Privacy Policy
Privacy Policy
Last updated: 13-03-2026
This Privacy Policy explains how Culture Galaxy, a trade name of Ecomventure OV B.V., collects, uses, stores, shares, and protects personal data when you visit, use, or make a purchase from www.culture-galaxy.com.
1. Who we are
This website is operated by:
Culture Galaxy
Trade name of Ecomventure OV B.V.
Elsenerstraat 30A, The Netherlands
Email: help@culture-galaxy.com
Chamber of Commerce (KvK): 94022224
VAT: NL866607547B01
Ecomventure OV B.V. is the data controller for the personal data processing described in this Privacy Policy.
2. Personal data we collect
We may collect personal data when you visit our website, place an order, contact us, subscribe to marketing, or otherwise interact with Culture Galaxy.
This may include:
- full name
- email address
- billing address
- shipping address
- phone number, if provided
- order details, including purchase, fulfilment, delivery, and return information
- payment-related information processed by our payment providers (we do not store full payment card details)
- IP address
- browser, device, and usage information
- cookie and tracking data, where applicable
- communications you send to us through email, contact forms, or customer support requests
3. Why we collect your data
We process personal data only where we have a valid legal basis under applicable data protection law, including the GDPR where relevant.
We may process your personal data for the following purposes:
- to process, confirm, and fulfil your order
- to arrange production, packaging, shipment, delivery, and returns
- to provide customer service and respond to questions or complaints
- to process payments and prevent fraud
- to comply with legal, tax, accounting, and regulatory obligations
- to send service messages such as order confirmations, shipping updates, and return communications
- to send marketing emails where you have given consent or where otherwise permitted by law
- to improve our website, store performance, products, and customer experience
- to measure the effectiveness of our advertising and marketing campaigns
- to provide personalised advertising where permitted and, where required, based on your consent preferences
Depending on the purpose, our legal bases may include performance of a contract, compliance with legal obligations, legitimate interests, and consent.
4. How we share personal data
We do not sell your personal data in exchange for money. We share personal data only where necessary to operate our business, provide our services, comply with legal obligations, or support permitted marketing and analytics activities.
We may share personal data with the following categories of recipients:
- Shopify, as our e-commerce platform and hosting provider
- payment providers, to process payments and help prevent fraud
- fulfilment, production, and logistics partners, including partners involved in producing, packing, shipping, tracking, and processing returns for your order
- shipping carriers and delivery providers, to transport and deliver your order
- email and customer support providers, to send order updates and respond to support requests
- analytics and advertising partners, where applicable and permitted by your consent choices
- professional advisers, authorities, or regulators, where required by law or necessary to protect our legal rights
Because our fulfilment operations may involve production, shipping, and return handling in the United States, personal data required to complete your order may be shared with fulfilment and logistics partners located in the United States.
Where required, we enter into appropriate contractual arrangements with service providers and require them to process personal data only for authorised purposes and in accordance with applicable law. Shopify also notes that merchants are responsible for ensuring their privacy disclosures accurately reflect their actual practices. :contentReference[oaicite:3]{index=3}
5. Cookies and similar technologies
We use cookies and similar technologies to operate our website, understand how visitors use our store, improve performance, remember preferences, and support advertising and analytics where permitted.
Cookies may be used to:
- enable essential website functions such as shopping cart and checkout
- measure traffic and website performance
- remember preferences and improve usability
- support marketing, analytics, and personalised advertising where permitted
You can manage your preferences through our cookie banner, customer privacy settings, or your browser settings, where available. Shopify provides customer privacy controls, but merchants must still ensure the content and settings reflect their actual data practices. :contentReference[oaicite:4]{index=4}
6. Your rights
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have the right to:
- access your personal data
- request correction of inaccurate data
- request deletion of your data in certain circumstances
- request restriction of processing in certain circumstances
- object to certain processing, including direct marketing
- withdraw consent at any time where processing is based on consent
- request data portability where applicable
- lodge a complaint with your local supervisory authority
If you are in the Netherlands, you may lodge a complaint with the Autoriteit Persoonsgegevens.
To exercise your rights, contact us at help@culture-galaxy.com. We may ask you for information to verify your identity before responding to your request.
7. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to fulfil orders, manage returns, provide customer support, comply with legal obligations, resolve disputes, and enforce our agreements.
This generally includes:
- order, fulfilment, shipping, and customer service records for as long as reasonably necessary to operate our business and support customers
- tax, invoice, and accounting records for the period required by applicable law
Under Dutch tax rules, core administrative records generally have to be kept for 7 years, and certain records may need to be retained longer in specific cases. :contentReference[oaicite:5]{index=5}
When personal data is no longer needed, we will delete it or anonymise it where appropriate.
8. Data security
We apply appropriate technical and organisational measures designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
These measures may include:
- encrypted connections where appropriate
- restricted access to personal data
- use of secure service providers and platforms
- internal procedures for handling customer information
No website or method of electronic transmission or storage is completely secure, but we take reasonable steps to protect the personal data we process.
9. International data transfers
Some of our service providers, fulfilment partners, and logistics providers may process personal data outside the European Economic Area, including in the United States.
Where personal data is transferred outside the EEA, we use appropriate safeguards where required by law, such as Standard Contractual Clauses or other lawful transfer mechanisms recognised under applicable data protection law. The European Commission provides these mechanisms for international data transfers under the GDPR. :contentReference[oaicite:6]{index=6}
10. Children
Our website and services are not intended for children under the age of 18, and we do not knowingly collect personal data from children.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, fulfilment operations, services, legal obligations, or privacy practices. Any updates will be posted on this page together with a revised “Last updated” date.
Your continued use of the website after an update means that the latest version applies, to the extent permitted by law.
12. Contact
If you have any questions about this Privacy Policy or about how we process personal data, please contact us at: