Privacy policy
GAL & Co. Privacy Policy
Last updated: May 24, 2026
GAL & Co. operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience. This Privacy Policy describes how GAL & Co. collects, uses, discloses, and protects personal information when you visit or use our website, make a purchase, communicate with us, or otherwise interact with our services.
GAL & Co. is powered by Shopify, which enables us to provide our online store, checkout, payment processing, and related e-commerce services. Information submitted through our store may be processed by Shopify and other service providers as described in this Privacy Policy.
Please read this Privacy Policy carefully. By using or accessing our website or services, you acknowledge that you have read and understood how we collect, use, and disclose personal information as described in this Privacy Policy. If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy controls with respect to the collection, use, processing, and disclosure of your personal information.
Personal Information We Collect or Process
When we use the term personal information, we mean information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to you.
Depending on how you interact with GAL & Co., where you live, and what services you use, we may collect or process the following categories of personal information.
We may collect contact details, including your name, billing address, shipping address, phone number, and email address.
We may collect order and transaction information, including products you view, add to your cart, add to a wishlist, purchase, return, exchange, or cancel; order history; transaction details; shipping information; and customer-service records.
We may collect payment-related information, including payment method, payment confirmation, billing details, and other information needed to process a transaction. Payment information may be processed by Shopify, payment processors, and related service providers.
We may collect account information, including your username, password, account preferences, saved addresses, order history, and account settings, if you create an account.
We may collect communications with us, including information you provide when contacting us by email, form, social media, customer support inquiry, or other communication method.
We may collect device and usage information, including IP address, browser type, device type, operating system, network information, unique identifiers, pages viewed, links clicked, cart activity, and other information about how you interact with our website.
We may collect marketing and preference information, including email subscription status, marketing preferences, product interests, abandoned-cart activity, advertising interactions, and communication preferences.
We may collect personalization and gift information, including information you provide for personalized jewelry, custom orders, sizing, engraving, gift messages, gift-recipient details, or other order-specific requests.
We do not intentionally collect sensitive personal information unless it is necessary for a specific transaction, required by law, or voluntarily provided by you for a particular purpose. Please do not send us sensitive personal information through unsecured channels.
Sources of Personal Information
We may collect personal information directly from you, automatically through our website, from Shopify and other service providers, from business and marketing partners, and from third parties that you direct or authorize.
For example, we may collect personal information when you place an order, create an account, contact us, request a return, subscribe to emails, provide personalization details, or otherwise share information with us. We may also collect information automatically when you visit or use our website, including through cookies, pixels, tags, analytics tools, and similar technologies.
We may receive personal information from Shopify, payment processors, shipping providers, analytics tools, marketing platforms, review apps, returns tools, or other service providers that support our store operations.
How We Use Your Personal Information
We use personal information for legitimate business purposes, to provide our services, to fulfill orders, to communicate with you, and as otherwise permitted or required by applicable law.
We use personal information to provide and fulfill orders, including to process payments, confirm orders, fulfill purchases, arrange shipping, provide order updates, manage returns or exchanges, and deliver customer support.
We may use personal information to personalize and improve the shopping experience, including to remember preferences, maintain carts, recommend products, improve our website, understand customer interests, and create a more relevant shopping experience.
We may use personal information to process custom, personalized, or gift orders, including personalization details, sizing information, engraving instructions, gift messages, and recipient details needed to fulfill the order or provide related customer service.
We use personal information to communicate with you, including to respond to inquiries, provide customer support, send transactional messages, confirm orders, process return requests, and maintain our business relationship with you.
We may use personal information for marketing and advertising, including to send promotional emails, display advertisements, measure marketing performance, support abandoned-cart reminders, and show products or offers that may be relevant to you.
If we offer text-message updates or SMS marketing and you choose to opt in, we may use your phone number to send transactional or promotional text messages. You may opt out according to the instructions provided in those messages.
We use personal information for security and fraud prevention, including to help authenticate accounts, detect and prevent fraud, protect our store, secure transactions, investigate suspicious activity, and enforce our policies.
