Privacy Policy

Introduction

At Galaxy Living, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website and use our services.

By using our services, you agree to the collection and use of information in accordance with this policy.

This policy applies to Galaxy Living, an independent Samsung-focused retailer serving customers in Harare, Zimbabwe.

Information We Collect

Types of Cookies We Use

Managing Your Cookie Preferences

You can control and manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our website.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Provide customer support and respond to inquiries
• Send you important updates about your orders
• Improve our website and services
• Send marketing communications (with your consent)
• Prevent fraud and ensure security
• Comply with legal obligations

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With service providers who assist us in operating our website and providing services
• To comply with legal obligations or protect our rights
• In connection with a business transfer or merger
• With your explicit consent

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Warranty and Device-Custody Data

For a warranty or repair claim we process customer contact details, claim and purchase evidence, device model and serial/IMEI, customer-reported issues, requested remedy, staff assessment, decisions, custody records, and, where needed, private device-condition photographs or documents.

We use this information to perform the customer contract, comply with consumer-protection and record-keeping duties, protect devices in our custody, establish or respond to legal claims, prevent abuse, and communicate claim status. We never ask for a Samsung account password and do not persist device passcodes.

Processors and International Transfers

Relevant processors include Vercel for storefront hosting, Railway for backend hosting, private encrypted S3-compatible storage for custody media, Resend for transactional email, Paynow for supported payments, and Google only where the customer permits analytics or related services.

Some processors or infrastructure may store or access data outside Zimbabwe. We limit transfers to service delivery, require appropriate contractual and security safeguards, restrict access, and assess the destination and processor before use.

Warranty Retention and Security

Core claim and audit records are retained for three years after closure unless a dispute, legal hold, or longer legal duty applies. Claim-access sessions expire after 30 minutes and are deleted after expiry. Custody media is scheduled for deletion 90 days after closure unless a hold applies.

Controls include least-privilege staff access, authenticated administration, encrypted transport and storage, private signed media access, file type and size validation, audit history, rate limiting, security monitoring, backups, retention jobs, and incident response. If a breach creates a relevant risk, we investigate, contain, document, and notify affected people and the competent authority where the law requires.

Data Protection Contact

Contact privacy@galaxyliving.co.zw to request access, correction, deletion where applicable, restriction, an objection, or information about a transfer or breach. Identity verification may be required before disclosing customer data.

Your Rights

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Withdraw consent at any time
• Lodge a complaint with supervisory authorities

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

Looking for other support pages? See FAQ.