Privacy Policy

Last updated: 27 July 2026

This store and website are operated by Lílian Juliana Mendes de Castro, trading as Galvinas. Throughout this Privacy Policy, “Galvinas”, “we”, “us” and “our” refer to Lílian Juliana Mendes de Castro, trading as Galvinas.

Galvinas operates this store and website, including all related information, content, features, tools, products and services, in order to provide customers with a curated shopping experience (the “Services”). The Services are powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, store and otherwise process your personal information when you visit, use or make a purchase or other transaction through the Services, or otherwise communicate with us.

If there is a conflict between our Terms & Conditions and this Privacy Policy, this Privacy Policy will apply in relation to the collection, use, processing and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood how your personal information is collected, used, processed and disclosed.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies, relates to or can reasonably be linked to you or another individual. Personal information does not include information that has been anonymised or de-identified so that it cannot reasonably be associated with an identifiable individual.

Depending on how you interact with the Services, where you live and what is permitted or required by applicable law, we may collect or process the following categories of personal information:

Contact information, including your name, billing address, delivery address, telephone number and email address.
Payment and financial information, including transaction details, payment confirmations and payment-related information processed by Shopify, PayPal or other authorised payment providers. We do not ordinarily store your complete payment card details ourselves.
Account information, including your username, password, preferences and account settings, where customer accounts are available.
Transaction information, including products you view, add to your basket or wish list, purchase, return, exchange or cancel, together with your order and transaction history.
Communications, including information you provide when contacting customer support or otherwise communicating with us.
Device and technical information, including information about your device, browser, IP address, operating system, network connection and other online identifiers.
Usage information, including information about how and when you interact with or navigate the Services.
Marketing preferences, including your choices regarding promotional communications, cookies and personalised advertising.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, such as when you create an account, place an order, contact us, subscribe to marketing communications or otherwise provide personal information.
Automatically, through your use of the Services, including by means of cookies, pixels and similar technologies.
From service providers, when they collect or process personal information on our behalf, including Shopify, payment processors, delivery providers and marketing platforms.
From partners or other third parties, where permitted by law.

How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing and improving the Services, including processing orders and payments, managing accounts, arranging delivery, facilitating returns and refunds, remembering preferences and improving the shopping experience.
Marketing and advertising, including sending promotional communications and displaying advertisements based on your interactions with the Services, where permitted by law and, where required, with your consent.
Security and fraud prevention, including authenticating accounts, securing payments, detecting fraudulent, abusive or unlawful activity and protecting users and the Services.
Communicating with you, including providing customer support, sending transactional messages and responding to enquiries or complaints.
Legal and compliance purposes, including complying with applicable laws, responding to lawful requests, maintaining accounting and tax records, enforcing our terms and policies and protecting our legal rights.

Lawful Bases for Processing

Depending on the purpose for which we use your personal information, we rely on one or more of the following lawful bases:

Performance of a contract, where processing is necessary to process and fulfil your order, take payment, arrange delivery, provide customer support or manage returns and refunds.
Compliance with legal obligations, including obligations relating to tax, accounting, fraud prevention, consumer protection and lawful requests from public authorities.
Legitimate interests, including operating and improving our business, protecting the security of the Services, preventing fraud, understanding how customers use the website and protecting our legal rights, provided that those interests are not overridden by your rights and freedoms.
Consent, where required for marketing communications, advertising cookies and similar technologies. You may withdraw your consent at any time.

How We Disclose Personal Information

We may disclose personal information in the following circumstances:

To Shopify, service providers and vendors that perform services on our behalf, such as payment processing, hosting, analytics, customer support, order fulfilment, marketing and delivery.
To payment providers, including PayPal or other authorised providers, in order to process and secure payments.
To delivery and fulfilment providers where necessary to prepare, dispatch and deliver your order.
To marketing and advertising partners, subject to your rights, preferences and applicable law.
Where you direct or consent to the disclosure, including when using third-party integrations.
In connection with a business transaction, such as a merger, sale, restructuring or insolvency, subject to applicable law.
Where required to comply with legal obligations, lawful requests, court orders, enforceable regulatory requirements or to protect rights, property and safety.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information in order to provide and improve the Services. Information submitted through the Services may be shared with Shopify and with service providers located in other countries.

