. Non-essential cookies are not placed before your consent, where consent is required.
You can change or withdraw your consent at any time through the cookie management tool available on the Website. You can also manage or delete cookies through your browser settings. Disabling certain cookies may affect the functionality or performance of the Website.
Third-party cookies
Some cookies or similar technologies may be placed by third-party service providers used for hosting, analytics, payments, marketing, embedded content or social media features. These third parties process data according to their own privacy and cookie policies. Groovaly does not control all third-party cookies or the way third-party platforms use the information they collect. We encourage you to review the relevant policies.
How long cookies are stored
Cookies are stored for a limited period depending on their purpose. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them.
Where required by applicable law, your cookie consent preferences are retained for a limited period so that we can remember your choices.
6. Who we share data with
We share personal data with trusted service providers strictly where necessary for the operation of the Website and our services:
E-commerce platform — Shopify. Our Website and online store are hosted and operated using Shopify. Shopify processes personal data when you visit or make a purchase from our store, including to provide and improve services based on your interactions with Groovaly, Shopify and other merchants using Shopify. For more information about how Shopify processes personal data, please refer to the Shopify Consumer Privacy Policy.
Payment providers — Shopify Payments, PayPal and card payment providers.
Delivery and logistics partners — used to prepare, ship, track and deliver orders.
Email and marketing service providers — used to manage newsletters, customer communications and marketing campaigns.
Analytics and advertising platforms — such as Google, Meta, TikTok and Pinterest, where applicable.
Professional advisers and authorities — accountants, legal advisers, insurers, tax authorities, courts or regulators, where necessary.
We do not sell your personal data for monetary consideration. Depending on your location, certain disclosures or uses of personal data for targeted advertising may be considered a “sale”, “sharing” or targeted advertising under applicable law. Where applicable, you can opt out through the data sharing opt-out page available on our Website.
7. International transfers
Some of our service providers may process personal data outside the European Economic Area. Where this happens, we take appropriate measures to protect your data, such as relying on adequacy decisions, Standard Contractual Clauses or other safeguards recognised under applicable data protection law.
8. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Contact and quotation requests — for the time necessary to respond and manage the commercial relationship.
Customer and order data — for the duration required to manage the order, after-sales service, legal guarantees, accounting and tax obligations.
Newsletter data — until you unsubscribe or withdraw consent, unless a longer period is required to prove consent or comply with legal obligations.
Cookie and analytics data — according to the retention periods described in section 5 above and the settings of the relevant tools.
Accounting and legal records — for the periods required by applicable law.
9. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
Right of access — to know whether we process your personal data and obtain a copy of it.
Right to rectification — to request correction of inaccurate or incomplete data.
Right to erasure — to request deletion of your personal data, where legally possible.
Right to restriction — to request that processing be limited in certain circumstances.
Right to object — to object to processing based on legitimate interest, including certain marketing activities.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to data portability — to receive certain personal data in a structured, commonly used and machine-readable format.
To exercise your rights in relation to Groovaly, contact us at contact@groovaly.com. We may ask you to provide proof of identity where necessary.
You may also use the Shopify Privacy Portal to learn how to exercise your rights in relation to Shopify, including withdrawing consent or objecting to Shopify’s processing of your personal data for Enhanced Services, where applicable.
10. Marketing communications
If you subscribe to our newsletter or agree to receive marketing communications, we may send you updates about Groovaly, new products, launches, offers, editorial content and related news.
You can unsubscribe at any time using the unsubscribe link in our emails, or by contacting us at contact@groovaly.com.
11. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration and disclosure.
No online service can be guaranteed to be completely secure. You are responsible for using the Website and any account features in a secure manner.
12. Children
The Website is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Complaints
If you believe your personal data has not been processed in accordance with applicable law, please contact us at contact@groovaly.com.
You also have the right to lodge a complaint with the French data protection authority:
CNIL — Commission Nationale de l'Informatique et des Libertés www.cnil.fr
14. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal obligations or Website features.