Grimla

Legal

Privacy

What data we collect

We collect publicly available business information about online shops: business name, VAT number, registered address, domain, and product categories, sourced from public disclosures and regulatory databases. For members we store an account email and Stripe customer reference, but no card data.

Lawful basis

Shop data is processed under legitimate interest (Article 6(1)(f) GDPR) to provide a consumer transparency and directory service. Account data is processed to provide the membership you requested.

Shop owner rights

Shop owners can request removal at any time via the crawler page.

Deleting your account

You can delete your account yourself at any time from the preferences tab of your account page; we email you a confirmation code first. Deleting erases your saved products, stores, searches, lists and alerts, signs you out everywhere, cancels any membership and releases any shops you had claimed (the shop listings stay). Feedback you sent stays without your email address or any link to your account, and DSA notices are kept as described below.

Messages and DSA notices

If you optionally provide an email with feedback or a report, we use it only to reply and remove it when the case is resolved. We use identity, contact and notice details from DSA forms to assess the notice, confirm receipt and communicate the outcome. We retain those details only as long as needed to handle the matter and meet legal obligations.

Contact

[email protected]