Privacy Policy

Gannube ("Gannube", "we", "us") operates gannube.com and the related services through which we sell our collections and communicate with you (together, the "Services"). This Privacy Policy explains what personal information we collect when you visit, shop with or contact us, how we use and share it, and the choices and rights you have.

Our store runs on Shopify, which hosts the Services and processes data on our behalf. By using the Services you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.

1. Who is responsible for your data

Gannube is the data controller for the personal information described in this policy. For anything relating to your data, contact us through our contact form.

2. Information we collect

Depending on how you interact with us, we collect or process the following categories of personal information:

  • Contact details – your name, email address, phone number, billing and shipping addresses.
  • Order and payment information – the items you buy, return or exchange, order history, and payment details. Card numbers are handled by our payment providers and are never stored on our systems.
  • Account information – login credentials, saved addresses and preferences if you create an account.
  • Communications – what you send us through the contact form, email, social media or the returns form.
  • Application information – if you apply to our creator programme or register for a brand experience: your name, contact details, city, social media usernames and the answers you give in the form.
  • Device and usage information – IP address, browser and device type, pages viewed, products added to cart or wishlist, referring pages and similar data collected automatically through cookies and comparable technologies.

3. Where the information comes from

  • Directly from you, when you place an order, create an account, subscribe to our newsletter, complete a form or contact us.
  • Automatically, from your device and browser when you use the Services.
  • From service providers, such as Shopify, payment processors and couriers, who process information on our behalf.

4. How we use your information

  • To provide the Services – process and deliver your orders, take payment, handle returns and exchanges, manage your account and answer your questions.
  • To communicate with you – send order confirmations, shipping updates and service messages, and respond to your enquiries and applications.
  • Marketing – send you our newsletter and news about collections, launches and events if you have subscribed, and show you relevant advertising on other platforms. You can unsubscribe at any time using the link in every email.
  • To improve the Services – understand how the site is used, fix problems and develop new products and features.
  • Security and fraud prevention – protect the Services, our customers and our business, and detect or prevent fraudulent or unlawful activity.
  • Legal compliance – keep the records the law requires, respond to lawful requests and enforce our terms.

Where the law of your country requires a legal basis, we rely on the performance of our contract with you (orders, deliveries, returns), your consent (newsletter, non-essential cookies), our legitimate interests (improving and securing the Services, preventing fraud) and compliance with legal obligations.

5. Cookies and similar technologies

We use cookies and similar technologies to keep the site working (for example your cart and login), to understand how the site is used, and, where enabled, to measure and personalise advertising. Categories:

  • Essential – required for the store to function; these cannot be switched off.
  • Analytics – help us understand traffic and behaviour so we can improve the site.
  • Marketing – set by advertising partners (for example Meta, Google or TikTok) to measure campaigns and show you relevant ads.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the store from working.

6. How we share your information

We do not sell your personal information. We share it only as needed to run the Services:

  • Shopify, which hosts our store and processes orders, payments and customer data on our behalf.
  • Payment providers, to process your payment and prevent fraud.
  • Couriers and logistics partners, to deliver and collect your orders.
  • Email, analytics and advertising providers, to send our communications and measure and improve our marketing.
  • Google, which stores the applications submitted through our creator programme and brand experience forms.
  • Professional advisers and authorities, where required by law, to protect our rights, or in connection with a merger, sale or reorganisation of our business.

7. International transfers

Our service providers may store or process your information outside Egypt, including in the countries where Shopify and Google operate. When we transfer information from the European Economic Area or the United Kingdom, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or their UK equivalent.

8. How long we keep your information

We keep personal information for as long as needed for the purposes above: order and payment records for the period required by Egyptian tax and commercial law, account information until you ask us to close your account, marketing preferences until you unsubscribe, and applications for up to two years after we last hear from you. Information is then deleted or anonymised.

9. Security

We use appropriate technical and organisational measures, including encrypted connections and access controls, to protect your information. No system is completely secure, so please keep your account credentials confidential and let us know immediately if you suspect misuse.

10. Your rights

Under Egypt's Personal Data Protection Law No. 151 of 2020 and, where applicable, the data protection laws of your country of residence (including the EU and UK GDPR), you may have the right to:

  • access the personal information we hold about you and receive a copy of it;
  • correct information that is inaccurate or incomplete;
  • ask us to delete your information;
  • object to or restrict certain processing, including direct marketing;
  • withdraw consent at any time, without affecting processing carried out before withdrawal;
  • receive your information in a portable format;
  • lodge a complaint with the data protection authority in your country.

To exercise any of these rights, contact us through the contact form. We may need to verify your identity before acting on a request. We will respond within the period required by applicable law.

11. Children

The Services are not directed to anyone under 18 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The revised version will be posted on this page with a new "Last updated" date. Where a change is significant, we will notify you as required by law.

13. Contact

Questions about this policy or how we handle your information can be sent through our contact form.