Privacy Policy — Reach the Galaxy

1. Who we are

Reach the Galaxy (“we”, “us”, “our”) is a lifestyle and education brand operated by Dennis Dobrovolsky and Mary-Grace Vinluan from Ontario, Canada. We sell apparel and merchandise, and digital educational PDFs, through this website at reachthegalaxy.com.

This policy explains what information we collect when you visit or buy from us, why we collect it, who we share it with, and the choices you have. It applies to this website and to the emails we send about your orders and downloads.

2. Information we collect

Information you give us

Order information. Your name and email address, and — for physical products — the shipping address you enter at checkout (street address, city, state or province, postal code and country).
Product options. The size, colour and any personalization text you choose, because we need them to produce and ship your item.
Contact form messages. Your name, email address and the content of the message you send us.
Free download requests. Your email address, your name if you provide one, and whether you asked to hear from us about new products.

Information collected automatically

Usage and device data. Pages you view, how you reached the site, and general information about your browser, device and approximate location, gathered through cookies and similar technologies by the analytics tools described below.
Session data. A cookie that remembers the contents of your shopping cart between pages. It holds product selections, not personal details.
Server logs. Standard technical records such as IP address, request time and error information, kept so we can operate and secure the site.

Information we never see

We do not collect or store your card number. Card details are entered on Stripe’s secure checkout page and handled entirely by Stripe. We receive only a confirmation that payment succeeded, the amount and currency, and the email address you gave at checkout.

3. Why we collect it

We collect only what we need, and we use it only for the purposes it was collected for:

To process and fulfil your order — take payment, produce personalized items, ship physical products and deliver download links for digital ones.
To communicate with you — send order confirmations, download links, shipping updates, and replies to your questions.
To provide customer support — look up your order, resolve delivery problems and assess claims under our Return & Refund Policy.
To improve the website — understand which products and pages are useful so we can make the shop better.
To send you marketing — only where you have asked us to, and only until you tell us to stop.
To keep the site secure and meet our obligations — prevent fraud and abuse, and retain the transaction records that tax and accounting rules require.

Where the law requires a legal basis for processing, we rely on performance of our contract with you (fulfilling your order), your consent (marketing and non-essential cookies), and our legitimate interests (running, securing and improving the shop).

4. Payments and Stripe

All payments are processed by Stripe through Stripe Checkout. When you check out you are taken to a page hosted by Stripe, where you enter your payment details directly. Stripe acts as an independent controller of that information and handles it under its own privacy policy, available at stripe.com/privacy.

Stripe returns to us the information we need to fulfil and support the order: your email address, the name on the payment, the amount and currency paid, and payment and session identifiers. Stripe may also use the data it collects for fraud prevention, as described in its policy.

5. Analytics and advertising

We use two third-party tools to understand how the site is used:

Google Analytics, provided by Google, tells us things like how many people visited a page, which products are viewed most, and how visitors found us. See Google’s privacy policy. You can opt out across all sites with the Google Analytics Opt-out Browser Add-on.
The Meta Pixel, provided by Meta (Facebook and Instagram), records page views and standard shop actions — viewing a product, adding to cart, starting checkout and completing a purchase — together with the product and order value involved. We use it to measure whether our ads work and to reach people who may be interested in what we make. See Meta’s privacy policy and your Meta ad preferences.

We do not send your shipping address or your personalization text to either of these tools. You can limit both by blocking cookies in your browser or by using a tracker-blocking extension; the shop and checkout will continue to work normally.

6. Cookies

We use cookies and similar browser storage for three things:

Essential cookies keep your shopping cart and session working, and protect forms against cross-site request forgery. The site cannot function without them.
Analytics cookies are set by Google Analytics as described above.
Advertising cookies are set by the Meta Pixel as described above.

Most browsers let you refuse or delete cookies through their settings. Blocking essential cookies may prevent you from adding items to your cart or completing checkout.

7. We do not sell your personal information

We do not sell your personal information, and we never have. We do not rent, trade or otherwise disclose it to third parties for their own marketing purposes. We share it only with the service providers who help us run the shop, as described in the next section, or where the law requires it.

8. Who we share information with

We share the minimum necessary with the providers that operate parts of this business on our behalf. They may use it only to provide their service to us:

Stripe — payment processing and refunds.
Resend — sending order confirmations, download links and replies.
Render — website and database hosting.
Backblaze B2 and Cloudinary — storage and delivery of product files and images.
Google and Meta — analytics and advertising measurement, as described above.
Production and shipping partners — the printers and carriers who make and deliver physical orders receive the name, address, item details and any personalization text needed to fulfil your order.

We may also disclose information where we are legally required to, or where it is necessary to enforce our Terms of Service, investigate fraud, or protect our rights, property or safety and those of our customers. If the business is ever sold or transferred, customer information may transfer with it; we would notify you first.

9. Where your information is stored

We are based in Ontario, Canada, and we sell to customers around the world. Our service providers operate in Canada, the United States and other countries, so your information may be stored or processed outside the country you live in — including in the United States — and may be accessible to courts, law enforcement and national security authorities there under local law.

We choose providers that maintain recognized safeguards for international transfers, and we require them by contract to protect your information.

10. How long we keep it

Order records — kept for as long as needed to support the order and to satisfy Canadian tax and accounting requirements, generally seven years.
Contact form messages — kept while we resolve your enquiry and for a reasonable period afterwards.
Free download and marketing contacts — kept until you ask to be removed.
Analytics data — retained by Google and Meta under their own retention settings and policies.

11. How we protect it

The site is served over encrypted HTTPS connections, payment details never touch our servers, and paid PDF files are stored in private storage and released only through single-use, short-lived links tied to a confirmed order. Access to customer records is limited to the two of us, and only for running the business.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but if a breach ever affects your information, we will notify you and the relevant authorities as required by law.

12. Your rights and choices

Wherever you live, you can ask us to:

tell you what personal information we hold about you;
correct information that is wrong or out of date;
delete information we no longer need to keep;
provide a copy of the information you gave us; or
stop sending you marketing — every marketing email includes an unsubscribe link, and you can also just ask.

Depending on where you live, you may have additional rights under laws such as Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the EU and UK GDPR, or state privacy laws in the United States — including the right to withdraw consent, to object to certain processing, and to lodge a complaint with your data protection authority. In Canada, that authority is the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, get in touch. We will respond within 30 days. We may need to verify your identity first, and some information — such as completed transaction records — must be retained even after a deletion request. We will never charge you or treat you differently for exercising a privacy right.

13. Children’s privacy

This shop is intended for adults. We do not knowingly collect personal information from children under 13 (or the minimum age of consent where you live). If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the shop changes or as the law requires. The date at the top of this page always shows when it was last revised, and the current version governs. Material changes will be highlighted on the site.

15. Contact us

Questions about this policy, or about the information we hold on you? Email us at reachthegalaxy.contact@gmail.com or reach us through our contact page, and we’ll get back to you.

Reach the Galaxy is operated by Dennis Dobrovolsky and Mary-Grace Vinluan in Ontario, Canada. For privacy requests, please use the email address above so we can verify and track your request.

See also our Terms of Service and our Return & Refund Policy.