Privacy Policy
Effective Date: June 18, 2026
At Gallerixes ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website gallerixes.com.
1. Who We Are
- Operator: [Your Full Name] (operating as Gallerixes)
- Base of Operation: Registered in the Netherlands
- Contact Email: support@gallerixes.com
We are the data controller under GDPR (EU/UK).
2. Personal Information We Collect
Information You Provide
Account: Email address, name, password (encrypted).
Purchase: Billing name, country, email, purchase history.
Support: Messages and information you provide.
Automatically Collected
IP address, browser type, pages visited, actions on the Site. We use session and analytics cookies.
Payment
We use Stripe as our payment processor. We do not store your credit card numbers. Payment data is processed by Stripe under PCI-DSS standards.
3. Legal Basis for Processing (GDPR)
| Processing Activity | Legal Basis |
|---|---|
| Order fulfillment, delivery | Art. 6(1)(b) — Contract |
| Account management | Art. 6(1)(b) — Contract |
| Site improvement, security | Art. 6(1)(f) — Legitimate interests |
| Marketing emails (opt-in) | Art. 6(1)(a) — Consent |
4. How We Use Your Information
We use your information to fulfill orders, manage your account, provide customer support, maintain transaction records, improve our Site, and prevent fraud. Marketing emails are only sent with your explicit opt-in. You may unsubscribe at any time.
5. Data Sharing and Disclosure
We share your data only with service providers necessary to operate our business:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| Google Analytics | Website analytics |
| Email Service | Order confirmations |
| Cloud Hosting | Website hosting and file storage |
6. International Data Transfers
Your data may be processed in the US (Stripe, Google) and EU. For EEA transfers, we use Standard Contractual Clauses (SCCs).
8. Data Retention
| Data Type | Retention |
|---|---|
| Account information | Account duration + 30 days |
| Transaction records | 10 years (tax law) |
| Analytics (aggregated) | 26 months |
9. Your Privacy Rights
GDPR Rights (EU/UK/Swiss):
- Right of Access, Rectification, Erasure
- Right to Data Portability, Object
- Right to Withdraw Consent
- Right to Lodge a Complaint with your DPA
CCPA Rights (California):
- Right to Know, Delete, Opt-Out of Sale
- We do not sell your personal information
To exercise your rights, email support@gallerixes.com. Response: 30 days (GDPR), 45 days (CCPA).
10. Data Security
- TLS/SSL encryption for data in transit
- Access controls on need-to-know basis
- Password hashing (industry-standard)
- Payment via Stripe (PCI-DSS Level 1 certified)
11. Children's Privacy
Our Site is not directed to children under 16. We do not knowingly collect data from children. Contact us immediately if you believe we have.
12. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies.
13. Your Choices
- Access and update account information via your account settings
- Unsubscribe from marketing emails at any time
- Manage cookie preferences via our consent banner
- Request account deletion by contacting support
14. Changes to This Policy
We may update this Privacy Policy. We will update the date above and notify users of material changes. Continued use constitutes acceptance.
Contact Us
Questions about this Privacy Policy? Contact us at support@gallerixes.com.
© 2026 Gallerixes. Digital Reproductions of public domain artworks are free of copyright restrictions as described herein.
