This policy explains what BGalz collects, why, who else sees it and what you can ask us to do about it. It covers bgalz.com and any order placed through it.
Last updated: 23 October 2026
Who we are
BGalz (Wyoming LLC), 1500 N Grant St, Ste N, Denver, CO 80203, United States. Data protection enquiries: support@bgalz.com.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone | At checkout or account signup | To process the order and contact you about it |
| Billing and shipping address | At checkout | To ship the goods |
| Order history | On each order | To handle returns, refunds and support |
| Payment token and card last four digits | At checkout | To match refunds to the original payment. We never receive the full card number. |
| IP address, browser and device | On every visit | Security, fraud prevention and aggregate traffic statistics |
| Email address alone | If you subscribe | To send the newsletter you asked for |
We do not collect racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or sexual orientation, and we have no reason to.
Why we are allowed to hold it
- To perform our contract with you – order, payment, shipping, returns.
- Legal obligation – tax and accounting records.
- Legitimate interest – fraud prevention, site security, and improving the store.
- Consent – marketing email, which you can withdraw at any time.
Who else sees your data
Only the parties who have to, and only the fields they need:
- Our fulfilment warehouse in Tempe, Arizona – name, shipping address, phone and order contents, in order to pack and ship.
- USPS and FedEx – name, shipping address and phone, in order to deliver the parcel.
- PayPal and our card payment provider – the data needed to take and refund payment. They are independent controllers of what they collect and their own privacy policies apply.
- Our web host – as a processor, storing the site and its database.
We do not sell your data, rent it, or share it with advertisers or data brokers.
Where your data is handled
We are a US business, our fulfilment warehouse is in the United States, and orders are picked, packed and delivered domestically. Your order data does not leave the United States for fulfilment purposes. Our ecommerce platform and payment providers are independent companies that may process data on infrastructure in other countries under their own published policies.
Cookies
| Type | Purpose | Can you refuse? |
|---|---|---|
| Essential | Keeping your cart and login session working, and protecting forms against cross-site request forgery | No – the store cannot function without them |
| Preference | Remembering things like a chosen currency or a dismissed notice | Yes, via your browser |
| Analytics | Aggregate page and traffic counts | Yes, via your browser or a do-not-track setting |
We do not run third-party advertising cookies or cross-site tracking pixels on this store.
How long we keep it
- Order and invoice records: 7 years, as tax law requires.
- Account data: until you ask us to delete the account.
- Newsletter subscription: until you unsubscribe.
- Server access logs: 90 days.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you, and give you a copy
- Correct anything that is wrong
- Delete your data, where we are not legally required to keep it
- Stop sending you marketing
- Port your data to another service
Email support@bgalz.com. We reply within 30 days and never charge for a request.
California residents: the CCPA/CPRA rights to know, delete, correct and opt out of sale apply. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of – but the right to know and to delete works exactly as above, and we will not discriminate against you for exercising it.
Security
The site runs over HTTPS on every page. Passwords are stored hashed, never in plain text. Administrative access is limited to named accounts. Card data never reaches our server.
No system is perfect. If we ever suffer a breach affecting your personal data, we will tell you and the relevant authority without undue delay.
Children
This store is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal information, email us and we will delete it.
Changes
Updates are published here with a new “last updated” date. Material changes affecting how we use your data will also be emailed to account holders.
Contact
BGalz (Wyoming LLC), 1500 N Grant St, Ste N, Denver, CO 80203, United States
Email: support@bgalz.com
Phone: +1 859-555-5321