Privacy policy
Last updated: 1 November 2026
At GRAVI MONOGRAM BAR, we respect your privacy. This policy explains how we handle personal information when you visit www.gravibar.com, make a purchase, request personalisation or contact us.
1. Who is responsible for your information?
The data controller is:
Arman Hovakimyan, trading as GRAVI MONOGRAM BAR
NIF/NIE: Y4200226A
Business address: Carrer del Rec 61, Tienda 2, 08003 Barcelona, Spain.
Email: info@gravibar.com
Telephone: +34 641 719 689
Our online store is hosted by Shopify.
2. Information we collect
Depending on how you interact with us, we process:
• Contact and delivery details: your name, email address, telephone number, billing address and delivery address.
• Order information: products purchased, selected variants, prices, payment status, delivery information, returns and customer service history.
• Billing information: invoice details and tax identification information where needed.
• Personalisation details: names, initials, text, symbols, foil colours, placement instructions and any reference images you provide.
• Account information: details associated with a customer account, where you choose to use one.
• Communications: enquiries, complaints, feedback and information you send us.
• Technical information: IP address, browser and device information, security logs and information about website interactions, subject to your cookie choices where required.
Payment details are handled by the payment providers involved in your transaction. The information available to GRAVI depends on the payment method and normally includes payment confirmation and limited transaction details.
Please provide only information necessary for your order or enquiry. Avoid including sensitive personal information in personalisation requests.
3. Where information comes from
We receive information directly from you when you place an order, complete a form, provide personalisation instructions or contact us.
We also receive relevant information from Shopify, payment providers and delivery providers, such as payment status and delivery updates. Certain technical information is collected automatically when you use the website.
If you purchase a gift for someone else, we may receive their name, delivery details or personalisation information from you. Please ensure you are entitled to provide it.
4. Why we use information and our legal bases
Orders and personalisation
We use the information needed to process payments, prepare and personalise products, arrange delivery or collection, and manage returns and after-sales assistance. Our legal basis is performing our contract with you or taking steps at your request before a purchase.
Customer enquiries
We use your contact details and correspondence to answer questions and resolve problems. Depending on the enquiry, this is necessary for a contract, compliance with a legal obligation or our legitimate interest in providing customer support.
Accounting and legal obligations
We process invoice, transaction and other required records to comply with tax, accounting and consumer protection obligations.
Security and legal claims
We process relevant technical and transaction information to protect our website, prevent fraud and establish, exercise or defend legal claims. We rely on our legitimate interests, balanced against your rights, or an applicable legal obligation.
Marketing
If you subscribe to marketing communications, we use your details to send the communications you requested. We obtain consent where required. You can unsubscribe using the link in a marketing message or by contacting us.
Non-essential cookies and similar technologies
Where we use technologies requiring consent, we rely on your consent before activating them.
Providing information needed to fulfil an order is necessary for that purchase. Without it, we may be unable to process payment, personalise the product or arrange delivery. Optional marketing consent is not a condition of purchase.
5. Personalisation and customer photographs
We use personalisation instructions and reference images to prepare your requested product and manage related customer service.
Ordering a personalised product does not give us permission to publish your name, personalisation details or identifiable photographs for advertising. We will obtain any permission required before using such material for marketing.
6. Who receives your information?
We share information where necessary with:
• Shopify, to host and operate our online store and related services.
• Payment providers, to process payments and manage payment security.
• Delivery providers, to deliver orders and resolve delivery issues.
• Technology and support providers used to operate our website and customer communications.
• Accountants, professional advisers and public authorities where necessary for legal obligations or claims.
Providers acting on our behalf must handle information under appropriate contractual arrangements. Some providers also act as independent controllers for their own legally defined purposes.
7. Shopify’s role
Shopify processes information to provide services such as storefront hosting, checkout, payments where applicable, security and fraud prevention.
Where Shopify enhanced services are enabled, Shopify may also process information for its own purposes as described in its Consumer Privacy Policy, including processing involving interactions with other Shopify merchants. Any consent required for these features must be respected.
For details about Shopify’s processing and privacy choices, visit:
https://www.shopify.com/legal/privacy/app-users
https://privacy.shopify.com/en
8. Cookies and similar technologies
Our website uses technologies necessary for functions such as shopping baskets, checkout, security and remembering essential preferences.
Where analytics, advertising or other non-essential technologies are used, we request consent where required. You can accept or reject optional categories and change your choices through the website’s cookie settings.
Rejecting optional cookies does not prevent you from making a purchase. You can also control cookies through your browser, although blocking essential cookies may affect website functionality.
The cookie information presented on our website should identify the technologies in use, their purposes, providers and duration.
9. International transfers
Shopify and other service providers may process information outside the European Economic Area.
Where such transfers occur, appropriate safeguards must apply, such as an applicable adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary measures where necessary.
Contact info@gravibar.com for information about safeguards relevant to your personal data.
10. How long we keep information
We keep personal information only for as long as necessary for the relevant purpose:
• Order and personalisation records: to fulfil the purchase, provide after-sales support and address applicable guarantee or claim periods.
• Invoices and accounting records: for legally required retention periods.
• Enquiries: until resolved and for any period reasonably needed to address related claims.
• Marketing information: until you unsubscribe or the relevant consent or lawful basis otherwise ends.
• Cookie information: for the duration specified in the applicable cookie information.
Where required, records may be retained with restricted access to meet legal obligations. Information is then deleted or anonymised when it is no longer needed.
11. Your rights
Subject to applicable legal conditions, you may request:
• Access to your personal data.
• Correction of inaccurate or incomplete data.
• Erasure of your data.
• Restriction of processing.
• Portability of data where applicable.
• Objection to processing based on legitimate interests, including objection to direct marketing.
• Withdrawal of consent at any time, without affecting processing lawfully carried out before withdrawal.
• The protections applicable to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, email info@gravibar.com. We may request proportionate information to verify your identity.
We normally respond within one month. If a lawful extension is necessary because of the complexity or number of requests, we will explain this within that period.
You may complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos:
You may also contact the supervisory authority competent for your place of residence or work.
12. Security
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.
No online system is completely secure. Please protect your account credentials and avoid sending unnecessary sensitive information.
13. Children’s information
Our website is intended for customers who can lawfully make purchases. If a child’s name or initials are supplied for a personalised gift, we use them for the requested order and related support.
If you believe a child has submitted personal information without appropriate authorisation, please contact us.
14. Changes and contact
We may update this policy to reflect changes to our services, processing activities or legal obligations. We will update the date above and provide additional notice where required.
For privacy enquiries or requests:
info@gravibar.com
+34 641 719 689
GRAVI MONOGRAM BAR
Carrer del Rec 61, Tienda 2
08003 Barcelona, Spain.
