Privacy policy

Privacy Policy

1. Data Controller Identity

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), and other applicable privacy laws, users are informed that any personal data collected through this website will be processed by:

2. Purpose of Data Processing

The personal data collected through this website may be used for the following purposes:

  • To manage orders, payments, and deliveries.

  • To respond to inquiries, complaints, or requests.

  • To send promotional and commercial communications (only if prior consent is given).

  • To improve your experience on the website.

3. Legal Basis for Processing

The processing of your personal data is based on:

  • The performance of a contract (for processing orders and providing services).

  • Your explicit consent (for marketing communications).

  • Our legitimate interest in improving services and customer support.

4. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with legal obligations, or until you request its deletion.

5. Data Sharing

Your personal data will not be shared with third parties unless legally required or necessary to provide our services (e.g., shipping companies, payment platforms such as Shopify Payments, PayPal, etc.).

6. International Data Transfers

Our website may use tools or services provided by third parties located outside the European Economic Area (EEA), including Shopify Inc. in Canada or the U.S. In such cases, appropriate safeguards (such as Standard Contractual Clauses) are in place to ensure an adequate level of data protection.

7. User Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to or restrict data processing

  • Request data portability

To exercise your rights, please send a written request along with proof of identity to: admin@thegalobart.com

For California Residents (CCPA):

You have the right to know what personal data is collected, request deletion of your data, and opt out of the sale of your personal information. We do not sell personal data.

8. Data Security

TGB, S.L. applies appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized access, loss, or alteration.

9. Changes to This Privacy Policy

TGB, S.L. reserves the right to update this Privacy Policy at any time in order to reflect legal changes or improvements to our services. We recommend reviewing this policy periodically.