Veloce Gallery (velocegallery.com)
Effective Date: [10/20/2026]
Last Updated: [10/25/2026]
1. Introduction
This Privacy Policy explains how Galactic Global Network (“Veloce Gallery,” “we,” “us,” or “our“) collects, uses, shares, and protects personal information when you visit velocegallery.com, create an account, make a purchase, or otherwise use our services (the “Services“).
For the purposes of the EU and UK General Data Protection Regulation (“GDPR“), Galactic Global Network, [Company Address], is the data controller of your personal information. [If applicable: Our EU representative is [EU Representative Name and Address]; our UK representative is [UK Representative Name and Address]; our Data Protection Officer can be contacted at [DPO Email].]
2. Information We Collect
Information you give us
- Contact and identity data: name, email address, phone number, postal/billing/shipping address.
- Account data: username, password (stored in hashed form), profile details, and preferences.
- Transaction data: items or services purchased, order history, amounts, and payment confirmation. Card details are collected and processed directly by our payment providers ([Payment Processor(s)]); we receive only limited information such as the card type, last four digits, and expiry date.
- Communications: messages you send us, customer-support requests, survey responses, and reviews.
- User Content: any content you post or upload to the Services.
- Marketing preferences: whether you have opted in or out of marketing communications.
Information we collect automatically
- Device and usage data: IP address, browser type and version, operating system, device identifiers, pages viewed, links clicked, referring URLs, and the date and time of visits.
- Approximate location: derived from your IP address.
- Cookies and similar technologies: see our Cookie Policy.
Information from third parties
- Payment processors, shipping and fulfilment partners, fraud-prevention services, analytics providers, advertising partners, and social media platforms (for example, if you sign in with or interact with us through a social account), in each case as permitted by their terms and your settings.
3. How We Use Your Information
We use personal information to:
- provide, operate, and maintain the Services, including creating and managing your account;
- process and fulfil orders, payments, deliveries, returns, and refunds;
- communicate with you about orders, your account, security alerts, and policy changes;
- respond to your questions and provide customer support;
- send marketing communications where you have agreed or where the law otherwise permits (you can opt out at any time);
- personalize content and measure and improve the Services through analytics;
- detect, prevent, and investigate fraud, abuse, security incidents, and other harmful activity;
- comply with legal obligations, such as tax, accounting, and record-keeping requirements; and
- establish, exercise, or defend legal claims.
We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.
4. Legal Bases for Processing (EEA/UK Users)
Where GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the Services, managing accounts, processing orders | Performance of a contract |
| Customer support and service communications | Performance of a contract; legitimate interests |
| Marketing emails and non-essential cookies | Consent (which you can withdraw at any time) |
| Analytics, service improvement, security, and fraud prevention | Legitimate interests (operating and protecting our business), balanced against your rights |
| Tax, accounting, and legal compliance | Legal obligation |
| Legal claims | Legitimate interests |
5. How We Share Your Information
We do not sell your personal information for money. We share it only as follows:
- Service providers who act on our behalf, such as hosting ([Hosting Provider]), website platform ([Website Platform, e.g., WordPress]), payment processing ([Payment Processor(s)]), shipping and fulfilment, email and messaging ([Email/Messaging Provider]), customer support, analytics ([Analytics Provider]), and IT security. They may use your information only to provide services to us.
- Advertising and analytics partners, where you have consented where required (see Section 6 and the Cookie Policy).
- Professional advisers such as lawyers, accountants, and auditors.
- Authorities and others when required by law, court order, or legal process, or when needed to protect the rights, property, or safety of us, our users, or others.
- Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this Privacy Policy.
- With your consent or at your direction.
6. Cookies and Similar Technologies
We use cookies, pixels, and similar technologies to make the Services work, remember your preferences, understand how the Services are used, and (with your consent where required) for advertising. Details, including how to manage your choices, are in our Cookie Policy.
7. Data Retention
We keep personal information only as long as needed for the purposes described in this Policy, including to meet legal, tax, accounting, or reporting requirements. As a general guide:
- Account data: for as long as your account is active and up to [24] months afterwards;
- Order and transaction records: [7] years, or as required by tax and accounting laws;
- Marketing data: until you unsubscribe or withdraw consent, plus a short suppression record so we respect your choice;
- Support communications: [3] years after the matter is closed;
- Analytics data: up to [26] months.
When information is no longer needed, we delete or anonymize it securely.
8. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, such as encryption in transit (HTTPS/TLS), access controls, and working with reputable service providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a data breach affects your rights, we will notify you and the relevant authorities as required by law. Please keep your password confidential and contact us at Jonathan@galacticglobal.net if you think your account has been compromised.
9. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights:
- Access — to know what personal information we hold about you and receive a copy;
- Correction — to correct inaccurate or incomplete information;
- Deletion — to ask us to delete your information;
- Restriction — to ask us to limit how we use your information;
- Portability — to receive your information in a structured, machine-readable format;
- Objection — to object to processing based on legitimate interests, and to direct marketing at any time;
- Withdraw consent — at any time, without affecting earlier processing; and
- Complain — to your local data protection authority.
EEA/UK residents: you may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office). We would appreciate the chance to address your concerns first.
California residents (CCPA/CPRA): In the past 12 months we have collected the categories of personal information described in Section 2 (identifiers, customer records, commercial information, internet/network activity, approximate geolocation, and inferences), for the business purposes described in Section 3, and disclosed them to the categories of recipients in Section 5. You have the right to know, access, correct, and delete your personal information; to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising; to limit use of sensitive personal information (we do not use sensitive personal information for purposes that require this right); and not to be discriminated against for exercising your rights. We do not sell personal information for money. [If you use advertising cookies:] Our use of certain advertising cookies may be considered “sharing” under California law; you can opt out via the “Do Not Sell or Share My Personal Information” link [on our website] or by enabling a Global Privacy Control (GPC) signal in your browser, which we honor. You may use an authorized agent to submit a request on your behalf.
Other U.S. states: Residents of states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others) have similar rights, including the right to appeal our decision on a request by contacting us at Jonathan@galacticglobal.net with the subject line “Privacy Appeal.”
How to exercise your rights: email Jonathan@galacticglobal.net or write to us at [Company Address]. [Optional: or use our online form at [Privacy Request URL] / call [Toll-Free Number].] We will verify your identity before responding and will reply within the time required by law (generally 30 days under GDPR and 45 days under CCPA).
10. Children’s Privacy
The Services are not directed to children under [13] (or under [16] in the EEA/UK), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us at Jonathan@galacticglobal.net and we will delete it.
11. International Data Transfers
We are based in [Country] and our service providers may process information in other countries, including the United States, which may have different data protection laws from your country. When we transfer personal information from the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to recipients certified under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), as applicable. You can request more information about these safeguards by contacting us.
12. Third-Party Links
The Services may link to third-party websites or services. Their privacy practices are governed by their own policies, and we encourage you to read them.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last Updated” date. If changes are material, we will notify you by email or through the Services before they take effect.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your information, please contact:
Galactic Global Network
Attn: Privacy
Email: Jonathan@galacticglobal.net
[Data Protection Officer: [Jonathan A, Jonathan@velocegallery.com], if appointed]