Privacy policy
Last Updated: June 9, 2026
This Privacy Policy describes how KyraGalactica.Designs ("we", "us", or "our") collects, uses, and discloses personal information when you visit our website kyragalactica.com, use our services, make purchases, or otherwise communicate with us.
Please read this Privacy Policy carefully.
------------------♡------------------
1. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technical developments. The most current version will always be published on this page.
------------------♡------------------
2. What Personal Information We Collect
2.1 Information You Provide Directly to Us
Examples include:
> Contact information (name, address, telephone number, email address)
> Order information (billing and shipping address, payment information)
> Account information (username, password)
> Messages submitted through customer inquiries
> Reviews and comments
> Wishlist content
------------------♡------------------
2.2 Information We Collect Automatically
When you visit our website, the following information may be collected automatically:
> IP address
> Browser type and browser version
> Device information
> Operating system
> Referring URL
> Date and time of access
> Click, navigation, and interaction data
> Information about cookies used
The following services may be used for these purposes:
> Shopify Analytics
> Cloudflare
These services may process technical information such as IP addresses, browser information, and device information.
------------------♡------------------
2.3 Information We Receive from Third Parties
We receive personal information from:
Shopify
for the provision of our online store.
Payment Providers
> PayPal
> Klarna
> Shopify Payments
> Apple Pay
> Google Pay
Shipping Providers
> DHL
Review Services
> Judge.me Reviews
Wishlist Features
> Wishlist Hero
Withdrawal Management
> EU Withdrawal Button
Sales Platforms
> Marketplace Connect
All information received is processed in accordance with this Privacy Policy.
------------------♡------------------
3. Purposes of Data Processing
3.1 Contract Fulfillment
We process personal information for:
> Order processing
> Payment processing
> Shipping fulfillment
> Returns processing
> Delivery of digital products
> Customer account management
> Processing withdrawal requests
> Communication regarding orders and deliveries
Legal Basis:
Art. 6(1)(b) GDPR
Art. 6(1)(c) GDPR
------------------♡------------------
3.2 Marketing and Advertising
We use personal information for:
> Product information
> Marketing activities
> Audience measurement and analytics
> Advertising via Pinterest
Legal Basis:
Art. 6(1)(a) GDPR
Art. 6(1)(f) GDPR
------------------♡------------------
3.3 Security and Fraud Prevention
We process information for:
> Fraud detection
> Prevention of misuse
> IT security
> System security
Services such as Shopify, Cloudflare, and Fraud Control may be used for these purposes.
Legal Basis:
Art. 6(1)(f) GDPR
------------------♡------------------
3.4 Customer Service
We use personal information for:
> Responding to inquiries
> Providing support
------------------♡------------------
4. Cookies and Consent
Our website uses cookies and similar technologies.
These are used in particular for:
> Technical functionality
> Security
> Analytics
> Storage of wishlists
> Measuring advertising performance
> Marketing purposes
Among others, we use:
> Shopify Analytics
> Cloudflare
> Wishlist Hero
When you first visit our website, a cookie banner provided will be displayed.
Non-essential cookies are only set with your explicit consent.
Further information about Shopify cookies can be found here:
Shopify Cookie Policy
------------------♡------------------
5. Disclosure of Personal Information
We only share personal information where necessary or required by law.
5.1 Service Providers
> Shopify
> Cloudflare
> Wishlist Hero
> EU Withdrawal Button
> Judge.me Reviews
> easyDHL
> Marketplace Connect
> Digital Downloads
> Customer support services
------------------♡------------------
5.2 Payment Providers
> PayPal
> Klarna
> Shopify Payments
> Apple Pay
> Google Pay
The following information may be processed in particular:
> Name
> Address
> Email address
> Payment information
> IP address
> Device information
------------------♡------------------
5.3 Marketing Partners
Where you have provided consent, information may be processed for advertising purposes and audience measurement, particularly through Pinterest.
------------------♡------------------
5.4 Legal Obligations
Information may be disclosed where we are legally required to do so or where legitimate interests make such disclosure necessary.
------------------♡------------------
6. External Websites
Our website may contain links to external websites. The respective operators are solely responsible for their privacy practices.
------------------♡------------------
7. Children's Information
Our services are not directed to children under the age of 16.
If we become aware that personal information has been collected from a child under the age of 16, such information will be deleted.
------------------♡------------------
8. Data Security and Retention
We implement appropriate technical and organizational measures to protect personal information.
These measures include, in particular:
> SSL encryption
> Shopify security measures
> Cloudflare security measures
> Access restrictions
Personal information is retained only as long as necessary for the respective purposes or as required by applicable legal retention obligations.
Tax and commercial law retention periods may be up to 10 years.
------------------♡------------------
9. Your Rights
Under the GDPR, you have the following rights in particular:
> Right of access
> Right to rectification
> Right to erasure
> Right to restriction of processing
> Right to data portability
> Right to object
> Right to withdraw consent
You also have the right to lodge a complaint with a supervisory data protection authority.
------------------♡------------------
10. International Data Transfers
As part of our business activities, personal information may be transferred to countries outside the European Union.
This may include transfers involving:
> Shopify
> Cloudflare
> Payment providers
> Other third-party service providers used by us
Where required, such transfers are carried out on the basis of Standard Contractual Clauses (SCCs) or comparable safeguards.
------------------♡------------------