Login

Cart

Your cart is empty

Privacy Policy

Last Updated: 15-10-2025

This Privacy Policy explains how Catherine Galway Boutique (“the Site”, “we”, “us”, “our”) collects, uses, and discloses personal information when you visit, interact with, or make a purchase on catherinegalway.com (the “Site”), or otherwise communicate with us regarding our services (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” refer to any user of the Services, including customers, website visitors, and any other individual whose information we process under this Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When updates occur, we will post the revised version on the Site, update the “Last Updated” date, and take any additional steps required under applicable law.

1. How We Collect and Use Personal Information

To provide our Services, we collect personal information from a variety of sources, as described below. The information we collect depends on your interaction with the Site.

In addition to the purposes specifically listed, we may use your information to communicate with you, support or improve the Services, comply with legal obligations, enforce our terms, or protect the Site, our rights, our users, or others.

2. Personal Information We Collect

A. Information You Provide Directly

Information you share with us may include:

  • Contact details: name, address, phone number, email.

  • Order details: billing and shipping information, payment confirmations, email, phone number.

  • Account details: login credentials, password, security questions.

  • Support interactions: any content submitted during communications with us.

Certain features require this data. If you do not provide it, some Services may not function.

B. Information Collected Automatically

We may automatically collect certain data related to your usage of the Site (“Usage Data”), including through cookies, pixels, and similar technologies. This may include IP address, browser and device information, access details, and interactions with the Site and Services.

C. Information Obtained from Third Parties

We may receive information from third parties, such as:

  • Shopify and other platforms supporting our Site

  • Payment processors

  • Advertising and analytics partners via pixels, tags, trackers, SDKs, cookies, etc.

All third-party data is processed under this Policy.

3. How We Use Personal Information

  • Service Delivery: to fulfill contracts, process payments, deliver orders, manage accounts, and operate the Site

  • Marketing: to send promotional communications or optimize offers based on legitimate interest (Art. 6(1)(f) GDPR)

  • Security: to prevent fraud or malicious activity

  • Support & Improvements: to respond to inquiries and continuously improve the Services

4. Cookies

We use cookies to operate, optimize, analyze, and personalize the Site.

For information on Shopify-related cookies, please see:
https://www.shopify.com/legal/cookies

Most browsers accept cookies by default, but you can remove or block them via your settings. Doing so may impact certain functions.

5. Disclosure of Personal Information

In certain situations, we may share personal data with:

  • Service providers (IT, payment, shipping, support, etc.)

  • Business or advertising partners

  • Affiliates within our corporate group

  • Third parties at your request (e.g., social media integrations)

  • Relevant authorities or as part of business transactions (mergers, acquisitions, bankruptcy, etc.)

We do not share sensitive personal data without your consent.

6. Third-Party Sites

Our Site may link to external platforms. We are not responsible for their content or privacy policies. Please review them directly.

7. Children’s Data

Our Services are not directed to children.
If a minor has submitted personal information, a parent or guardian may contact us to request deletion.

8. Security & Data Retention

No method of transmission or storage is completely secure. We strongly advise against sending sensitive data through unprotected channels.

Retention periods vary based on usage purpose, legal obligations, disputes, and operational needs.

9. Your Rights

Depending on your country of residence, you may have the right to:

  • Access

  • Deletion

  • Rectification

  • Portability

  • Restriction

  • Withdrawal of consent

  • Appeal

  • Manage marketing preferences

To exercise these rights, contact us. We may require identity verification.
You may also appoint an authorized agent to act on your behalf.

10. Complaints

If you have questions or concerns, contact us directly.
If you are unsatisfied with our response, you may contact your local data protection authority.

11. International Users

Your data may be processed or stored outside your country of residence.
If transferred outside the European Economic Area, we rely on Standard Contractual Clauses or other lawful mechanisms.

12. Contact

For privacy questions, or to exercise your rights, contact us at:

info@catherinegalway.com
or by mail at:
Montgomery Boulevard Northeast, STE A 6B, Albuquerque, NM, 87111, United States

Unless otherwise stated, we are the data controller responsible for your personal information.