Privacy Policy
Privacy Policy
Last Updated: April 15, 2026
GaffGaff Galleri (“we,” “us,” “our”) operates this website and online store, including all related content, features, tools, products, and services (the “Services”). We use Shopify to power our store. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or interact with us.
By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.
Personal Information We Collect
“Personal information” means information that identifies or can reasonably be linked to you. It does not include de-identified or aggregated data.
We may collect the following categories of personal information:
Contact Information
Name, billing address, shipping address, phone number, and email address.
Financial Information
Payment card details, transaction details, and other payment-related information.
Account Information
Username, password, preferences, and account settings.
Transaction Information
Products viewed, added to cart, wishlisted, purchased, returned, exchanged, or canceled, as well as your order history.
Communications
Messages or information you send us, including customer service inquiries.
Device Information
IP address, browser type, operating system, device identifiers, and network information.
Usage Information
Information about how you interact with the Services, including timestamps, page views, browsing behavior, and referral URLs.
How We Collect Personal Information
We collect personal information from the following sources:
Directly from You
When you create an account, make a purchase, contact us, or interact with our website.
Automatically Through the Services
Via cookies, pixels, tracking technologies, and through your device when you browse our website.
Service Providers
Including payment processors, analytics tools, fulfillment partners, and customer support platforms.
Third Parties and Partners
Such as advertising networks, social media platforms, and business partners.
How We Use Personal Information
We may use your personal information for the following purposes:
To Provide and Improve the Services
-
Process payments
-
Fulfill and ship your orders
-
Manage your account
-
Enable returns and exchanges
-
Remember your preferences
-
Recommend products
-
Improve website functionality and user experience
Marketing and Advertising
-
Send promotional emails, SMS messages, or mail
-
Show personalized advertising based on your browsing activity
You may opt out of marketing communications at any time.
Security and Fraud Prevention
-
Authenticate accounts
-
Detect, investigate, or prevent fraud or malicious activity
-
Maintain a secure shopping environment
Communication
-
Provide customer support
-
Respond to inquiries
-
Send important service and transactional updates (order status, account notices)
Legal and Compliance
-
Comply with applicable laws
-
Respond to legal requests
-
Enforce our Terms of Service
-
Protect our rights and users
How We Disclose Personal Information
We may disclose personal information to the following:
Shopify
To host our store, process payments, support analytics, and provide core e-commerce functionality.
Service Providers and Vendors
Such as:
-
Payment processors
-
Customer support platforms
-
Cloud storage services
-
IT and analytics providers
Fulfillment & Production Partners (Including Print-on-Demand Providers)
We share order details and shipping information with trusted fulfillment partners who produce and ship your orders on our behalf.
Business & Marketing Partners
To support advertising, analytics, and promotional activities. Their use of your information is governed by their own privacy policies.
When You Direct or Consent
Such as social media logins, sharing features, or integrated third-party services.
Corporate Transactions
In the event of a merger, sale, restructuring, or bankruptcy.
Legal Compliance
To comply with subpoenas, legal requests, or to protect our rights and users.
Relationship With Shopify
Shopify collects and processes personal information to enable and improve the Services. Shopify may process your data in various global locations.
To learn how Shopify uses personal information, visit the Shopify Consumer Privacy Policy.
To exercise Shopify-specific privacy rights, visit the Shopify Privacy Portal.
Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to:
-
Enable website functionality
-
Remember preferences
-
Analyze site performance
-
Support marketing and advertising
You can manage cookie preferences through your browser settings or applicable cookie banners where available.
Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy or security practices of those sites. Review their privacy policies before providing personal information.
Children’s Privacy
Our Services are not intended for children under the age of majority in your jurisdiction. We do not knowingly collect personal information from children under 16. If you believe a child has provided information, please contact us to request deletion.
Security and Retention
While we take appropriate security measures, no system is completely secure.
We retain personal information for as long as necessary to:
-
Maintain your account
-
Provide the Services
-
Meet legal obligations
-
Resolve disputes
Your Rights and Choices
Depending on your location, you may have rights including:
-
Right to Access / Know
-
Right to Delete
-
Right to Correct
-
Right to Data Portability
-
Right to Restrict or Object to Processing (EEA/UK)
-
Right to Withdraw Consent (where processing is based on consent)
You may also opt out of marketing communications at any time.
To submit a request, contact us using the details below. We may verify your identity as permitted by law.
Complaints
If you have concerns about our privacy practices, please contact us.
Depending on your location, you may also file a complaint with your local data protection authority.
International Data Transfers
We may transfer your personal information outside of your country. When transferring data from the EEA or UK, we use approved mechanisms such as Standard Contractual Clauses or rely on adequacy decisions where applicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last Updated” date.
Contact Us
If you have questions or wish to exercise privacy rights, contact us at: