Privacy Policy

  • Home
  • Privacy Policy

  1. Introduction

Hardware Galaxy respects your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data protection laws require organisations to process personal data lawfully, fairly, transparently, securely, and only for specified purposes.

By using our website, you acknowledge and accept this Privacy Policy.

 

  1. Data Controller Information

Company Name: Hardware Galaxy
Email: [email protected]
Business Address: 71-75 Shelton Street, Convent Garden, London, United Kingdom, WC2H 9JQ

Under UK GDPR, organisations must clearly identify who controls personal data and how users can contact them.

 

 

  1. Personal Data We Collect

3.1 Personal Data You Provide

We may collect:

  • Full Name
  • Email Address
  • Phone Number
  • Billing & Shipping Address
  • Payment Details (processed via secure third-party providers)
  • Account Login Information

3.2 Automatically Collected Data

  • IP Address
  • Browser Type
  • Device Information
  • Cookies and Website Usage Data

Privacy notices must clearly explain what data is collected and why.

 

 

  1. Lawful Basis for Processing (UK GDPR Article 6)

We process personal data based on:

  • Contractual Necessity — To process and deliver orders
  • Legal Obligation — Tax, accounting, compliance requirements
  • Legitimate Interest — Website improvement, fraud prevention
  • Consent — Marketing emails and non-essential cookies

GDPR requires organisations to have a legal basis for processing personal data.

 

 

  1. How We Use Your Data

We use personal data to:

  • Process orders and payments
  • Deliver products and services
  • Provide customer support
  • Improve website performance
  • Prevent fraud and abuse
  • Send marketing communications (only with consent)

Data must be used only for specific, clear purposes.

 

 

  1. Data Sharing

We may share data with:

Service Providers

Payment gateways, hosting providers, shipping partners, and IT support.

Legal Authorities

Where required by law or legal process.

Business Transfers

In case of merger, acquisition, or asset sale.

Privacy notices must explain who receives personal data and why.

 

 

  1. International Data Transfers

If data is transferred outside the UK, we ensure appropriate safeguards such as:

  1. Standard Contractual Clauses
  2. Secure data processing agreements

 

 

  1. Data Retention

We retain personal data only as long as necessary for:

  • Order fulfillment
  • Legal and tax obligations
  • Dispute resolution

GDPR requires data to be stored only for as long as necessary.

 

 

  1. Data Security

We implement:

  • SSL Encryption
  • Secure Payment Processing
  • Access Controls
  • Regular Security Monitoring

Data must be protected against unauthorized access or loss.

 

 

  1. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure (Right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision making

These are core UK GDPR individual rights.

 

 

  1. Cookies and Tracking

We use cookies to:

  • Enable website functionality
  • Analyse traffic
  • Remember user preferences

Non-essential cookies require user consent under GDPR and ePrivacy rules.

 

 

  1. Children’s Data

Our services are not intended for children under 13. We do not knowingly collect children’s data.

 

 

  1. Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO).

 

 

  1. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page.

 

 

  1. Contact Us

Email: [email protected]

 

Thank you for trusting  Hardware Galaxy with your  hardware needs!