privacy policy
GALA (“we”, “us”, “our”) is committed to protecting the privacy of everyone who visits or shops on our website.
This Privacy Policy explains how we collect, use, store, and share your personal data when you browse our site, place an order, or communicate with us. It also explains how trusted third parties involved in fulfilment, payments, analytics, and marketing process data on our behalf.
Our website is not intended for children, and we do not knowingly collect personal data from children.
CONTACT US
GALA is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:
Email
hellogalalondon@gmail.com
YOUR DATA RIGHTS
Under UK data protection laws, you have rights in relation to your personal data. These include the right to:
• Access the personal data we hold about you
• Request correction of inaccurate or outdated data
• Request a copy of your data in a usable format
• Withdraw consent where processing is based on consent
• Object to processing or request deletion where we no longer have a lawful reason to keep your data
• Lodge a complaint with the UK Information Commissioner’s Office (ICO)
We may ask for additional information to verify your identity before responding. Requests are usually handled within one month.
You can contact us at any time to exercise these rights.
LEGAL BASIS FOR PROCESSING DATA
We only process personal data where the law allows us to. This includes:
• Where it is necessary to fulfil a contract with you, such as processing and delivering an order
• Where we must comply with a legal obligation
• Where it is necessary for our legitimate business interests and does not override your rights
Our legitimate interests include running our business, improving our website, preventing fraud, understanding how customers use our services, and communicating relevant information.
WHAT DATA WE COLLECT
We collect data in the following ways:
Data you provide
When you place an order, contact us, or sign up for emails or messages, you may provide personal data such as your name, address, email, phone number, and location.
Technical data
When you use our website, we automatically collect technical data such as device type, browser, IP address, location data, and usage information. This data is collected through tools like Google Analytics and Shopify and is used to understand how our website is used.
We do not use this data to personally identify you.
HOW WE USE YOUR DATA
We use your data to:
• Process and fulfil orders
• Take payment and obtain payment authorisation
• Communicate with you about orders or enquiries
• Manage returns and customer support
• Send marketing emails or messages where you have opted in
• Improve our website, products, and services
• Meet legal and regulatory obligations
We do not store payment card details. Payments are handled securely by trusted third-party providers such as Shopify Payments and PayPal.
SHARING YOUR DATA
We do not sell your personal data.
We may share data with trusted third parties, including:
• Our fulfilment and shipping partners
• Payment providers
• Analytics and marketing platforms such as Google Analytics and Klaviyo
We may also disclose data if required by law, legal process, or to protect our rights, customers, or business.
If GALA is sold or merged, customer data may be transferred as part of that process.
DATA STORAGE AND TRANSFERS
Your data is stored securely using industry-standard safeguards.
Some of our service providers operate outside the UK or EEA. Where data is transferred internationally, appropriate legal protections are in place to ensure your data remains protected to GDPR standards.
Order records are retained for up to six years to meet legal and accounting requirements, after which they are anonymised or deleted.
Technical analytics data may be retained longer but is not used to identify individuals.
DATA SECURITY
We take reasonable technical and organisational measures to protect your data.
While we do our best to keep your information secure, no online transmission is completely risk-free. Any data you send to us is at your own risk.
THIRD-PARTY WEBSITES
Our website may include links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before sharing any personal data.
COOKIES
We use cookies to improve your browsing experience, enable website functionality, analyse site usage, and process orders.
Cookies help us remember preferences and understand how visitors use our site. You can manage or disable cookies through your browser settings, though this may affect how the site functions.
Third parties such as Shopify, PayPal, and Google Analytics also use cookies when you use our site.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Any changes will be posted on this page. Continued use of the website after changes are made indicates acceptance of the updated policy.
CONTACT
If you have any questions about this Privacy Policy or how we use your data, please contact: