Privacy policy

Last updated: 08/2026

1. Who we are and what this policy covers

Galware (“Galware,” “we,” “us,” or “our”) is the seller identified at checkout and in your order confirmation. We operate from Nashville, Tennessee. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit Galware.shop, buy from us, create or use an account, sign up for messages, contact us, submit a claim, or otherwise interact with us.

Galware is the business responsible for the personal information described in this policy unless another notice says otherwise. Contact us at hello@galware.shop, 615-806-7549, or 73 White Bridge Road, Suite 103-316, Nashville, TN 37205, United States.

2. Personal information we collect

Category	Examples
Identifiers and contact details	Name, email, phone number, billing and shipping address, account identifier, and IP address.
Order and transaction information	Products, sizes, colors, quantities, order history, discounts, delivery status, returns, refunds, and customer-service records.
Payment information	Payment method, billing status, and limited payment details made available by our payment providers. Full card numbers are handled by payment providers, not stored by Galware in ordinary operations.
Account and communication information	Login/account details, messages, product questions, newsletter choices, reviews, survey responses, and communications with us.
Device, network, and activity information	Browser, device, operating system, referring page, pages and products viewed, cart activity, cookie or similar identifiers, approximate location derived from IP address, and interaction data.
Fraud, security, and claim information	Risk signals, delivery evidence, claim descriptions, product and packaging photos or videos, return tracking, and records used to investigate suspected misuse or protect customers and Galware.
Preferences and inferences	Product interests, likely preferences, audience segments, and marketing engagement inferred from purchases or site activity.

We do not ask for government identification, biometric identifiers, precise geolocation, health information, or other highly sensitive information for ordinary purchases. Please do not send sensitive information we did not request. Claim evidence should show the product—not your face or identity documents—unless the law requires a different process.

3. Where information comes from

Directly from you, including at checkout, through an account, in a form, when you subscribe, or when you contact us.

Automatically from your browser or device through cookies, pixels, logs, local storage, and similar technologies.

From Shopify and providers that support checkout, payments, fraud prevention, shipping, analytics, advertising, email, forms, and customer service.

From carriers, payment networks, social platforms, marketing partners, and other parties when they are permitted to provide the information.

4. Why we use personal information

Purpose	Typical information / legal basis where required
Provide the store and fulfill orders	Contact, order, payment, delivery, and account information; necessary to perform our contract with you.
Customer service and claims	Order, communications, product evidence, and delivery records; contract performance and our legitimate interest in resolving problems fairly.
Personalize and improve Galware	Device, activity, purchase, and preference information; legitimate interests or consent where required.
Marketing	Contact details, consent records, purchase/activity information, and cookie identifiers; consent where required and otherwise our legitimate interest, subject to opt-out rights.
Analytics and advertising	Device, activity, cookie, and inferred information; consent where required and opt-out rights under applicable U.S. law.
Security, fraud prevention, and legal compliance	Account, payment, device, claim, and transaction information; legitimate interests and legal obligations.
Business administration	Records needed for accounting, taxes, audits, insurance, legal claims, and business transactions; legal obligations and legitimate interests.

Where we rely on legitimate interests, we consider whether our purpose is reasonably necessary and balanced against your rights. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

5. How we disclose personal information

We disclose personal information only as reasonably needed for the purposes above, including to:

Shopify, which hosts the store and supports checkout, commerce, analytics, fraud prevention, and related services.

Payment processors and payment methods selected at checkout.

Carriers, fulfillment and shipping providers, and suppliers involved in an order.

Providers of email, forms, hCaptcha or similar anti-abuse tools, analytics, advertising, customer support, cloud storage, security, and business operations.

Professional advisers, insurers, auditors, and authorities when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or establish or defend legal claims.

A buyer, successor, or financing source in a merger, sale, reorganization, or similar business transaction, subject to appropriate safeguards.

Other parties when you direct us or give consent.

We do not sell personal information for money. Some uses of analytics, advertising, or Shopify services may be treated as a “sale,” “sharing,” or targeted advertising under certain U.S. privacy laws even when no money changes hands. You may opt out as described in Section 9.

We do not knowingly sell or share personal information about children under 16, and we do not knowingly sell sensitive personal information.

6. Cookies and similar technologies

We and our providers may use cookies, pixels, tags, local storage, and similar technologies to keep the site working, remember choices, understand performance, prevent fraud, and—if enabled—measure or personalize advertising.

Strictly necessary technologies support checkout, security, account access, and requested features.

Functional and analytics technologies help remember choices and measure site use.

Advertising technologies may measure campaigns, build audiences, or support targeted advertising.

Use the cookie settings shown on the site to accept, reject, or change non-essential technologies where that control is required. Blocking some technologies may affect optional features. We honor legally recognized opt-out preference signals, including the Global Privacy Control, for the browser or device that sends the signal where applicable. We do not respond to legacy “Do Not Track” signals because there is no consistent industry standard for them.

7. Marketing communications

You can unsubscribe from marketing email through the link in each marketing message or by contacting us. We may still send non-promotional messages about an order, account, security issue, legal notice, or request. We keep a limited suppression record so we can honor an opt-out.

8. Retention

We keep personal information only as long as reasonably necessary for the purpose collected, including to fulfill orders, maintain business and tax records, resolve claims and chargebacks, enforce agreements, detect fraud, and comply with law. Retention depends on the record and may be extended by a legal hold. When information is no longer needed, we delete, de-identify, or securely dispose of it according to our retention schedule.

