Privacy policy

We treat your data the way we treat your parcels: plainly, privately, and with no more handling than necessary.

Last updated 1 October 2026

Who we are

gal pal (galpal.co.uk) is a UK sexual wellness shop, female-founded and based in Glasgow. The shop is run by GALPAL LTD, a company registered in Scotland (No. SC576181). When we say "we" in this policy, that is who we mean, and we are responsible for the personal data described here.

For anything to do with your data, email info@galpal.co.uk.

What we collect, and why

• When you order: your name, delivery address, email address and phone number - because we cannot send you a parcel without them. Order details are kept so we can handle delivery, returns and our legal record-keeping duties.
• When you pay: payments are processed by WooPayments, powered by Stripe. Your card details go directly to them over an encrypted connection and never touch our servers. If you choose Apple Pay or Google Pay, that provider handles your payment details in the same way.
• When you create an account: your name, email address and password (stored encrypted), so you can see past orders and check out faster.
• When you contact us: whatever you choose to tell us, plus your name and email address so we can reply. Messages sent through our contact form are emailed to us and also stored securely on our website so nothing gets lost. Questions about products, bodies and fit are read only by the people who reply to them.
• When you sign up to our newsletter: your email address, so we can send you The Edit and occasional news from gal pal. Every email has an unsubscribe link, and you can leave at any time.
• When you browse: essential cookies that make the basket and checkout work. Anything optional is only used if you say yes in our cookie banner, and you can change your mind any time using "Cookie settings" at the bottom of every page. Our cookie policy has the full list. We do not sell your browsing data, and we do not use it for advertising.

Our legal reasons for using your data

• To fulfil your order (contract): taking payment, packing, delivery and returns.
• To meet our legal duties (legal obligation): keeping order and tax records.
• To reply to you and keep the site secure (legitimate interests): answering your messages, preventing fraud and spam.
• With your permission (consent): our newsletter and any optional cookies. You can withdraw consent at any time.

Who we share it with

Only who is needed to run the shop and get your order to you:

• 1on1 Wholesale, our fulfilment partner, who packs and posts orders. They receive your name, delivery address and the items you ordered.
• Delivery couriers, who receive your name and delivery address.
• WooPayments and Stripe, who process your payment.
• Brevo, who send our newsletter, if you have signed up.
• Hostinger, who host our website and email.
• Google Fonts, which supplies the fonts on our site. Your browser connects to Google to load them, which shares your IP address with Google.

We do not sell your data to anyone, and we do not share it for advertising. Some of these providers, such as Stripe and Google, may process data outside the UK. Where that happens, they rely on safeguards recognised under UK data protection law.

Discretion

Orders ship in plain brown packaging with no gal pal branding, and the sender name on the label does not mention gal pal either. Card statements show a discreet descriptor rather than our name.

How long we keep it

Order records are kept for six years, as UK tax law requires. Contact messages are kept only as long as the conversation needs. Newsletter details are kept until you unsubscribe. Accounts can be deleted on request at any time.

How we protect it

Our whole site runs over an encrypted (SSL) connection, access to customer data is limited to the people who need it, and we only work with providers who take security seriously.

Your rights

Under UK GDPR you can ask us for a copy of the data we hold about you, ask us to correct it or delete it, ask us to limit or stop using it, or ask for it in a format you can take elsewhere. Email info@galpal.co.uk and we will sort it - no forms, no fuss. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change how we use your data, we will update this page and the date at the top.

Questions

Anything unclear, ask us. We reply within a working day or two.