Privacy policy

Last updated: January 7, 2026

Culture Galaxy operates this website and online store. Through our website, we offer products and services to customers. Our store is powered by Shopify, which provides the e-commerce platform that allows us to sell products and process payments securely.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, place an order, or communicate with us. If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy applies to the processing of personal data.

By accessing or using our website, you confirm that you have read and understood this Privacy Policy.

Personal Information We Collect

Personal information is any information that can identify you directly or indirectly. We collect only the information necessary to operate our store, fulfill orders, and comply with legal obligations.

Depending on how you interact with our website, we may collect:

Your full name, billing address, shipping address, postal code, city and country
Email address and telephone number
Payment-related information such as payment method, transaction ID and payment status (we do not store full credit card details)
Account information, including login details and preferences
Order details, purchase history and product interactions
Customer service communications
Technical data such as IP address, browser type, device information
Website usage data such as pages viewed and interaction behavior

How We Collect Information

We collect personal data in the following ways:

When you provide information directly, such as placing an order or contacting us
Automatically through cookies and similar technologies when you use our website
Through Shopify and trusted service providers that support payments, fulfillment, analytics, and website functionality
Through marketing and analytics partners, where permitted by law

How We Use Your Personal Information

We process personal data only when we have a lawful basis under the GDPR, such as contractual necessity, legal obligation, legitimate interest, or your consent.

Your data is used to:

Process, produce, and deliver orders
Handle payments and prevent fraud
Provide customer service and respond to inquiries
Manage user accounts and order history
Improve website performance and user experience
Send transactional emails and order updates
Send marketing communications where consent has been given
Comply with legal, tax, and administrative obligations

Made-to-Order Production

Culture Galaxy operates on a made-to-order basis. Products are produced only after an order has been placed. Personal data is therefore processed to enable production, order fulfillment, and shipping.

Because products are custom-produced for each order, returns may be limited or excluded where legally permitted. Full details are provided in our Terms of Service.

Advertising & Analytics (Google Compliance)

We may use third-party services such as Google Analytics, Google Ads, and similar tools to understand website usage and improve marketing performance. These services may collect information such as IP address, device type, and browsing behavior.

Where required, we request your consent before enabling marketing or tracking cookies. You can manage cookie preferences at any time.

We do not sell personal data.

Sharing Personal Information

We share personal data only when necessary for our business operations or where required by law.

This includes sharing information with:

Shopify (hosting, checkout and store infrastructure)
Payment providers (e.g. iDEAL, credit card processors)
Shipping and fulfillment partners
Analytics, IT, and marketing service providers
Authorities where legally required

All partners process data in accordance with GDPR and applicable data protection agreements.

Shopify Platform Disclosure

Our store is hosted on Shopify. Shopify processes personal data to provide and improve its services. This may involve transferring data outside the European Economic Area. Shopify relies on approved safeguards such as Standard Contractual Clauses to protect personal data.

More information can be found in Shopify’s Privacy Policy.

Cookies

We use cookies and similar technologies to ensure proper website functionality, analyze performance, and support marketing activities. Where required by law, consent is requested before placing non-essential cookies.

You can change or withdraw cookie preferences at any time via your browser or our cookie banner.

Data Security and Retention

We take reasonable technical and organizational measures to protect personal data. No system is completely secure, but we actively work to prevent unauthorized access or misuse.

Personal data is retained only as long as necessary for the purposes described or as required by law.

Your Rights Under GDPR

If you are located in the EU or EEA, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of data
Restrict processing
Receive a copy of your data (data portability)
Object to processing
Withdraw consent at any time

Requests can be submitted using the contact details below. We respond within statutory time limits.

Complaints

If you believe your data is processed unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or business changes. The latest version is always available on our website.

Contact Information

Culture Galaxy
Energiestraat 23-05
7442 DA Nijverdal
The Netherlands

Email: skully@culture-galaxy.com

For GDPR purposes, Culture Galaxy is the data controller.