Order and financial records are generally retained for the period required for tax, accounting, warranty, and legal purposes.

Marketing contact information is kept until you unsubscribe or we stop the program, with a limited suppression record retained afterward.

Customer-service and claim evidence is kept long enough to resolve the matter, handle payment disputes, identify abuse, and meet legal obligations, then deleted or minimized.

Cookie and analytics records follow the duration stated in the cookie settings or the relevant provider configuration.

9. Your privacy choices and rights

Depending on where you live and whether a law applies to Galware, you may have rights to:

Know or access the personal information we process, including categories, sources, purposes, and recipients.

Correct inaccurate personal information.

Delete personal information, subject to legal exceptions.

Receive a portable copy of certain information.

Opt out of sale, sharing, targeted advertising, or certain profiling.

Limit certain uses or disclosures of sensitive personal information, where applicable.

Withdraw consent and object to or restrict certain processing, where applicable.

Appeal a denial of a privacy request where state law provides an appeal.

Not receive unlawful discrimination for exercising a privacy right.

Submit an access, correction, deletion, portability, restriction, objection, appeal, or authorized-agent request to hello@galware.shop with the subject “Privacy Request.” To opt out of sale/sharing/targeted advertising, use the “Your Privacy Choices” link in the site footer when available, send a Global Privacy Control signal, or email us.

We will verify a request using information already associated with your interactions and will ask only for information reasonably necessary to verify it. We will not ask for your account password or full payment-card number. An authorized agent must provide proof of authority, and we may ask you to confirm the request directly unless law provides otherwise. We respond within the time required by applicable law and explain any denial and appeal method.

10. U.S. state disclosures

During the preceding 12 months, Galware may have collected and disclosed the categories described in Sections 2 and 5 for the business and commercial purposes in Section 4. The categories correspond to identifiers; commercial information; internet or electronic activity; approximate geolocation; customer communications; and inferences. We do not use or disclose sensitive personal information to infer characteristics about you.

California residents may also request the categories and specific pieces of personal information collected, categories of sources, business or commercial purposes, and categories of third parties. Nevada residents may submit a verified request to opt out of a covered sale at the email above. Residents of other states with applicable consumer privacy laws may exercise the rights listed in Section 9. Galware does not currently offer a financial-incentive or loyalty program involving personal information; we will provide a separate notice before doing so.

We maintain de-identified information in de-identified form and do not attempt to re-identify it except as permitted to test whether de-identification measures work.

We do not use personal information to train a Galware-operated large language model, and we do not intentionally submit order, claim, or support information to a publicly shared AI service for model training. If an AI-assisted provider processes personal information for Galware, we use it only for the purposes described in this policy and apply service-provider or processor restrictions where required. We will update this policy before materially changing this practice.

11. International visitors and customers

Galware is based in the United States. If we make products available for delivery to your country, local privacy and consumer laws may apply in addition to this policy.

EEA, United Kingdom, and Switzerland

For processing subject to the GDPR, UK GDPR, or Swiss Federal Act on Data Protection, Galware acts as controller for the activities described here. Our legal bases are stated in Section 4. You may request access, correction, deletion, portability, restriction, or objection; withdraw consent; and complain to your local supervisory authority. Where required, transfers from your country to the United States or another country use an approved transfer mechanism, such as an adequacy decision or standard contractual clauses. International sales into these markets are enabled only after Galware completes the applicable representative, cookie-consent, transfer, consumer-rights, and product-safety requirements.

Canada

You may request access to and correction of your personal information, withdraw consent subject to legal limits, and challenge our compliance by contacting us. Galware’s privacy contact is accountable for Canadian privacy inquiries. Marketing messages to Canada are sent only on a lawful consent basis and include identification and unsubscribe information.

Australia and New Zealand

Where Australian or New Zealand privacy law applies, you may request access or correction and complain to us. We use reasonable safeguards and address qualifying privacy breaches as required. For New Zealand activities, our privacy contact performs the privacy-officer function. Overseas disclosures are handled using the protections required by applicable law.

Brazil

Where Brazil’s LGPD applies, you may request confirmation, access, correction, anonymization, blocking or deletion where applicable, portability, information about sharing, review of certain automated decisions, and withdrawal of consent. Contact us using “LGPD Request” in the subject line. International sales to Brazil are enabled only after Galware completes the applicable Portuguese-language, local consumer, transfer, and privacy procedures.

12. Security

We use administrative, technical, and physical safeguards designed for the nature of the information and our business, including access controls, multi-factor authentication where available, vendor controls, software updates, backups, and incident-response procedures. No system is perfectly secure, and we cannot guarantee absolute security. If you believe your interaction with Galware is no longer secure, contact us promptly.

13. Children

The site is a general-audience store and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 without legally valid parental consent. If you believe a child has provided information, contact us so we can review and delete it as required.

14. Third-party sites and services

Links, social platforms, payment methods, and third-party services have their own privacy practices. This policy does not control information processed independently by those parties. Review their notices before providing information.

15. Changes and contact

We may update this policy to reflect legal, technical, or business changes. We will post the updated date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Privacy questions or requests: hello@galware.shop | 615-806-7549 | 73 White Bridge Road, Suite 103-316, Nashville, TN 37205, United States