Shopify may process certain personal information for its own purposes in connection with enhanced features or services. In those circumstances, Shopify may be responsible for responding to requests relating to those specific uses. Further information is available in the Shopify Consumer Privacy Policy .

Cookies and Similar Technologies

We and our service providers may use cookies, pixels and similar technologies to operate the website, remember your preferences, measure website performance, understand how the Services are used and, where you have provided consent, personalise advertising.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential analytics, advertising and personalisation technologies will be used only where the required consent has been obtained.

You can manage your preferences through the cookie settings available on our website. You may also be able to control cookies through your browser settings. Disabling certain cookies may affect the operation of some parts of the Services.

Direct Marketing

Where permitted by law, we may send you marketing communications about products, offers and updates. Where consent is required, we will send such communications only after receiving your consent.

You may unsubscribe at any time by using the unsubscribe link included in a marketing email or by contacting us. Unsubscribing from marketing communications will not prevent us from sending essential transactional or service-related messages about an order or account.

Third-Party Websites and Links

The Services may contain links to third-party websites or platforms. We are not responsible for the privacy, security or content practices of those third parties. We encourage you to review their privacy policies before providing personal information.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children or from individuals who are not legally able to enter into a purchase contract in their jurisdiction.

If you believe that a child has provided personal information to us without the required consent, please contact us so that we can review and, where appropriate, delete the information.

Security of Your Information

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Retention of Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. The applicable retention period depends on the nature of the information, the reason it was collected, our contractual requirements and any applicable legal, accounting, tax, fraud-prevention or reporting obligations.

Order, payment and accounting records may be retained for the period required by applicable tax, accounting and legal obligations. Customer service correspondence may be retained for as long as reasonably necessary to resolve enquiries, complaints, disputes or legal claims.

Marketing information is retained until you withdraw your consent, unsubscribe or ask us to stop using it, unless we are legally required to retain a limited record of your request.

Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including:

The right to access your personal information.
The right to correct inaccurate or incomplete information.
The right to request deletion of personal information.
The right to data portability.
The right to object to or restrict processing.
The right to withdraw consent, where processing is based on consent.
The right to object to direct marketing.
The right to request information about safeguards used for certain international transfers.
Rights relating to automated decision-making, where applicable.

You may exercise these rights by contacting us using the details set out below. We may need to verify your identity before fulfilling a request. Certain rights may be subject to limitations or exemptions under applicable law.

Complaints

If you have concerns about how we process your personal information, please contact us first so that we can try to resolve the matter.

If you are located in the United Kingdom, you may also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You may also contact the relevant data protection authority in the country where you live, where applicable.

International Transfers

Your personal information may be transferred to, stored or processed in countries outside your country of residence, including Brazil and countries in which Shopify and our other service providers operate.

Where required by applicable data protection law, we use recognised safeguards for international transfers. These safeguards may include adequacy regulations, the United Kingdom International Data Transfer Agreement, the United Kingdom Addendum to the European Commission Standard Contractual Clauses or another lawful transfer mechanism.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal obligations or the Services. We will post the updated version on this website and revise the “Last updated” date where appropriate.

Contact

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the details below:

Data controller: Lílian Juliana Mendes de Castro
Trading name: Galvinas
Business address: Rua Coronel Pedro Augusto, 140, Centro, Curvelo, Minas Gerais, 35790-246, Brazil
Email: support@galvinas.com

For the purposes of applicable data protection laws, Lílian Juliana Mendes de Castro, trading as Galvinas, acts as the data controller of your personal information.