Privacy Policy – SquireGallery

Version 1.0

Last updated: September 29, 2026

SquireGallery operates this online store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience. Our online store is powered by Shopify, which enables us to operate our store and provide our services.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, place an order, contact us or otherwise interact with SquireGallery.

This Privacy Policy should be read together with our Terms & Conditions, Shipping Policy and Return Policy, which together explain how SquireGallery operates its online store and services.

Table of Contents

1. Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data:

• Contact information, including your name, email address, telephone number and address.

• Billing and shipping information, including billing and delivery addresses.

• Payment and transaction information, including payment method, transaction details and information relating to purchases, returns or cancellations. Payment details are processed by our payment providers.

• Account information, if you create a customer account.

• Communication information, when you contact our customer service.

• Device and technical information, including your IP address, browser type, operating system and device information.

• Website usage information, including pages visited and products viewed or purchased.

• Cookie and similar technology data, depending on your cookie preferences.

2. Sources of Personal Data

We may collect personal data from:

• you directly, when you place an order, contact us or create an account;

• cookies and similar technologies used on our website;

• service providers processing data on our behalf;

• business partners or other third parties where permitted by law.

3. How We Use Your Personal Data

We process personal data for the following purposes.

Processing Orders

We use your personal data to:

• process and fulfil orders;

• process payments;

• arrange production and shipping;

• manage returns and refunds;

• communicate about your order.

Improving Our Services

We analyse how visitors use our website to improve the shopping experience and website performance.

Marketing

We may use your personal data for marketing purposes where permitted by law.

Depending on the services active on our website, we may use marketing and analytics services from:

• Meta (Facebook & Instagram)

• TikTok

• Google

These services may include technologies such as:

• Meta Pixel

• TikTok Pixel

• Google Analytics

• Google Ads

Where legally required, we will ask for your consent before using non-essential marketing technologies.

Security and Fraud Prevention

We use personal data to:

• protect our website;

• detect fraud;

• prevent misuse;

• improve security.

Legal Obligations

We may process personal data where necessary to comply with applicable laws or requests from public authorities.

4. Legal Bases for Processing

Where applicable under the GDPR, we rely on the following legal bases:

• Performance of a contract – to process and deliver your order.

• Legal obligation – where required by law.

• Legitimate interests – to operate and improve our business, provided your rights are respected.

• Consent – for certain cookies and marketing activities where required.

Where processing is based on consent, you may withdraw your consent at any time.

5. Sharing Personal Data

We only share personal data where necessary to operate our business.

We may share data with:

• Shopify, which powers our online store.

• Gelato, our print-on-demand production and fulfilment partner, which receives only the personal data necessary to produce and deliver your order, such as your name, delivery address and order details.

• Payment service providers.

• Shipping partners.

• IT and hosting providers.

• Customer service providers.

• Marketing and analytics partners, including Meta, TikTok and Google where applicable.

• Authorities where disclosure is required by law.

• A successor or purchaser if SquireGallery is involved in a merger or sale.

We always seek an appropriate legal basis before sharing personal data.

6. Shopify

Our online store is powered by Shopify.

Shopify provides the technology that enables us to sell our Products, process orders and operate our website.

Your personal data may therefore be processed by Shopify and its service providers in accordance with applicable privacy legislation and Shopify's own privacy practices.

More information can be found in Shopify's Privacy Policy.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

These may include:

• Necessary cookies for security and checkout.

• Functional cookies that remember preferences.

• Analytics cookies that help us understand website usage.

• Advertising technologies that help measure campaigns and provide relevant advertisements where permitted.

Depending on the apps and services active on our website, cookies may be provided by:

• Shopify

• Meta

• TikTok

• Google

Examples include:

• Meta Pixel

• TikTok Pixel

• Google Analytics

• Google Ads

• Shopify cookies

The specific cookies used may change over time as our website evolves.

Where legally required, we will request consent before placing non-essential cookies.

You can change your cookie preferences at any time through our cookie banner or cookie settings where available.

8. Third-Party Websites

Our website may contain links to third-party websites or social media platforms.

Once you leave our website, we are not responsible for their privacy practices. We encourage you to read their privacy policies before providing personal information.

9. Children's Privacy

Our services are not specifically directed at children.

We do not knowingly collect personal data from children where prohibited by law.

If you believe a child has provided personal data without appropriate consent, please contact us so we can take appropriate action.

10. Security and Data Retention

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or where required by law.

Retention periods may vary depending on the type of information.

Examples include:

• Order, payment and invoice information for accounting and tax purposes.

• Customer account information while the account remains active.

• Customer service communications where reasonably necessary.

• Marketing information until you unsubscribe or object.

• Cookie and analytics data according to applicable retention periods.

Where required under Dutch tax legislation, certain financial records may be retained for up to seven years.

11. Your Privacy Rights

Depending on your location, you may have the right to:

• access your personal data;

• correct inaccurate information;

• request deletion of personal data;

• restrict processing;

• object to certain processing;

• request data portability;

• withdraw consent;

• opt out of certain marketing communications.

To exercise your rights, please contact us using the contact details below.

We may need to verify your identity before processing certain requests.

12. Rights of EEA and UK Residents

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under applicable privacy legislation.

These include the right to:

• object to certain processing;

• request restriction of processing;

• withdraw consent where applicable;

• lodge a complaint with the relevant supervisory authority.

In the Netherlands, complaints may be submitted to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Complaints

If you have questions or concerns about how we process your personal data, please contact us first.

SquireGallery

Eekhoornstraat 4 A3

4817 ES Breda

The Netherlands

Email: info@squiregallery.com

You also have the right to lodge a complaint with your competent data protection authority.

14. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area or the United Kingdom.

Where international transfers occur, we take appropriate measures required by applicable law to ensure your personal data receives an adequate level of protection.

This may include transfers involving providers such as Shopify, Gelato, Meta, TikTok and Google, depending on the services used on our website.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal obligations or the way we process personal data.

When changes are made, the "Last updated" date at the top of this page will be updated.

We recommend reviewing this Privacy Policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or how SquireGallery handles your personal data, please contact us.

SquireGallery

Eekhoornstraat 4 A3

4817 ES Breda

The Netherlands

Email: info@squiregallery.com

Website: www.squiregallery.com

Response time: We aim to respond to privacy requests within 30 days, unless a different period applies under applicable law.