Privacy policy
Gallerias is operated by Digital Portal International. This notice covers our website and mobile application. For privacy questions and access, correction or deletion requests, contact concierge@galleriasco.com.
Your account and the Gallerias app
When you create an account, we store your name, email address and a securely hashed password. We use a session identifier to keep you signed in. Your saved items and shopping bag are stored with your account so you can access them across devices.
Guest shopping uses a session identifier to keep your shopping bag, saved items and orders separate from other shoppers. We also process technical request information to operate the service, prevent misuse and investigate errors. Language and display preferences may be stored on your device.
Orders and payments
When you provide checkout information, we store your contact and delivery details, selected items and order records to process your order and provide support. Delivery details needed to fulfil an order are shared with the supplying partner and delivery service. When card payments are available, Tap processes card information through its payment fields and services; our application receives payment tokens, references and status information rather than storing your full card number or security code.
Tap also processes technical payment-security information, including device identifiers or fingerprints and network information such as IP addresses. Its SDK may contact infrastructure providers to load checkout and identify the network IP address. Tap is a separate controller for payment-instrument information. Camera-based card scanning is disabled in this release; manual card entry does not require camera access. Tap privacy policy
Storage and service providers
Our current application backend is hosted on DigitalOcean in London, United Kingdom. Legacy website infrastructure and migration backups may remain on Amazon Web Services during the transition. Authorized team members use the information needed to operate the service, fulfil orders, reconcile payments and respond to support or privacy requests. Hosting, payment and fulfilment providers process the information needed for their respective services.
If you apply to our affiliate program, we also store your public profile, application, assigned codes and commission records. Eligible referrals use an opaque identifier, partner, click time and expiry, linked to your shopping session or account. Eligibility expires 30 days after the original click; promo codes use their assigned expiry dates. Android can pass the identifier through Google Play Install Referrer; iPhone handoff uses the same account or reopening the link after installation. Partners see order reference, commission, status, registration classification and assigned rate, not buyer names, emails, delivery addresses or card details. Referral attribution uses our own service without advertising IDs, clipboard access, device fingerprinting or a third-party attribution provider. Financial attribution records may be retained for reconciliation and legal obligations.
Search and chat
If you use our optional automated search or chat, we send the text you enter, and up to five earlier messages you entered in the current conversation, to OpenAI to interpret your request. Public catalogue information and relevant policy text may also be included. We do not automatically attach your account profile, orders, delivery address or payment information. Please keep personal details, passwords and card information out of your messages.
We do not save a permanent conversation transcript or your original search text in our assistance database. Conversation history stays in your current browser or app session. Interpreted search filters expire after 15 minutes; expired records are removed when the next search is processed. We keep usage and spending counters without message text to manage the service.
OpenAI may retain request content for security and abuse monitoring for up to 30 days under its standard API policies. API content is not used for model training by default. Processing may take place outside your country. Disabling response storage does not remove all provider-side retention.
The chatbot can help with product discovery and general policy questions. It cannot access your orders or account, make purchases or authorize returns, cancellations or refunds. For personal assistance or privacy requests, contact concierge@galleriasco.com.
App notifications and optional analytics
App notifications are optional. If you enable them, Google Firebase Cloud Messaging processes an installation identifier and notification token to deliver messages to your device. We associate your notification preferences with your account or guest shopping session. Order updates and news or offers have separate controls in Settings. You can also turn notifications off in your phone settings.
If you enable optional usage analytics, Google Analytics for Firebase processes a pseudonymous app identifier, screen and product interactions, public item identifiers, quantities, purchase and refund amounts, and technical information such as app version, device and operating-system details, language and approximate location derived from network information. We use this to understand the shopping journey and improve the app. Our analytics events do not include your name, email, delivery address, passwords, full card details or the text you enter into search. Advertising identifiers and advertising personalization are disabled.
Notifications and analytics are off by default and do not have to be enabled to shop. You can change your choices in Settings. Turning analytics off stops new collection; it does not automatically erase information already processed by Google. You can contact concierge@galleriasco.com about access or deletion. We remove inactive app notification and analytics registrations from our server after 90 days. Required order and payment records are retained separately.
Google may process service information outside your country. Its privacy information explains its processing and retention. Notification delivery and optional analytics do not give Google access to your Gallerias password or payment-card details.
Customer invitations and shopping credit
When you participate in customer invitations, we process invitation identifiers, the association between invitations and customer accounts, qualifying order references and the shopping-credit ledger to operate rewards. The person who invited you can view reward status and credit amounts, but not your identity, contact details or delivery address. This uses our own service, not a third-party attribution provider. Financial records may be retained for reconciliation and applicable legal obligations.
You can delete your account in the app: open More, sign in to your account, choose Delete account and confirm with your current password. You can also delete it from your account page on this website. This removes your account, saved items and shopping bag. Order, payment and other records that must remain available for reconciliation or applicable legal obligations are retained for those purposes.
To request deletion without the app, email concierge@galleriasco.com with the subject "Gallerias account deletion" and the email address linked to your account. You may also request deletion of guest-shopping information. We verify ownership before acting. Do not send your password or payment-card details. Deleting the app alone does not delete server-side information.