We may use personal information for legal and compliance purposes, including to comply with applicable laws, respond to lawful requests, enforce our terms or policies, resolve disputes, participate in legal proceedings, or protect our rights and the rights of others.
Third-Party Apps, Analytics, and Advertising Tools
We may use third-party apps, platforms, and service providers to support our store operations, including payment processing, order fulfillment, shipping, customer service, email marketing, SMS communications, analytics, advertising, fraud prevention, customer reviews, personalization, returns management, and website functionality.
These providers may collect or process personal information as necessary to provide services to GAL & Co. or as described in their own privacy notices. Depending on the tools enabled on our store, these providers may include Shopify, payment processors, shipping carriers, email marketing platforms, advertising platforms, analytics providers, social media platforms, customer review providers, returns tools, and other e-commerce apps.
If GAL & Co. uses advertising pixels, analytics tools, or marketing platforms such as Meta, Google, Pinterest, TikTok, Klaviyo, Mailchimp, or similar providers, those tools may collect information about your activity on our website to help us measure performance, personalize marketing, or show relevant advertisements. You can manage certain privacy choices through your browser settings, device settings, cookie preferences, unsubscribe links, and any privacy controls made available on our website.
Cookies and Similar Technologies
Our website may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate the store, remember preferences, support checkout, analyze traffic, measure advertising, prevent fraud, and improve the shopping experience.
Some cookies are necessary for our website and checkout to function. Others may be used for analytics, personalization, marketing, or advertising. Depending on where you reside and the settings available on our website, you may be able to manage certain cookie or privacy preferences through a cookie banner, privacy preferences link, browser settings, or device settings.
Please note that disabling certain cookies may affect website functionality, including cart, checkout, account, or personalization features.
How We Disclose Personal Information
We may disclose personal information to third parties for legitimate business purposes, to provide our services, to fulfill orders, or as otherwise permitted or required by law.
We may disclose personal information to Shopify to host and operate our online store, process transactions, provide checkout functionality, support store operations, and improve e-commerce services.
We may disclose personal information to payment processors to process payments, prevent fraud, verify transactions, and complete purchases.
We may disclose personal information to shipping and fulfillment providers to ship orders, provide tracking, manage delivery, and support returns or exchanges.
We may disclose personal information to service providers and vendors that provide IT support, analytics, cloud storage, customer support, fraud prevention, email marketing, SMS communications, reviews, returns management, and related business services.
We may disclose personal information to business and marketing partners to provide advertising, marketing, analytics, campaign measurement, and personalized advertising, where permitted by law.
We may disclose personal information to third parties you direct or authorize, including when you ask us to disclose information, use social media widgets, engage with third-party integrations, or otherwise consent to the disclosure.
Where applicable, we may disclose personal information to affiliates or corporate group members for internal business purposes consistent with this Privacy Policy.
We may disclose personal information to legal, regulatory, or business transaction recipients to comply with legal obligations, respond to lawful requests, enforce our policies, protect rights and safety, or in connection with a merger, acquisition, financing, bankruptcy, or sale of business assets.
Depending on where you reside, certain disclosures for targeted advertising or cross-context behavioral advertising may be considered a “sale,” “sharing,” or targeted advertising under applicable privacy laws. Where required, we provide options to opt out of these uses.
Relationship with Shopify
Our store is hosted and powered by Shopify. Shopify collects and processes personal information about your access to and use of our store in order to provide, support, secure, and improve the services that allow us to operate our online store.
Information you submit to GAL & Co. through our store may be transmitted to and shared with Shopify and other third parties that may be located in countries other than where you reside. Shopify may process personal information as a service provider to GAL & Co. and, in some circumstances, may independently process personal information in connection with Shopify services, enhanced features, analytics, fraud prevention, network intelligence, or other features made available through Shopify.
To learn more about how Shopify uses personal information and the privacy choices that may be available to you, please visit Shopify’s Consumer Privacy Policy.
Targeted Advertising and Privacy Choices
We may use personal information for marketing and advertising, including to show you advertisements for GAL & Co. products or services on our website, on other websites, or through social media and advertising platforms. This may include advertising based on products you viewed, purchased, added to your cart, or otherwise interacted with on our website.
