Privacy policy

PRIVACY POLICY

Last updated: August 1, 2026

This Privacy Policy describes how Gremay, responsible for the website https://gremay.com (“Website” or “Store”), collects, uses, stores, shares, and protects the personal data of its visitors and customers.

By accessing the Website, creating an account, contacting us, or making a purchase, you acknowledge awareness of the practices described in this Privacy Policy.

This Policy has been prepared in accordance with Law No. 13,709/2018 — Brazilian General Data Protection Law (“LGPD”) — and other applicable regulations.

1. WHO IS THE DATA CONTROLLER

For LGPD purposes, the controller of personal data processed through the Store is:

Store name: Gremay
Website: https://gremay.com
Contact email: contactogremay@gmail.com

Gremay is responsible for defining how and for what purposes customers’ and visitors’ personal data will be used, observing the hypotheses permitted by law.

2. WHAT PERSONAL DATA WE COLLECT

We may collect personal data when you visit our Store, create an account, make or attempt to make a purchase, contact us, participate in a promotion, or interact with our campaigns.

2.1. Data provided directly by you

We may collect:

  • Full name;

  • CPF (Brazilian individual taxpayer ID), when necessary for tax issuance, order processing, or fraud prevention;

  • Date of birth, if provided;

  • Billing address;

  • Shipping address;

  • Phone number;

  • Email address;

  • Account registration and access data;

  • Chosen products, sizes, colors, and preferences;

  • Order history;

  • Information sent in forms, reviews, or customer service contacts;

  • Messages sent by email, WhatsApp, social media, or other channels;

  • Preferences related to receiving communications and offers.

2.2. Payment data

When making a purchase, certain payment data may be collected and processed by the payment providers available at checkout, such as:

  • Credit or debit card;

  • Pix (instant payment system);

  • Bank slip;

  • Digital wallets;

  • Other payment methods available in the Store.

Gremay typically does not store full card data. This information is processed directly by Shopify and/or the payment providers used in the transaction, according to their own privacy and security policies.

We may receive limited payment information, such as transaction status, institution used, amount paid, number of installments, and partial identification of the payment method.

2.3. Automatically collected data

When you access or browse the Website, we may automatically collect:

  • IP address;

  • Browser type and version;

  • Operating system;

  • Device type;

  • Device identifiers;

  • Time zone and approximate location;

  • Pages and products viewed;

  • Accessed links;

  • Date and time of access;

  • Time spent on pages;

  • Source of access, such as search engines, social media, or other websites;

  • Information about your interaction with the Store;

  • Items added to or removed from the cart;

  • Information related to Website errors, performance, and security.

This information may be collected by cookies, pixels, tags, log files, identifiers, and similar technologies.

3. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to enable the Store's operation, remember your preferences, keep products in the cart, process purchases, analyze Website performance, and personalize content and ads.

The cookies used can be classified into the following categories:

3.1. Essential cookies

These are necessary for the Store's operation and for features such as:

  • Navigation between pages;

  • Session maintenance;

  • Account access;

  • Cart storage;

  • Checkout processing;

  • Security and fraud prevention.

These cookies cannot be disabled without compromising essential Website functionalities.

3.2. Functionality cookies

Allow remembering choices and preferences, such as language, region, viewed products, and other browsing experience settings.

3.3. Analytics and performance cookies

Help understand how visitors use the Store, which pages are most accessed, which products generate the most interest, and if navigation problems occur.

We may use tools such as Shopify Analytics and Google Analytics for these purposes.

3.4. Advertising and marketing cookies

May be used to measure campaigns, personalize ads, create audiences, perform remarketing, and display potentially more relevant advertising on platforms such as Google, Facebook, and Instagram.

When required by law or applicable settings, non-essential cookies will only be used after you express your choice in the cookie banner.

You can manage cookies through the banner provided in the Store or through your browser settings. Disabling certain cookies may limit some functionalities.

