This policy explains what BGalz collects, why, who else sees it and what you can ask us to do about it. It covers bgalz.com and any order placed through it.
Last updated: 24 August 2026
Who we are
BGalz, 2333 E Southern Ave UNIT 1065, Tempe, AZ 85282, United States. Data protection enquiries: support@bgalz.com.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email, phone | At checkout or account signup | To process the order and contact you about it |
| Billing and shipping address | At checkout | To ship the goods and clear customs |
| Order history | On each order | To handle returns, refunds and support |
| Payment token and card last four digits | At checkout | To match refunds to the original payment. We never receive the full card number. |
| IP address, browser and device | On every visit | Security, fraud prevention and aggregate traffic statistics |
| Email address alone | If you subscribe | To send the newsletter you asked for |
We do not collect racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or sexual orientation, and we have no reason to.
Why we are allowed to hold it
- To perform our contract with you – order, payment, shipping, returns.
- Legal obligation – tax and customs records.
- Legitimate interest – fraud prevention, site security, and improving the store.
- Consent – marketing email, which you can withdraw at any time.
Who else sees your data
Only the parties who have to, and only the fields they need:
- Our fulfilment warehouse in Kwai Chung, New Territories, Hong Kong SAR – name, shipping address, phone and order contents, in order to pack and ship.
- FedEx – name, shipping address, phone, and a customs declaration of contents and value.
- US Customs and Border Protection – the customs declaration, because the parcel is an import.
- PayPal and our card payment provider – the data needed to take and refund payment. They are independent controllers of what they collect and their own privacy policies apply.
- Our web host – as a processor, storing the site and its database.
We do not sell your data, rent it, or share it with advertisers or data brokers.
International transfer
Because our warehouse is in Hong Kong, your name, delivery address and phone number are transferred there to fulfil your order. That transfer is necessary to perform the contract you entered into. The data sent is limited to what is needed to pack, label and export the parcel.
Cookies
| Type | Purpose | Can you refuse? |
|---|---|---|
| Essential | Keeping your cart and login session working, and protecting forms against cross-site request forgery | No – the store cannot function without them |
| Preference | Remembering things like a chosen currency or a dismissed notice | Yes, via your browser |
| Analytics | Aggregate page and traffic counts | Yes, via your browser or a do-not-track setting |
We do not run third-party advertising cookies or cross-site tracking pixels on this store.
How long we keep it
- Order and invoice records: 7 years, as tax law requires.
- Account data: until you ask us to delete the account.
- Newsletter subscription: until you unsubscribe.
- Server access logs: 90 days.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you, and give you a copy
- Correct anything that is wrong
- Delete your data, where we are not legally required to keep it
- Stop sending you marketing
- Port your data to another service
Email support@bgalz.com. We reply within 30 days and never charge for a request.
California residents: the CCPA/CPRA rights to know, delete, correct and opt out of sale apply. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of – but the right to know and to delete works exactly as above, and we will not discriminate against you for exercising it.
Security
The site runs over HTTPS on every page. Passwords are stored hashed, never in plain text. Administrative access is limited to named accounts. Card data never reaches our server.
No system is perfect. If we ever suffer a breach affecting your personal data, we will tell you and the relevant authority without undue delay.
Children
This store is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal information, email us and we will delete it.
Changes
Updates are published here with a new “last updated” date. Material changes affecting how we use your data will also be emailed to account holders.
Contact
BGalz, 2333 E Southern Ave UNIT 1065, Tempe, AZ 85282, United States
Email: support@bgalz.com
Phone: +1 859-555-5321