Privacy policy

Privacy Policy

This Privacy Policy explains how Garalato collects, uses and shares personal information when you visit garalato.com, purchase products, subscribe to our newsletter or contact us.

1. Who We Are

Garalato is a trading name of ABC GAME STORE LTD, registered in England and Wales under company number 11580950.

ABC GAME STORE LTD is the data controller responsible for the personal information we process to operate our store and manage our customer relationships.

Registered office:

ABC GAME STORE LTD
37 Westminster Buildings
Flat 1938
Theatre Square
Nottingham
NG1 6LG
United Kingdom

Email: info@garalato.com
Phone: +44 7735374072

2. Information We Collect

Depending on your interactions with our store, we collect:

  • Contact and delivery details: name, email address, telephone number, billing address and delivery address.

  • Purchase information: products ordered, order references, transaction status, delivery updates, returns and refunds.

  • Customer communications: messages, enquiries and information you provide when contacting us, including through Shopify Inbox.

  • Account information: details associated with a customer account, where you use one.

  • Technical and browsing information: IP address, browser and device details, pages visited and interactions with our website.

  • Newsletter preferences: subscription details, consent records and unsubscribe requests.

  • Review information: ratings, review text, display name and any other content you choose to submit through our review service.

We receive information directly from you, automatically through our website and connected services, and from providers that process payments or support order fulfilment.

Payment details are processed through the payment services used at checkout. We receive the transaction information needed to manage purchases and refunds. Please do not send full card details by email or chat.

3. How and Why We Use Information

We use personal information on the following legal bases:

Purpose Legal basis
Process orders, payments, deliveries and contractual returns Performance of our contract with you
Answer questions before a purchase Steps taken at your request before entering into a contract
Handle customer enquiries and complaints Contract performance or our legitimate interest in providing customer support, depending on the enquiry
Meet accounting, tax and statutory consumer obligations Legal obligation
Protect our website, prevent fraud and manage disputes Our legitimate interests in protecting our customers and business
Manage and display product reviews Our legitimate interest in providing product feedback, subject to applicable consent requirements
Send newsletters you have subscribed to Consent
Conduct optional website tracking and personalised advertising Consent where required

Where we rely on legitimate interests, we consider the impact on your rights and reasonable expectations.

We need certain contact, delivery and transaction information to fulfil an order. If you do not provide it, we may be unable to complete your purchase or deliver your goods. Newsletter subscriptions and the submission of reviews are optional.

4. Shopify and Connected Services

Our store is hosted by Shopify. Shopify processes information about visits, purchases and other interactions to provide the ecommerce platform and connected services, including checkout, customer accounts, Shop and Shop Pay.

Shopify Network Intelligence is enabled for our store. Shopify uses information from interactions with our store together with information from interactions with other merchants and Shopify to provide enhanced services, including improvements, personalisation and advertising features.

For certain enhanced services, Shopify acts as a data controller in its own right. Information may be shared with Shopify and service providers located outside your country.

Where consent is required for personalised advertising or optional tracking, your consent choices apply.

For further information, read Shopify’s Consumer Privacy Policy. You can also visit Shopify’s Privacy Portal to learn about your rights and submit requests concerning Shopify’s processing.

5. Other Services We Use

Payments

We offer payment methods through our checkout, including PayPal and Shop Pay, supported payment cards and digital wallets.

The provider you select processes the information needed to authorise payment, manage the transaction and carry out its security checks. Its own privacy terms may also apply.

For PayPal, see the PayPal Privacy Statement.

Klaviyo

We use Klaviyo to manage newsletter subscriptions and send email marketing. Information processed for this purpose includes your email address, any name you provide and your subscription preferences.

You can unsubscribe using the link in a newsletter or by emailing info@garalato.com. Unsubscribing does not stop essential communications about your orders.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with our website and identify opportunities to improve it.

Clarity can process website interaction information through behavioural measurements, heatmaps and session replays, depending on the implementation and consent settings. Information can include pages viewed, clicks, scrolling and device or browser details.

Read the Microsoft Privacy Statement for information about Microsoft’s processing.

Judge.me

We use Judge.me to support product reviews. If you submit a review, the information you provide may be processed to manage and display that review.

Review content and the display name associated with it may be publicly visible. Please do not include sensitive information or private contact details in your review.

Simprosys Google Shopping Feed

We use Simprosys Google Shopping Feed to manage product information for shopping listings. Its integration also includes a customer-event pixel; the information processed depends on the enabled features and applicable consent settings.

For details about the provider’s processing, see the Simprosys Privacy Policy.

6. Cookies and Your Choices

Our store uses cookies and similar technologies for essential functions, such as the shopping basket, checkout and website security, and for optional analytics, personalisation and marketing.

We use Shopify’s cookie banner for visitors in the United Kingdom to collect privacy preferences. Where consent is required, optional technologies must operate in accordance with those choices.

You can manage the choices presented through the website’s privacy controls. For help changing or withdrawing your consent, contact info@garalato.com.

You may also manage cookies through your browser. Blocking essential cookies can affect the operation of the store.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Visiting our website does not, by itself, constitute consent to optional tracking.

7. Sharing Information

In addition to the providers described above, relevant information may be shared with:

  • Delivery and fulfilment providers where necessary to complete an order or return.

  • Professional advisers where needed for accounting, legal advice or disputes.

  • Public authorities where disclosure is legally required.

We share information relevant to the purpose involved. Where a provider processes information on our behalf, its processing is governed by the applicable service and data protection arrangements.

8. International Processing

Shopify’s hosting location for our store is configured within the European Union. This does not mean all processing by Shopify or our connected services takes place exclusively within the EU.

Our providers operate internationally. Personal information may be processed outside the United Kingdom, including in the European Union and the United States.

The applicable transfer arrangements depend on the provider and destination. For example, Klaviyo’s Data Processing Agreement includes contractual safeguards and a UK Addendum, while Shopify’s Data Processing Addendum describes its international processing arrangements.

Where required, international transfers must be covered by an applicable UK adequacy provision or other recognised safeguards.

Contact info@garalato.com for information about the safeguards relevant to your personal information and how to obtain a copy.

9. How Long We Keep Information

Retention depends on the type of information and why it is needed:

  • Order and transaction records: for order management and the applicable accounting, tax and legal requirements.

  • Customer service records: for handling the enquiry, related complaints and relevant legal claims.

  • Newsletter information: while needed to manage your subscription and preferences. Limited unsubscribe records may be retained to avoid contacting you again.

  • Account information: while needed to provide the account and meet related obligations.

  • Reviews and technical information: according to their purpose, the relevant service settings and any applicable legal requirements.

Information should not be retained indefinitely without a valid purpose. We assess whether it remains necessary and arrange deletion or anonymisation when it is no longer required.

10. Your Rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal information.

  • Correct inaccurate or incomplete information.

  • Request deletion or restriction of processing.

  • Receive certain information in a portable format.

  • Withdraw consent where processing relies on it.

Right to object: You may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time.

Send requests to info@garalato.com. We may ask for proportionate information to verify your identity. We will respond within the applicable legal timeframe and explain any permitted extension or limitation.

For information processed by Shopify in its own capacity, you may also use Shopify’s Privacy Portal.

11. Complaints

If you have a concern about our handling of your information, email info@garalato.com so we can investigate and respond.

You also have the right to complain to the UK Information Commissioner’s Office through its complaints page.

You do not have to contact us before exercising your right to complain to the ICO.

12. Changes to This Policy

We may update this policy to reflect changes to our services, processing activities or applicable requirements. We will communicate material changes where required.

Updating this policy does not replace any consent required for new processing.