Privacy policy
Privacy Policy
Effective date: 28/05/2026
This Privacy Policy explains how Ganelu collects, uses, stores and protects personal data when you visit or make a purchase from Ganelu.com.
This policy is intended for users and customers in the United Kingdom.
The UK Information Commissioner’s Office states that privacy information should explain the purposes of processing, retention periods, lawful bases and users’ rights. It also states that individuals should be told how they can complain if they have concerns about the use of their personal data.
1. Who we are
The data controller responsible for your personal data is:
Ganelu
Address: Estrada da Ribeira Seca 108, 9200-124
Email: contact@ganelu.com
Phone: +351 924278627
Website: Ganelu.com
2. Personal data we collect
We may collect the following personal data:
- Name
- Email address
- Billing and/or shipping address
- Payment information
- Order and purchase information
- Website usage and analytics data
- Marketing preferences
- Cookie and tracking information
We do not knowingly collect personal data from children or sell products or services directed at minors.
3. How we use your personal data
We use your personal data for the following purposes:
3.1 Order management
We use your name, email address, address and order details to process, manage and deliver your purchases.
Lawful basis: performance of a contract.
3.2 Payment processing
We use payment-related information to process payments and prevent fraud.
Payments may be processed through PayPal and card payment providers.
Lawful basis: performance of a contract and legitimate interests.
3.3 Shipping and delivery
We use your personal data to arrange delivery of your order.
Shipping and fulfilment may be managed through Auto DS.
Lawful basis: performance of a contract.
3.4 Customer support
We use your contact details and order information to respond to questions, requests, complaints or incidents.
Lawful basis: performance of a contract and legitimate interests.
3.5 Marketing communications
We may use your email address to send marketing communications, promotions or updates about Ganelu.
You can unsubscribe from marketing communications at any time.
Lawful basis: consent, where required, or legitimate interests where permitted by law.
3.6 Website analytics and advertising
We may use analytics and advertising tools to understand website performance, improve our services and show relevant advertising.
These tools may include:
- Meta Ads
- Google Ads
- Google services, including Gmail-related services where applicable
Lawful basis: consent where required for cookies or tracking technologies, and legitimate interests for improving our website and services.
The ICO states that organisations must provide information about their lawful basis for processing personal data.
4. Shopify and ecommerce platform
Our online store is hosted on Shopify.
Shopify may process personal data necessary to operate the online store, manage orders, process checkout activity and support ecommerce functionality.
Your data may be processed in accordance with Shopify’s own privacy and data processing terms.
5. Cookies
Ganelu.com uses cookies and similar technologies.
The types of cookies we may use include:
- Necessary cookies: required for the website to function.
- Analytics cookies: used to understand how visitors use the website.
- Advertising cookies: used to support advertising and marketing activity.
Users can manage or reject cookies through the cookie banner or cookie settings available on Ganelu.com.
6. Sharing personal data with third parties
We may share personal data with trusted service providers where necessary to operate our business, including:
- Shopify, for ecommerce platform services
- PayPal and card payment providers, for payment processing
- Auto DS, for order fulfilment and shipping
- Meta Ads, for advertising
- Google Ads and Google services, for advertising, analytics and communication tools
We do not sell personal data or share personal data with third parties for their own independent commercial purposes.
7. International data transfers
Based on the information provided, Ganelu does not intentionally transfer customer personal data outside the United Kingdom or the European Economic Area.
However, some third-party service providers may process data according to their own infrastructure, terms and privacy policies. Where legally required, appropriate safeguards should be used.
8. How long we keep your data
We keep personal data for as long as there is a commercial relationship with the customer.
For marketing campaigns, we keep marketing-related data until the customer unsubscribes or withdraws consent.
We may also retain certain information where necessary to comply with legal, tax, accounting, fraud prevention or dispute resolution obligations.
9. Your rights
Subject to applicable data protection law, you may have the following rights:
- The right to access your personal data
- The right to request correction of inaccurate data
- The right to request deletion of your data
- The right to object to certain processing
- The right to restrict processing
- The right to data portability
- The right to withdraw consent where processing is based on consent
The ICO confirms that individuals should be informed of their rights, including access, rectification, erasure, restriction, objection and data portability.
To exercise your rights, contact us at:
10. Right to object to direct marketing
You have the right to object to the processing of your personal data for direct marketing purposes.
You can unsubscribe from marketing emails at any time by using the unsubscribe option in the email or by contacting us at:
The ICO states that individuals have an absolute right to object to processing for direct marketing purposes.
11. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure.
12. Complaints
If you have concerns about how we handle your personal data, please contact us first at:
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO provides guidance on how individuals can make data protection complaints.
13. Changes to this Privacy Policy
Ganelu may update this Privacy Policy from time to time.
Any updates will take effect when published on Ganelu.com.
14. Contact
For any questions about this Privacy Policy or the use of your personal data, contact:
Ganelu
Email: contact@ganelu.com
Phone: +351 924278627
Address: Estrada da Ribeira Seca 108, 9200-124
Effective date: 28/05/2026