The Grand Pages*

PRIVACY POLICY

Last updated: September 14, 2026

This Privacy Policy explains how personal data is processed in connection with The Grand Pages.

The Grand Pages is a global directory and search engine where businesses, places and people can offer exclusive deals, and money sets the ranking.

Please also see our Cookie Policy for information about cookies and similar technologies.

DATA CONTROLLER

The data controller is:

WebStyleStory SARL
276 rue Saint-Honoré
75001 Paris
France

Email:
thegrandpages@webstylestory.com

1. DATA WE MAY PROCESS

Depending on how you use The Grand Pages, we may process:

ACCOUNT AND AUTHENTICATION DATA

  • email address;
  • account identifier;
  • username;
  • authentication information;
  • login and security information;
  • records of acceptance of the Terms;
  • records of requests for immediate performance;
  • records of acknowledgement concerning withdrawal rights.

PUBLIC PAGE INFORMATION

  • Page name;
  • username;
  • category;
  • location;
  • images;
  • descriptions;
  • website;
  • social-media links;
  • other information added to a Page.

RANKING AND SUPPORT INFORMATION

  • payments and contribution amounts;
  • dates and times;
  • ranking data;
  • supporter identity where public;
  • supporter privacy settings;
  • self-support status;
  • ranking history;
  • achievements and certificates.

PAYMENT INFORMATION

Payments are processed by Stripe.

The Grand Pages does not receive or store complete payment-card details.

We may receive:

  • payment identifiers;
  • amount;
  • currency;
  • payment status;
  • date and time;
  • billing or tax information where required;
  • information relating to refunds, disputes, fraud or chargebacks.

DEALS

We may process information necessary to display Deals and determine whether a user satisfies applicable supporter conditions.

COMMENTS AND USER CONTENT

Where available, we may process comments, moderation information and other content submitted by users.

SEARCH DATA

Search queries may be processed to provide results and operate or improve the service.

TECHNICAL DATA

This may include:

  • IP address;
  • browser and device information;
  • user agent;
  • referring URL;
  • timestamps;
  • server and security logs;
  • rate-limiting information;
  • fraud and abuse-prevention information.

COMMUNICATIONS, REPORTS AND REQUESTS

Where you contact us or submit a report, complaint, moderation request, withdrawal request, legal request, privacy request or other communication, we process the information contained in that communication.

2. PAGES CONCERNING THIRD PARTIES

A Page may concern a person, professional, business or organisation that did not create the Page.

Information may be provided by:

  • another user;
  • an authorised representative;
  • the person concerned;
  • publicly accessible professional sources where their reuse is lawful.

Where a Page concerns a natural person, The Grand Pages seeks to limit third-party information to data that is relevant to that person's public or professional activity.

Users must not submit sensitive, private, unlawfully obtained or irrelevant personal information about another person.

Where appropriate, processing may be based on The Grand Pages' legitimate interest in operating a public directory, search, discovery and ranking service, balanced against the rights and interests of the person concerned.

A person concerned by a Page may use “Report this Page” or contact:

thegrandpages@webstylestory.com

to request access, correction, objection, restriction or deletion where applicable.

Where applicable data-protection law requires The Grand Pages to provide information directly to a natural person whose personal data was obtained indirectly, The Grand Pages will do so within the applicable period unless an applicable legal exception applies.

Requests and objections concerning Pages about natural persons are reviewed promptly.

Where required by applicable law, the relevant Page or personal information will be corrected, restricted or removed.

3. PURPOSES AND LEGAL BASES

We process personal data for the following purposes:

PROVIDING THE SERVICE

Including authentication, Pages, rankings, support, Deals, certificates and transactional communications.

Legal basis:
performance of a contract or steps taken at your request before entering into a contract.

PAYMENTS, ACCOUNTING AND TAX

Legal basis:
performance of a contract and compliance with legal obligations.

PROOF OF TRANSACTIONS AND CONTRACTUAL CONSENT

Including records of:

  • Terms acceptance;
  • immediate-performance requests;
  • withdrawal-right acknowledgements;
  • transaction confirmations.

Legal basis:
performance of a contract, compliance with legal obligations and legitimate interests in establishing, exercising or defending legal claims.

SECURITY AND FRAUD PREVENTION

Legal basis:
our legitimate interests in protecting the Site, users and business.

