1. Introduction

Galonia ("we," "us," "our," or "Company") operates the galonia.be website. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Data We Collect

We collect the following types of personal data:

Contact Information: Name, email address, phone number
Shipping Information: Address, postal code, city
Payment Information: Processed securely by Stripe (we do not store credit card details)
Usage Data: IP address, browser type, pages visited (only with consent)
Cookies: Session cookies for cart and preferences (non-tracking)

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

Contract: Processing necessary to fulfill your order and provide our service
Consent: For marketing emails and analytics (you can withdraw consent anytime)
Legal Obligation: To comply with tax and accounting regulations
Legitimate Interest: To improve our website and prevent fraud

4. Cookies & Tracking

Essential Cookies (No Consent Required):

Shopping cart functionality
Session management
Security and fraud prevention

Optional Cookies & Trackers (Requires Your Consent):

Google Analytics (for website usage statistics)
Stripe Analytics (for payment tracking)
Marketing cookies (for improving our ads)

You can manage your cookie preferences at any time through the cookie banner at the bottom of the page.

5. Data Retention

We retain your personal data only as long as necessary:

Order Data: 5 years (for tax and accounting purposes)
Email Communications: Until you unsubscribe
Marketing Cookies: 12 months
Analytics Data: 12 months

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Opt-out of marketing communications
Right to Withdraw Consent: Withdraw cookie consent at any time

To exercise any of these rights, please contact us at: contact@galonia.be

7. Third-Party Service Providers

We share your data with the following trusted partners:

Stripe: Payment processing (GDPR compliant, EU servers)
Resend: Email service (GDPR compliant)
Google Places: Address autocomplete (GDPR compliant)

All service providers are GDPR compliant and bound by data protection agreements.

8. International Transfers

Your data is primarily stored in the EU. If transferred outside the EU, we ensure appropriate safeguards including Standard Contractual Clauses.

9. Security

We implement industry-standard security measures to protect your data:

SSL/TLS encryption for all data transmission
Secure payment processing via Stripe
Regular security updates and monitoring
Access controls and authentication

10. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we become aware of this, we will delete the data immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: contact@galonia.be
Address: Chemin du Pont d'Ancre, 151, 7860 Lessines, Belgium

Privacy Policy