Privacy & Cookie Policy
Business name: Melinda Galeria (sole trader, UK)
Website: https://melindagaleria.com
Contact email: [email protected]
Business address: Lytchett House, 13 Freeland Park Wareham Road, Lytchett House, Poole, Dorset, England, BH16 6FA
1. Introduction
Melinda Galeria (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy & Cookie Policy explains:
- what personal data we collect,
- why we collect it,
- how we use it,
- who we share it with,
and your rights under applicable privacy laws (including UK GDPR and, where relevant, US privacy rules such as CCPA).
We sell print-on-demand products to customers in the USA & Canada. Orders are fulfilled by Printify and Printify’s printing partners (primarily located in the USA). Because we’re a UK-based business, UK data protection law (UK GDPR & Data Protection Act 2018) applies to how we handle data.
2. The personal data we collect
We collect and process different types of personal data depending on how you use the site and place orders:
When you place an order
- Full name
- Delivery address
- Email address
- Phone number
- Order details and purchase history
When you pay
- Payment card details are collected by the payment provider (e.g., Stripe, PayPal). We do not store full card numbers on our servers. We may receive transactional payment metadata (transaction ID, amount, billing name).
When you contact us / sign up
- Email address, name and any information you send in messages or newsletter signups.
Technical & usage data
- IP address, browser type and version, operating system, referring URLs, device identifiers, pages visited, and other analytics data.
Comments & user-generated content
- If you leave a comment or review we collect the information shown in the comment form, plus the IP address and browser user-agent string to help spam detection.
3. How we use your personal data (purposes & legal bases)
We use your data for the following purposes:
- To fulfil orders and provide products (contractual necessity): share name, address, phone and order details with Printify and their print partners so they can print and ship your order.
- To process payments (contractual/legitimate interest): forward payment data to our payment provider for authorisation and settlement.
- To communicate about orders & customer service (contractual/legitimate interest): send order confirmations, shipping updates, and respond to enquiries.
- To send marketing emails (consent, where given): if you opt in to newsletters/promotions, we will email you. You can unsubscribe at any time.
- To improve the site and for analytics (legitimate interest): using analytics tools to understand site performance and user behaviour.
- To comply with legal obligations (legal obligation): e.g., tax/record keeping, fraud prevention, responding to lawful requests.
- To detect and prevent fraud or abuse (legitimate interest).
4. Who we share your data with
We share personal data only as necessary to provide services:
- Printify and Printify’s print partners — to fulfil orders (shipping, printing). These partners may be located in the United States; international transfers are described below.
- Payment processors (e.g., Stripe, PayPal) — to take and process payments.
- Email and marketing providers (e.g., Mailchimp or similar) — if you subscribe to our newsletter.
- Analytics providers (e.g., Google Analytics) and advertising platforms (if you enable marketing cookies).
- Service providers we use for business operations (fraud detection, hosting, email delivery, customer support).
- Legal or regulatory authorities — if required by law or to protect our legal rights.
We do not sell your personal data for third-party marketing purposes.
5. International transfers
Some service providers we rely on (e.g., Printify, payment processors, cloud hosts) operate in countries outside the UK, including the United States. When we transfer personal data outside the UK we put appropriate safeguards in place (such as standard contractual clauses or relying on an adequacy decision where available) to ensure your data is protected.
6. Cookies & similar technologies
We use cookies and similar technologies to operate the site and improve your experience.
Cookie categories
- Essential cookies – required for basic site functionality (e.g., shopping cart, login). These do not require consent.
- Preferences cookies – remember choices you make (e.g., language, display preferences).
- Analytics cookies – help us understand how visitors use the site (e.g., Google Analytics). These require consent.
- Marketing cookies – used to deliver tailored advertising and track conversions (e.g., Facebook Pixel, advertising networks). These require consent.
Comment & login cookies
- If you leave a comment, we may offer to save your name, email and website in cookies for convenience — these last one year.
- Login/session cookies may be set when you log into the site.
Managing cookies
- You will be shown a cookie banner on your first visit asking for consent for non-essential cookies. You can change your choices at any time by clicking the cookie settings link in the footer [or via your browser settings].
- To completely block cookies, you can change your browser settings to refuse cookies — refer to your browser help pages for instructions.
- To opt out of Google Analytics tracking in your browser, you can install the Google Analytics Opt-Out Browser Add-on.
7. Data retention
We retain personal data only for as long as necessary:
- Order, billing and tax records: retained for legal/tax purposes (as required by law).
- Customer account information: retained while your account exists and for a reasonable period after to handle returns/disputes.
- Marketing data: until you unsubscribe or opt out.
- Comments and user content: may be retained indefinitely unless you request deletion.
If you want specific retention times changed or data deleted, see the “Your rights” section below.
8. Your rights
Under UK GDPR and other applicable laws you have rights in relation to your personal data, including:
- Access – request a copy of the personal data we hold about you.
- Rectification – ask us to correct inaccurate or incomplete data.
- Erasure – request deletion of your personal data (subject to legal exceptions).
- Restriction – ask to restrict processing in certain circumstances.
- Portability – request a machine-readable copy of your data.
- Object – object to processing based on our legitimate interests (including profiling/marketing).
- Withdraw consent – where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, contact us at: [email protected]
We will respond within the timeframes required by law.
If you are in California, you may also have additional rights under the California Consumer Privacy Act (CCPA/CPRA) — for example, rights to know categories of data collected and with whom it is shared, and to request deletion or opt out of sale. We do not “sell” personal data for third-party marketing, but if you believe otherwise please contact us and we’ll respond to your request.
You also have the right to lodge a complaint with a supervisory authority. In the UK, that is the Information Commissioner’s Office (ICO): https://ico.org.uk/
9. Security
We take reasonable steps to protect personal data from loss, misuse and unauthorised access, but no system is completely secure. Access to personal data is limited to staff and service providers who need it to perform their functions.
10. Children
Our website and services are not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us to request deletion.
11. Embedded content & third-party sites
Pages on this site may include embedded content (e.g., videos, social media, maps). Embedded content behaves as if you visited the third-party site directly — those services may collect data about you, use cookies, and track interactions. This policy does not cover how third parties use your data; please review their privacy policies.
12. Changes to this policy
We may update this Privacy & Cookie Policy from time to time. The “Last updated” date at the top shows the most recent revision. Significant changes will be notified on the site or by email where appropriate.
13. Contact & data controller
Data controller: Melinda Galeria (sole trader, UK)
Contact email: [email protected]
Address: Lytchett House, 13 Freeland Park Wareham Road, Lytchett House, Poole, Dorset, England, BH16 6FA
If you have questions about this policy or want to exercise your privacy rights, please contact us at the email above.
