Privacy Policy

PRIVACY POLICY

Gbz420.com
GroCorp
Registered Office: 9 rue des Colonnes, 75002 Paris, FRANCE

Website type: e-commerce

Purpose of this Privacy Policy

The purpose of this Privacy Policy is to inform users of gbz420.com about what personal data we may collect, how we use it, who may access it, what rights users have, and how cookies are used on this website.

This policy explains, where applicable:

  1. What personal data we collect
  2. How we use the data
  3. Who can access the data
  4. User rights
  5. Our cookie policy

This Privacy Policy operates alongside our Terms and Conditions.

Applicable Laws

In accordance with the General Data Protection Regulation (GDPR), this Privacy Policy is designed to comply with applicable data protection rules. Personal data must be:

  1. processed lawfully, fairly, and transparently;
  2. collected for specified, explicit, and legitimate purposes and not processed in a way incompatible with those purposes;
  3. adequate, relevant, and limited to what is necessary (data minimization);
  4. accurate and kept up to date where necessary;
  5. kept in a form that permits identification for no longer than necessary;
  6. processed with appropriate security, including protection against unauthorized or unlawful processing and against accidental loss or damage.

Processing is lawful only if and to the extent that at least one of the following applies: consent; performance of a contract; compliance with a legal obligation; protection of vital interests; performance of a task carried out in the public interest; or legitimate interests, provided such interests are not overridden by your fundamental rights.

For California residents, we also aim to follow relevant principles of the California Consumer Privacy Act (CCPA). Where inconsistencies exist, applicable local rules may prevail and we will update this policy when needed.

Consent

By using our website, users agree to:

  1. the terms described in this Privacy Policy; and
  2. the collection, use, and retention of data described in this policy.

Personal Data We Collect

Data collected automatically

During browsing, certain technical information may be processed through cookies and similar technologies to enable core website functions (for example session management, cart operation, security) and to measure performance. This information is not intended to directly identify you but may include session identifiers, browser details, and interaction data.

Data provided by users

We may collect the following data when you create an account, place an order, or contact us:

  1. First and last name
  2. Email address
  3. Phone number
  4. Shipping and/or billing address
  5. Payment information required to process the transaction (handled via our payment providers)

This data is collected mainly through:

customer account registration, checkout, and the contact form.

We only collect data that helps us achieve the purposes described in this policy. We do not collect additional data without informing you.

How We Use Personal Data

Personal data collected on our website is used only for the purposes described in this policy or indicated on relevant pages. We do not use your data beyond what we disclose.

Data collected when you use certain features may be used for:

  1. processing orders, delivering products, and providing customer support.

Who We Share Personal Data With

Employees
We may disclose user data to members of our organization who reasonably need it to achieve the purposes set out in this policy.

Service providers and partners
In connection with an order, certain data may be shared with essential providers (for example payment, shipping, hosting, customer support). Providers may only access data to the extent reasonably necessary to perform their services.

Other disclosures
We do not sell user data. We may disclose data in the following cases:

  1. if required by law;
  2. if required for legal proceedings;
  3. to establish, exercise, or defend our legal rights;
  4. to buyers or potential buyers in the event of a sale, merger, or reorganization of the business, subject to legal safeguards.

If you follow links to third-party websites, please note that we are not responsible for their privacy practices. We recommend reviewing their policies.

How Long We Keep Personal Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and then delete or anonymize it where possible, subject to legal obligations (for example accounting requirements).

How We Protect Your Personal Data

We use security measures designed to protect your data, including encrypted transmission via TLS/HTTPS. Data stored in our systems is protected and access is restricted to authorized personnel. Employees are bound by confidentiality obligations.

While we take reasonable precautions, no method of transmission or storage is entirely secure. The internet can involve risks and we cannot guarantee absolute security beyond what is reasonably practical.

Your Rights as a User

Under the GDPR, users have the following rights:

  1. right of access
  2. right to rectification
  3. right to erasure
  4. right to restrict processing
  5. right to data portability
  6. right to object

More information can be found in GDPR Articles 12 to 23.

How to Update, Delete, or Challenge Data

If you would like your information to be modified, deleted, or if you want to object to processing, please contact our privacy contact as follows:

The administrator
via the website contact form

Cookie Policy

A cookie is a small file stored on a user’s device by a website. Cookies help collect information about browsing activity and enable certain website functions.

We use the following types of cookies:

  1. Functional cookies
    Used to remember selections and enable core features (for example account login, cart, preferences).
  2. Analytics cookies
    Used to understand how the site is used and to improve performance and usability.
  3. Targeting cookies
    Used to personalize content and, where applicable, measure marketing performance.

You can choose to be notified whenever a cookie is set and you can disable cookies in your browser settings. Please note that disabling certain cookies may reduce website functionality.

Additional Provisions

  1. Our products are not classified as narcotics as they comply with the maximum 0.3% THC threshold. CBD-based products are not medicines and are not intended to replace medical treatment.

Changes

We may update this Privacy Policy from time to time to maintain legal compliance and reflect changes in our data collection practices. We recommend checking this page periodically. Where appropriate, we may notify users by email.

Contact

If you have questions, please contact us:
via the website contact form


Effective date: January 11, 2024

We do not use tracking or advertising cookies.
Only strictly necessary cookies required for the website to function may be used.