Last updated: May 15, 2026

1. Data Controller

GALAYA is responsible for processing personal data collected on galayaofficiel.com.
Contact: contactgalaya@gmail.com
Address: 44 Rue de Sablonville, 92200 Neuilly-sur-Seine, France

2. Data Collected

We collect the following data:

• Identity: first name, last name
• Contact: email address, phone, postal address
• Order: products ordered, amounts, purchase history
• Payment: managed by Shopify Payments — we do not store any banking data
• Navigation: IP address, browser type, pages visited (via cookies, see Cookie Policy)

3. Purposes

Your data is used for:

• Processing your orders and ensuring delivery
• Sending you order confirmations and tracking updates
• Responding to your requests (customer support)
• Sending you our newsletter (only with your consent)
• Improving our site and services
• Complying with our legal and accounting obligations

4. Legal Basis

• Contract performance: order processing, delivery, after-sales service
• Consent: newsletter, non-essential cookies
• Legitimate interest: anonymized statistical analysis, fraud prevention
• Legal obligation: invoicing, accounting

5. Retention Period

• Order data: 10 years (accounting obligation)
• Customer account data: until account deletion
• Newsletter: until unsubscription
• Cookies: 13 months maximum

6. Recipients

Your data is transmitted only to:

• Shopify (hosting, order processing)
• The carrier responsible for delivery
• Our payment provider (Shopify Payments)
• Tax administration (upon request)

7. Transfers Outside EU

Certain providers (Shopify) process data outside the EU, under contractual guarantees compliant with the GDPR (standard contractual clauses).

8. Your Rights

In accordance with the GDPR, you have the following rights:

• Access: know what data is held about you
• Rectification: correct inaccurate data
• Erasure: delete your data
• Restriction: restrict certain processing activities
• Objection: refuse certain processing activities (especially marketing)
• Portability: retrieve your data in a standard format

To exercise these rights, contact: contactgalaya@gmail.com.
You can also lodge a complaint with the CNIL (www.cnil.fr).

9. Security

We implement appropriate technical and organizational measures to protect your data (TLS encryption, restricted access, backups).