PUBLIC PAGES AND RANKING INTEGRITY

Legal basis:
performance of a contract where applicable and legitimate interests in operating a public directory, search, discovery and ranking service.

MODERATION, REPORTING AND LEGAL REQUESTS

Legal basis:
legal obligations and legitimate interests in protecting users, third-party rights and the platform.

ANALYTICS

Analytics technologies may be used to understand audience, use and technical performance of the Site.

Optional analytics technologies that require prior consent are not activated before valid consent has been obtained.

Where optional analytics technologies are enabled, information about the relevant provider and purpose is made available through Cookie Settings and/or the Cookie Policy.

MARKETING

Where consent is required, marketing communications are sent only after consent has been obtained.

4. PUBLIC INFORMATION

The Grand Pages is built around public Pages and rankings.

Depending on the Page and the user's settings, publicly visible information may include:

  • Page name;
  • username;
  • description;
  • category;
  • location;
  • image;
  • website and social links;
  • ranking position;
  • ranking amount;
  • supporter count;
  • public supporter username;
  • contribution amounts;
  • comments;
  • ranking history;
  • achievements;
  • certificates;
  • Deals.

Public Pages may be indexed by search engines.

Private supporter options may limit public display of certain identifying information without changing the underlying ranking amount.

5. SERVICE PROVIDERS

The Grand Pages uses service providers necessary to operate the Site, including:

Vercel
Hosting, infrastructure and technical services.

Neon
Database services.

Upstash
Rate limiting and technical infrastructure.

Resend
Email delivery.

Stripe
Payments and fraud-prevention services.

OVHcloud
Domain-name and DNS services.

Additional analytics providers may be used only where enabled in the Site's current configuration and subject to applicable consent requirements.

Professional legal, accounting, security and technical providers may also process limited information where necessary.

We do not sell personal data.

6. INTERNATIONAL TRANSFERS

Some providers may process personal data outside the European Economic Area, including in the United States.

Where required, international transfers are protected by recognised legal mechanisms such as:

  • an adequacy decision;
  • the EU-US Data Privacy Framework where applicable;
  • European Commission Standard Contractual Clauses;
  • another lawful safeguard.

7. RETENTION

Personal data is retained only for as long as necessary for the relevant purpose and applicable legal requirements.

Accounts:
for the lifetime of the account and for an appropriate period afterwards where necessary for legal, fraud-prevention or dispute purposes.

Public Pages and ranking history:
for as long as necessary to operate the service and preserve legitimate ranking history, subject to applicable rights.

Accounting and transaction records:
for the periods required by applicable tax and accounting law.

Security logs:
for the period reasonably necessary for security, fraud prevention and troubleshooting.

Records of contracts, payments, Terms acceptance, immediate-performance requests and withdrawal-right acknowledgements:
for the period necessary to comply with legal obligations and establish, exercise or defend legal claims.

Marketing data:
until consent is withdrawn or the user unsubscribes, subject to limited suppression records needed to respect the request.

Complaints, moderation reports and legal requests:
for as long as reasonably necessary to handle the matter and preserve appropriate evidence.

8. YOUR RIGHTS

Where the GDPR applies, you may have rights including:

  • access;
  • correction;
  • deletion;
  • restriction;
  • objection;
  • eligible data portability;
  • withdrawal of consent where consent is the legal basis.

These rights may be subject to legal exceptions.

Requests may be sent to:

thegrandpages@webstylestory.com

We may request reasonable information to verify identity.

9. CNIL

You may lodge a complaint with the French data-protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)

3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Website:
https://www.cnil.fr

10. MARKETING

Users may unsubscribe from marketing communications at any time.

Withdrawal of marketing consent does not prevent The Grand Pages from sending transactional, authentication, security or other necessary service communications.

11. MINORS

Paid use of The Grand Pages is restricted to users aged 18 or over.

Where a Page concerns a person under 18, users must take particular care not to submit sensitive, private or inappropriate personal information.

The Grand Pages may restrict or remove information or Pages where reasonably necessary to protect the rights and interests of a minor.

12. SECURITY

We use reasonable technical and organisational measures designed to protect personal data.

No internet service can guarantee absolute security.

13. COOKIES

Further information about cookies and similar technologies is available in our Cookie Policy.

14. CHANGES

This Privacy Policy may be updated to reflect changes to the service, providers or applicable law.

The current version and update date will remain available on the Site.