Privacy Policy

What we collect

• Orders: name, email, shipping address, the products you bought, order totals and order history.
• Accounts: name, email, date of birth (to confirm you're 21+), a securely hashed password, and your GRAB Points history.
• Messages: what you send through our contact form, plus any order number you include.
• Newsletter: your email address and when you signed up.
• Reviews: your rating and text, shown publicly with your first name and last initial.
• Technical data: standard server logs (such as IP address, browser type and pages requested), used for security and to stop abuse like repeated login attempts.

Payment card details are collected directly by our payment processor and are never stored on our servers.

Cookies & local storage

We use one essential cookie to keep you signed in. Your browser's local storage remembers your bag and your age confirmation on your own device. We don't use advertising cookies, and we don't track you across other websites.

How we use your information

• To process, ship and support your orders, including order confirmation and shipping emails.
• To run your account, password resets and GRAB Points.
• To answer your messages.
• To send marketing emails — only if you subscribed. Every one has a one-click unsubscribe link.
• To keep the store secure, prevent fraud, and comply with the law (for example, age and shipping restrictions).

Who we share it with

Only service providers that help us run the store — hosting, email delivery, payment processing and shipping carriers — and only the information each needs to do its job. They may use it only to provide services to us. We may also disclose information if required by law, to protect our rights or users' safety, or as part of a sale or merger of the business.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

How long we keep it

• Account data: until you delete your account.
• Order records: as long as required for tax, accounting and legal purposes (typically up to 7 years).
• Contact messages: up to 2 years after we resolve them.
• Newsletter: until you unsubscribe (we keep a record of the opt-out so we don't email you again).
• Sign-in sessions expire after 30 days; password reset links after 60 minutes.

Your choices & rights

• Update or delete: change your name or password, or delete your account (profile, points and reviews), any time in Settings.
• Marketing: unsubscribe from any newsletter with one click.
• State privacy rights: depending on where you live (for example California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have the right to know what personal information we hold about you, get a copy, correct it, delete it, and opt out of its sale or use for targeted advertising (we don't sell it or use it that way). You also have the right not to be treated differently for using these rights.

To make a request, contact us through our contact form or at [email protected]. We'll verify your identity (usually by confirming the email on your account or orders) and respond within 45 days. You may use an authorized agent; we may ask for proof they act for you. If we deny a request, you can appeal by replying to our decision.

Security

Passwords are hashed with scrypt; session cookies, password-reset links and guest order links are stored only as one-way hashes; and the site is served over HTTPS. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects you.

Under 21

This site isn't for anyone under 21. We don't knowingly collect information from anyone under 21; if we learn we have, we delete it.

Changes to this policy

We'll post any changes here and update the "Last updated" date. If a change is significant, we'll tell account holders by email before it takes effect.

Contact us

Questions about this policy, an order or your data? Reach GRAB7OH LLC:

• Online: our contact form — we reply within one business day (Mon–Fri).
• Email: [email protected]
• Mail: GRAB7OH LLC, Idaho