Last updated: October 21, 2026
This policy explains what personal data we collect on drop.gnatepe.com, why, who we share it with and how to exercise your rights, in accordance with the EU General Data Protection Regulation (GDPR).
Data controller
—, —, — —, France. Contact for data requests: gnatepeweb@gmail.com.
Data we collect and why
- Orders (name, addresses, phone, email, products bought): to process, ship and track your orders and handle withdrawals and after-sales service. Legal basis: performance of a contract.
- Invoicing and accounting: to meet our legal obligations. Legal basis: legal obligation.
- Payment: handled by our payment providers; we don’t store your card details. Legal basis: performance of a contract; fraud prevention (legitimate interest).
- Requests (forms, chat assistant, email, WhatsApp): to answer you. Legal basis: pre-contractual steps or legitimate interest.
- Marketing: by email only if you agreed, or for products similar to those you bought (you can object at any time). Legal basis: consent or legitimate interest.
- Browsing: technical data and cookies, see our Cookie policy.
Recipients and transfers outside the EU
- Our suppliers in China (CJ Dropshipping, AliExpress sellers, 1688 suppliers) receive your name, delivery address and phone number solely to ship your parcel. China is not covered by a European Commission adequacy decision: this transfer is necessary to perform the contract you conclude with us (GDPR article 49(1)(b)), and we limit it to what is strictly needed.
- Carriers who transport, clear through customs and deliver your parcel.
- Payment providers (credit card, PayPal, Apple Pay and Google Pay).
- Technical providers: hosting, email delivery, and an artificial intelligence service (Anthropic, United States) used for the chat assistant and content writing: messages sent to the assistant are passed to it to generate replies. Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses.
We never sell your personal data.
How long we keep data
- Orders: for the duration of our relationship, then 5 years as proof of contract; invoices and accounting records: 10 years.
- Marketing: 3 years after your last purchase or contact.
- Chat assistant conversations: deleted automatically after the configured period (90 days by default).
- Quote and partnership requests: 3 years after the last contact.
Your rights
You can ask to access, correct or erase your data, restrict or object to its processing (including marketing), request data portability and withdraw consent at any time, by writing to gnatepeweb@gmail.com. We reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority in your country.
Customers in the United States
We use the categories of data described above only for the purposes stated. We do not sell your personal information. If we use advertising cookies, they are only set with your consent, which you can withdraw at any time. For any request under your state’s privacy laws, write to gnatepeweb@gmail.com.
Security
This website uses an encrypted connection (HTTPS). Access to data is limited to the people who need it to process your orders.