Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how Galactic Gateway LLC, operating the online store Lithops Plant at lithopsplant.com (“Lithops Plant”, “we”, “us”, “our”), collects, uses, shares and protects your personal information when you visit our website or buy from us. Galactic Gateway LLC is the data controller responsible for your personal information.

1. Information We Collect

Information you give us:

  • Name, email address, phone number
  • Billing and shipping address
  • Order details and purchase history
  • Account login details (if you create an account)
  • Messages you send us through email, phone or our contact form

Information collected automatically:

  • IP address, browser type, device type and operating system
  • Pages you view, products you look at, items added to cart, referring website, and the date and time of your visit
  • Cookie and pixel data (see Section 5)

Payment information: card and PayPal payments are processed directly by PayPal. We never see or store your full card number.

2. How We Collect It

  • Checkout, account registration and contact forms on our website
  • Emails and phone calls with our customer service team
  • Cookies, web beacons and tracking pixels placed by us and our partners (Google, Meta/Facebook, Pinterest)

3. Why We Use Your Information

  • To process, ship and deliver your orders, and send order and shipping confirmations
  • To handle returns, refunds, replacements and customer service requests
  • To prevent fraud and keep our website secure
  • To understand how visitors use our website and improve our products and store
  • To send marketing emails – only if you have agreed, and you can unsubscribe at any time
  • To show you relevant advertising, including personalized ads (see Section 6)
  • To comply with our legal, tax and accounting obligations

4. Who We Share Your Information With

We do not sell your personal information. We share it only with service providers who help us run our store, and only as much as they need:

  • Shipping carriers (USPS, UPS) – to deliver your order
  • Payment processor (PayPal) – to process payments securely
  • Website hosting and email providers – to run our website and send emails
  • Analytics providers (Google Analytics, Google Tag Manager) – to measure website traffic
  • Advertising platforms (Google Ads and Google Merchant Center, Meta/Facebook, Pinterest) – to measure ads and show relevant ads
  • Authorities – when required by law or to protect our rights and prevent fraud

5. Cookies and Tracking Technologies

We use cookies (small text files stored on your device) and similar technologies to:

  • Keep items in your shopping cart and keep you logged in (necessary cookies)
  • Understand how our website is used (analytics cookies)
  • Measure and personalize advertising (marketing cookies and pixels from Google, Meta and Pinterest)

You can block or delete cookies in your browser settings. If you block necessary cookies, some parts of the website, such as the cart and checkout, may not work.

6. Personalized Advertising

We use Google Ads, Google Merchant Center, Meta (Facebook/Instagram) and Pinterest to show ads for our products. These platforms may use cookies and pixel data about your visits to our website to show you personalized ads (remarketing) on other websites and apps. You can opt out of personalized advertising at any time:

7. How We Protect Your Information

Our website uses SSL/HTTPS encryption on every page. Access to customer data is limited to staff and service providers who need it to fulfill your order. Payments are handled by PayPal, which is PCI-DSS compliant. No method of transmission over the internet is 100% secure, but we take reasonable measures to protect your data.

8. How Long We Keep Your Information

  • Order and transaction records: 7 years, as required for tax and accounting purposes
  • Customer account data: until you ask us to delete your account
  • Marketing email list: until you unsubscribe
  • Analytics data: up to 26 months

9. Your Privacy Rights (GDPR and CCPA)

We respect your privacy rights wherever you live.

GDPR (European Economic Area and United Kingdom): under the General Data Protection Regulation (GDPR) you have the right to access, correct, delete or download your personal data, to restrict or object to processing, and to withdraw your consent at any time. We process your data based on the performance of a contract (your order), your consent (marketing), our legitimate interests (security and website improvement) and legal obligations (tax records). You also have the right to complain to your local data protection authority.

CCPA (California residents): under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you have the right to know what personal information we collect and how we use and share it, to request deletion, to correct inaccurate information, to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising, and not to be discriminated against for using these rights. We do not sell personal information for money. To opt out of sharing for personalized advertising, contact us or use the opt-out links in Section 6.

How to use your rights: email [email protected] or call +1 786 634 1510. We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA). You can also unsubscribe from marketing emails at any time by clicking “unsubscribe” in any email.

10. Children’s Privacy

Our website is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Third-Party Websites

Our website may contain links to other websites, such as carrier tracking pages. We are not responsible for the privacy practices of those websites; please read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes will be announced on our website.

13. Contact Us

If you have any questions about this Privacy Policy or your personal information, contact our data controller:

Galactic Gateway LLC (Lithops Plant)
1012 Monroe Ave, Kansas City, MO 64127, United States
Email: [email protected]
Phone: +1 786 634 1510
Business hours: Monday – Friday, 9:00 AM – 5:00 PM Central Time (CT)