Privacy policy

Last updated: May 17, 2026

This Privacy Policy explains how Two Touch Gallery (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website and when you purchase our products.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal information we collect or process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Account and order information

Examples of personal information collected: name, billing and shipping address, email address, phone number, products ordered and payment information.
Purpose of collection: We use this information to process your orders, manage your account, communicate with you and handle returns and customer service.
Source of collection: collected directly from you when you create an account or place an order.

Marketing and newsletter data

Examples of personal information collected: your email address and your marketing preferences.
Purpose of collection: to send you newsletters, promotions and updates about Two Touch Gallery when you choose to receive them.
Source of collection: collected directly from you when you subscribe or consent to marketing.

Customer service data

Examples of personal information collected: your name, contact details and the content of your messages (including any information you choose to share).
Purpose of collection: to answer your questions, handle complaints, and resolve issues related to your orders or our products.
Source of collection: collected directly from you when you contact us.

Technical and usage data

Examples of personal information collected: IP address, browser type and version, device type and operating system, time zone, and information about the pages you visit and how you navigate our site.
Purpose of collection: to operate, secure and improve our website, to understand how visitors use it, and for analytics and marketing as described in this Privacy Policy.
Source of collection: collected automatically when you visit our website, for example via cookies and similar technologies.

Some of the personal information described above is shared with our ecommerce platform provider (Shopify) and other service providers (such as payment providers and shipping partners) where this is necessary to operate our store and provide our services to you.

How we use your personal information

How we use your personal information depends on how you interact with us and which Services you use. We use personal information for the following purposes:

To process your orders: handling payments, shipping, order confirmations and returns.
To manage your account: enabling you to log in, view order history and update your details.
To provide customer service: answering questions, handling complaints and after‑sales support.
For marketing: sending newsletters and information about our products and promotions when you have subscribed or otherwise consented.
For targeted advertising: showing you relevant ads for our products based on your interaction with our site.
For security and fraud prevention: monitoring transactions and activity to help protect our customers, our store and our business.
To improve our website: using analytics to understand how visitors use our site and to improve our design and performance.

Legal bases (GDPR)

If you are in the European Economic Area (EEA), we process your personal data on the following legal bases:

Performance of a contract: to process your orders, payments, shipping and customer service.
Compliance with legal obligations: for example, retaining records for tax and accounting purposes.
Legitimate interests: such as improving our website, preveting fraud, and basic marketing to existing customers, when these interests are not overridden by your rights.
Consent: for sending newsletters and for using cookies/trackers for analytics and targeted advertising, where required. You can withdraw your consent at any time.

For customers located outside the EU/EEA, we handle personal data in a similar way and with the same level of care. The specific rights available to you may depend on the laws of your country, but you can always contact us with any questions or requests regarding your personal data.

How we disclose your personal information

We share your personal data only with trusted third parties that help us run our store and provide our services, for example:

Our store is hosted on Shopify, which processes your personal data in order to provide us with the online shop platform and related services. You can read more about Shopify’s privacy policy here: https://www.shopify.com/legal/privacy
We may share information when required to comply with legal obligations, to respond to lawful requests from public authorities, or to protect our rights or the rights of others.
With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You can exercise your rights to opt-out of those uses.
Analytics tools: We use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Minors

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age

Security and retention period

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

Right to Access: You may have a right to request access to personal information that we hold about you.
Right to Delete: You may have a right to request that we delete personal information we maintain about you.
Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.

International transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Cookies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help the website function properly and provide information about your use of the site. We use:

Essential cookies: necessary for the website to function, such as remembering items in your cart or keeping you logged in.
Analytics cookies: to understand how visitors use our site and to improve our services.
Advertising and social media cookies: to show you relevant ads for Two Touch Gallery on platforms such as Facebook, Instagram, TikTok and Google, and to measure the effectiveness of those ads.

When you first visit our website, you will see a cookie banner where you can accept or manage your cookie preferences, in line with local requirements. You can also adjust your browser settings to refuse or delete cookies, however, this may affect how our site works for you.

Automated decision making

We do not use your personal information to make decisions about you that are based solely on automated processing (including profiling) and that have legal effects or similarly significant effects for you, as described in Article 22 GDPR. If this ever changes in the future, we will update this Privacy Policy and explain the nature of such decision-making and your rights in relation to it.

Changes

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or legal requirements. The updated version will be published on our website with a new “last updated” date. We recommend that you check this page regularly.

Contact

If you have any questions, requests or complaints about this Privacy Policy or our handling of your personal data, you can contact us at: twotouchgallery@hotmail.com