Depending on where you reside, you may have the right to opt out of certain targeted advertising, sale, sharing, or processing of personal information for targeted advertising purposes. You may exercise these rights through our privacy choices or data-sharing opt-out page, where available, or by contacting us at april@galandco.com.
If our website recognizes the Global Privacy Control signal and applicable law requires us to honor it, we will treat that signal as a request to opt out for the browser or device that sends it. If we are able to associate the browser or device with your account, we may apply the request to the account as required or permitted by law. Other than Global Privacy Control, we do not generally recognize “Do Not Track” signals that may be sent by some browsers.
Managing Communications Preferences
If you subscribe to our promotional emails, you may opt out at any time by using the unsubscribe link included in our emails or by contacting us at april@galandco.com. If you opt out of promotional emails, we may still send non-promotional messages, such as order confirmations, shipping updates, customer-service responses, return communications, account notices, or other transactional messages.
If we offer SMS or text-message marketing and you have opted in, you may opt out by following the instructions included in the text messages or by contacting us. Standard message and data rates may apply depending on your mobile carrier and plan.
Third-Party Websites and Links
Our website may contain links to websites, platforms, social media pages, or other online services operated by third parties. If you follow links to websites or platforms that are not affiliated with or controlled by GAL & Co., you should review their privacy policies, security practices, and terms of use.
We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms. Information you post or share on public or semi-public areas, including social media platforms, may be visible to others and may be used by third parties according to their own policies and practices.
Children’s Data
Our website and services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you are a parent or guardian and believe that a child has provided us with personal information, please contact us at april@galandco.com so that we can review and delete the information as appropriate.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.
Security and Retention of Personal Information
We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no security measure is perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not send sensitive or confidential information to us through unsecured channels.
We retain personal information for as long as reasonably necessary to provide our services, fulfill orders, maintain accounts, provide customer support, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, maintain business records, and carry out the purposes described in this Privacy Policy.
When personal information is no longer needed for the purposes described in this Privacy Policy, we may delete, de-identify, aggregate, or otherwise dispose of it in accordance with our business practices and applicable law.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to legal exceptions.
These rights may include the right to access or know personal information we maintain about you, the right to request deletion, the right to request correction of inaccurate information, the right to receive a portable copy of certain information, the right to opt out of certain sale, sharing, or targeted advertising activities, the right to limit certain uses of sensitive personal information where applicable, and the right not to be discriminated against for exercising available privacy rights.
You may exercise any applicable privacy rights by contacting us at april@galandco.com. We may need to verify your identity before processing your request, as permitted or required by law. Depending on applicable law, you may also designate an authorized agent to submit a request on your behalf. Before accepting a request from an authorized agent, we may require proof that you authorized the agent to act on your behalf and may ask you to verify your identity directly with us.
To learn more about Shopify’s privacy practices and privacy choices, please visit Shopify’s Consumer Privacy Policy.
Complaints and Appeals
If you have a complaint about how GAL & Co. handles personal information, please contact us at april@galandco.com. Depending on where you live, you may have the right to appeal a decision we make regarding a privacy request or to lodge a complaint with your local data protection authority or privacy regulator.
International Transfers
We are based in the United States, and our store is powered by Shopify and supported by service providers that may operate in the United States, Canada, and other countries. As a result, personal information may be transferred to, stored in, or processed in countries other than the country where you reside.
If personal information is transferred from the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with specific data-transfer requirements, we or our service providers may rely on recognized transfer mechanisms, such as adequacy decisions, standard contractual clauses, or other lawful mechanisms, where applicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, Shopify settings, third-party tools, legal requirements, or operational needs. When we update this Privacy Policy, we will revise the “Last updated” date above and provide additional notice where required by applicable law.
Contact Us
If you have questions about this Privacy Policy, our privacy practices, or your privacy rights, please contact us at:
GAL & Co.
Email: april@galandco.com
Mailing Address: 217 Gracecroft Ct, Havre de Grace, MD 21078, United States