Privacy policy

1. Introduction

Galonni ("we," "us," or "our"), a store operated by GoMerchantSolutions Limited (company number 17322088, registered in England and Wales), runs this e-commerce website and its related services (together, the "Platform"). We are committed to protecting your privacy and to handling your personal data responsibly.

By accessing or using the Platform, you agree to the terms set out in this Privacy Policy.

2. Information We Collect

We collect personal information that you give us directly, that is gathered automatically, or that reaches us through third parties, including but not limited to:

Contact and Identification Information: name, email address, telephone number, shipping and billing addresses.
Order and Payment Details: items bought or returned, transaction amounts, and payment references (complete payment data is handled securely by our payment processors).
Account Information: login credentials and preferences, where you have registered an account.
Customer Support Communications: messages and attachments exchanged with our team.
Technical Data: IP address, device information, browser type, operating system, pages viewed, cookies and tracking identifiers.

3. How We Collect Data

Directly from you: when you place an order, register an account, subscribe to our newsletter, or contact support.
Automatically: through cookies, pixels, and similar technologies while you use the Platform.
From service providers: including payment processors, shipping companies, marketing platforms, and analytics providers.

4. How We Use Your Information

We process your data for the following purposes:

Order fulfilment and customer service: to process purchases, deliver products, handle returns, and reply to enquiries.
Payment processing and fraud prevention: to take payments securely and guard against unauthorised transactions.
Platform improvement and analytics: to understand how the Platform is used and to improve our services.
Marketing and promotions: to send newsletters and offers, subject to your consent where this is required. You may opt out at any time.
Legal compliance: to meet our legal and tax obligations and to respond to lawful requests.

5. Cookies and Tracking

We use cookies and similar technologies to:

enable core site functions;
remember your preferences;
analyse site performance; and
deliver relevant marketing messages.

You can control or disable cookies through your browser settings, although doing so may affect some features of the Platform.

6. Sharing Your Information

We share personal data only where it is necessary, with:

Platform providers: Shopify, for hosting and order management.
Payment processors: for secure payment transactions.
Shipping and fulfilment partners: to deliver your orders.
Analytics and marketing services: to improve our services and communications.
Legal and professional advisers: where required.
Business transfers: in the event of a merger or sale.

We do not sell your personal data to third parties.

7. International Transfers

Where relevant, your data may be processed by service providers located outside the United States, including in the United Kingdom and the European Economic Area. We ensure that appropriate safeguards are in place to protect your information in line with applicable law.

8. Data Retention

We keep your personal data only for as long as it is needed for the purposes described above and to satisfy legal requirements:

Transaction records: up to 10 years.
Account data: for as long as your account remains active.
Support communications: up to 3 years after the matter is resolved.
Marketing preferences: until you opt out.

9. Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

access and obtain a copy of your personal data;
request that it be corrected or deleted;
restrict or object to its processing;
withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at contact@galonni.com. We may need to verify your identity first. We will respond within a reasonable period.

10. Children's Privacy

The Platform is not directed at individuals under 13 years of age, and we do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it.

11. Automated Decision-Making

We do not use automated decision-making that produces legal effects, or effects of similar significance, concerning you.

12. Shopify Platform

Our store runs on Shopify, which acts as our data processor. For details of how Shopify handles data, please consult their own Privacy Policy.

13. Updates to This Policy

We may revise this Privacy Policy from time to time. Any changes will be published on this page together with the date of the latest revision. Continued use of the Platform means you accept the updated policy.