4. HOW WE USE PERSONAL DATA

We may use your personal data to:

  • Create and manage your account;

  • Process and confirm orders;

  • Process payments;

  • Issue tax documents;

  • Separate, package, ship, and deliver products;

  • Inform order progress, tracking, or any issues;

  • Process exchanges, returns, refunds, and cancellations;

  • Provide customer service;

  • Answer questions, requests, and complaints;

  • Maintain the cart and remember viewed products;

  • Recommend products that may be of interest to you;

  • Personalize the browsing experience;

  • Send communications related to the purchase;

  • Send news, promotions, and offers, when authorized or permitted;

  • Measure the performance of the Store and advertising campaigns;

  • Improve our products, services, and shopping experience;

  • Detect and prevent fraud, abuse, and suspicious activities;

  • Protect the security of the Store, customers, and transactions;

  • Comply with legal, tax, regulatory, and judicial obligations;

  • Exercise or defend our rights in judicial, administrative, or arbitration proceedings.

5. LEGAL BASES FOR PROCESSING

The processing of personal data may occur based on the following legal bases provided in the LGPD:

  • Performance of a contract or procedures related to the purchase;

  • Compliance with a legal or regulatory obligation;

  • Regular exercise of rights;

  • Credit protection;

  • Legitimate interest of Gremay or third parties, respecting your fundamental rights and freedoms;

  • Fraud prevention and security guarantee;

  • Consent, when this is the appropriate basis;

  • Other hypotheses authorized by law.

When processing depends on your consent, you may revoke it at any time, without compromising legitimate processing carried out previously.

6. MARKETING COMMUNICATIONS

With your authorization or when permitted by law, we may send:

  • Store news;

  • Collection launches;

  • Discount coupons;

  • Promotions;

  • Product recommendations;

  • Notifications about products left in the cart;

  • Campaigns and content related to women's fashion.

You can cancel the receipt of these communications at any time through the unsubscribe link present in emails or by contacting us.

Even after canceling promotional communications, we may continue to send necessary messages to confirm orders, payments, deliveries, exchanges, returns, account security, or requested service.

7. SHARING PERSONAL DATA

We may share your data only when necessary to operate the Store, process orders, fulfill obligations, or protect our rights.

Data may be shared with:

7.1. Shopify

Our Store is hosted on the Shopify platform, which provides the necessary technological infrastructure to display products, receive orders, manage customers, and process e-commerce related operations.

Shopify may process personal data when you visit the Store or make a purchase, according to its own policies and conditions.

7.2. Payment providers

We share necessary data with banks, acquirers, gateways, financial institutions, and other providers responsible for processing and securing payments.

7.3. Shipping companies and logistics operators

We share data such as name, phone number, and shipping address with carriers, postal services, logistics companies, and partners responsible for order delivery and tracking.

7.4. Technology service providers

We may use providers of:

  • Data hosting and storage;

  • Security and fraud prevention;

  • Customer service;

  • Email automation;

  • Customer relationship management;

  • Data and performance analysis;

  • Shopify integrations and applications;

  • Technical support and maintenance.

These providers receive only the data necessary to perform the contracted services and must use them in accordance with their legal and contractual obligations.

7.5. Analytics and advertising platforms

Where applicable, we may share identifiers and browsing information with services such as:

  • Google Analytics;

  • Google Ads;

  • Meta Platforms, including Facebook and Instagram;

  • Other analytics, advertising, and measurement platforms used by the Store.

This processing may allow campaign measurement, audience creation, and personalized ad display, respecting your privacy choices.

7.6. Authorities and legal obligations

We may share data when necessary to:

  • Comply with laws and regulations;

  • Comply with judicial or administrative orders;

  • Respond to valid requests from public authorities;

  • Investigate suspected fraud or illicit acts;

  • Protect the rights, property, and security of Gremay, its customers, or third parties.

7.7. Corporate operations

In the event of a merger, acquisition, reorganization, asset sale, or change of company control, data may be transferred to those involved in the operation, observing security measures and applicable law.

Gremay does not trade its customers' personal data as a business activity.

8. PERSONALIZED ADVERTISING

We may use information about your browsing and interaction with the Store to display potentially more relevant ads and offers on search engines, websites, applications, and social media.

You can manage your preferences directly on the platforms used:

  • Google: Google Account ad settings;

  • Facebook and Instagram: Meta Account Center and Ad Preferences;

  • Browser: cookie and privacy settings;

  • Store: cookie banner or preference tool, when available.

Disabling personalization does not mean that you will stop seeing ads, but it may reduce the personalization of the content displayed.

9. INTERNATIONAL DATA TRANSFER

Some of our providers, including Shopify and certain technology, analytics, advertising, payment, or storage services, may operate or store information in other countries.

For this reason, your personal data may be transferred to or accessed outside of Brazil.

When international transfer occurs, we will take reasonable measures to ensure that processing complies with the LGPD, through providers that offer adequate protection, security, and compliance mechanisms.

10. DATA STORAGE AND RETENTION

We will retain personal data for the period necessary to:

  • Process and manage orders;

  • Provide requested services;

  • Comply with tax, accounting, consumer, and regulatory obligations;

  • Prevent fraud;

  • Resolve disputes;

  • Exercise or defend rights;

  • Fulfill the purposes informed in this Policy.

After the purpose ends, data may be deleted, anonymized, or retained when retention is authorized or required by law.

An exclusion request will not necessarily result in the immediate deletion of all data, as some information may need to be retained for compliance with legal obligations, fraud prevention, or the exercise of rights.

11. DATA SECURITY

We adopt reasonable technical, administrative, and organizational measures to protect personal data against:

  • Unauthorized access;

  • Improper use;

  • Improper alteration;

  • Loss;

  • Destruction;

  • Leakage;

  • Unauthorized disclosure;

  • Other forms of irregular or unlawful processing.

Despite the care taken, no electronic system, internet transmission, or storage method is completely invulnerable.

Should we identify a relevant security incident involving personal data, we will take appropriate measures and make the communications required by law.

12. DATA SUBJECT RIGHTS

Under the LGPD, you may request, where applicable:

  • Confirmation of the existence of processing;

  • Access to your personal data;

  • Correction of incomplete, inaccurate, or outdated data;

  • Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;

  • Data portability, observing applicable rules;

  • Information about public and private entities with whom we share your data;

  • Information about the possibility of not providing consent and the consequences of that decision;

  • Withdrawal of consent;

  • Deletion of data processed based on consent, when applicable;

  • Opposition to processing carried out in violation of the law;

  • Review of decisions made solely based on automated processing, when applicable;

  • Petitioning the National Data Protection Authority — ANPD.

To exercise your rights, please send a request to:

contactogremay@gmail.com

To protect your privacy and prevent fraudulent requests, we may ask for additional information to confirm your identity.

Requests will be analyzed and addressed within the deadlines and limits provided by law.

13. DATA OF CHILDREN AND ADOLESCENTS

The Store and its services are not intended for individuals under 18 years of age.

We do not intentionally collect personal data from individuals under 18 without the participation or authorization of their parents or legal guardians, when applicable.

If a guardian identifies that a minor has improperly provided personal data, they may request the review and deletion of the information via email:

contactogremay@gmail.com

14. THIRD-PARTY WEBSITES AND SERVICES

The Store may contain links to websites, applications, social networks, or services managed by third parties.

Gremay does not control the privacy practices of these third parties. We recommend that you read their respective policies before providing personal data or using these services.

15. “DO NOT TRACK” SIGNAL

Some browsers offer a setting known as “Do Not Track.”

As there is no uniform standard on how websites should respond to this signal yet, the Store may not automatically change all its collection practices upon receiving it.

You can control cookies and tracking technologies through the Store’s preference banner, when available, and your browser settings.

16. CHANGES TO THIS POLICY

This Privacy Policy may be updated periodically to reflect:

  • Changes in our activities;

  • New features or services;

  • Changes in the suppliers used;

  • Legal or regulatory changes;

  • Improvements in security and privacy practices.

The updated version will be published on this page, with the indication of the last update date.

When a change is significant, we may display an additional notice on the Website or use another appropriate means of communication.

17. HOW TO CONTACT US

To ask questions, exercise your rights, request information, or submit a complaint related to the processing of personal data, please contact us through the following channels:

Gremay
Email: contactogremay@gmail.com
Website: https://gremay.com

You may also submit a petition to the National Data Protection Authority — ANPD, should you believe your rights have not been adequately addressed.