Legal
Privacy
What we hold, why we hold it, who else sees it, and how to make us stop.
Who is responsible
The controller for the purposes of the GDPR is UAB Tai aktualu, trading as Galaxy Origins, Liepų g. 10, LT-92114 Klaipėda, Lithuania, reachable at care@galaxyorigins.com.
What is collected
To calculate: the date, the time and the place you enter, and the time zone they imply. These are the subject of the calculation, so they are stored with the record it produces. A place is a town, not an address.
To sell: your name, delivery address, email address and, if you give one, a telephone number for the courier. A dedication line, if you ask for one, is printed on the plate and kept with the order.
To run the site: the usual server log (address, time, page, browser) kept briefly to find faults and stop abuse.
Why, and on what legal basis
Order data is processed to perform the contract you entered into (Art. 6(1)(b)). Logs and rate limiting rest on our legitimate interest in a working, unabused service (Art. 6(1)(f)). Anything else — a newsletter, for instance — happens only on consent you gave and may withdraw at any time (Art. 6(1)(a)). Invoices are kept because tax law requires it (Art. 6(1)(c)).
Who else sees it
We share only what each service needs: our print and framing partner receives the delivery name, address and the file to print; our payment provider receives what it needs to take the payment; our email service carries the messages we send you; our hosting and network providers carry the site itself; and, only if you agree to cookies where consent is required, our analytics and advertising partners receive the measurements described under Cookies. Each acts under a data processing agreement and for no other purpose. On request we will tell you exactly who they are.
Some of these providers are based outside the European Economic Area. Such transfers rest on the European Commission's standard contractual clauses or on an adequacy decision. We do not sell your personal information.
How long
Orders and invoices are kept for as long as tax law requires, which is up to ten years. A calculation that was never bought expires with its hold and is deleted. Server logs are kept for a few days. A newsletter address is kept until you unsubscribe.
Cookies
With your consent where the law requires it (in the EU, EEA, UK and Switzerland we ask first), we use cookies and similar technology from Google (Analytics and Ads) and Meta (Pixel) to measure visits and purchases and to show our advertising to people likely to be interested. A purchase may also be reported to Meta directly from our server, with your email address in hashed form, so it is counted once. You can change your choice at any time by clearing this site's data in your browser. The site also remembers small choices, such as your cookie choice, in your browser's storage.
Your rights
You may ask what we hold about you, have it corrected, have it erased where nothing requires us to keep it, have it sent to you in a portable form, object to processing based on legitimate interest, and withdraw any consent. Write to care@galaxyorigins.com and we will answer within a month.
You may also complain to a data protection supervisory authority, in the country you live in, work in, or where you think something went wrong.
Changes
If this notice changes in a way that matters to you, the new version is published here before it takes effect.
Last updated 15 September 2026