Shop All ArtExplore PALCLE
Fast dispatch — most orders ship within 1–2 business days
New wall art, woven textiles and creative accents
Monday–Friday: 8 AM – 5 PM (PT)
Support: support@palcle.com
support@palcle.com

PALCLE GALLERIA App Privacy Policy

PALCLE GALLERIA App Privacy Policy

Effective date: September 2, 2026

This App Privacy Policy explains how APEX MERIDIAN LIMITED, trading as PALCLE GALLERIA ("PALCLE," "we," "us," or "our"), handles information when you use the PALCLE GALLERIA mobile application on Apple or Android devices (the "App"). This policy supplements the PALCLE Website Privacy Policy and Cookie Policy when the App opens PALCLE or Shopify web pages.

1. Controller and contact

APEX MERIDIAN LIMITED, trading as PALCLE GALLERIA, is the controller of personal information used to operate PALCLE accounts, orders, customer support, and the App storefront, except where a service provider acts as a separate controller under its own privacy policy. Questions and privacy requests may be sent to support@palcle.com or through our Contact Us page.

2. Information handled by the App

Catalog and technical requests

The App retrieves product names, images, descriptions, prices, availability, variants, vendors, tags, and collections from our Shopify storefront. When the App connects, Shopify, hosting providers, and network providers may automatically process technical information such as IP address, approximate network location inferred from IP, device and browser characteristics, request timestamps, security events, and diagnostics. We use this information only for storefront functionality, localization, reliability, fraud prevention, and security—not for cross-app advertising or tracking.

Cart and favorites

Items placed in the App cart and products marked as favorites are used to provide those features. In the current version, this information is held locally while the App is running and is not used for advertising. Cart information is sent to PALCLE or Shopify only when you choose to continue to checkout.

Account, checkout, orders, and support

Account sign-in, account creation, checkout, order processing, account deletion requests, and customer-support forms open PALCLE or Shopify web pages. Information you submit may include your name, email address, telephone number, account identifier, billing and shipping address, order and purchase history, support messages, and information necessary to process returns, refunds, or privacy requests.

3. Device permissions and access

The current App follows a minimum-permission design. It requires a network connection to load the product catalog and open account or checkout services. Network access on iOS does not require a user permission prompt. A future Android release would use the standard INTERNET permission, which is not a sensitive runtime permission.

The current App does not request access to precise or background location, camera, microphone, photos, media library, contacts, calendars, Bluetooth, local network devices, motion or fitness data, health data, SMS, call logs, files, accessibility services, advertising identifiers, or tracking permission. It does not use Face ID or Touch ID directly. If a future feature requires an additional device permission, we will explain the purpose before requesting it, request only the minimum access needed, provide an alternative where reasonably possible, and update this policy and applicable App Store or Google Play disclosures.

4. Apple Pay, Google Pay, and other payments

Where offered during Shopify checkout, Apple Pay, Google Pay, card payments, or other payment methods are provided by Shopify, the selected payment service, your bank, and the relevant payment network. Payment credentials are entered into or authorized through the payment provider. The native App does not receive or store your full card number, Apple Pay Device Account Number, Google Pay payment credential, bank authentication secret, or device biometric data.

Apple Pay and Google Pay may provide PALCLE or its payment processor with a tokenized or encrypted payment credential and transaction information needed to authorize the purchase. Depending on your choices, the checkout service may also receive your name, email, telephone number, billing address, or shipping address. These parties process information under their own terms and privacy policies, including the Apple Privacy Policy, Apple Pay privacy information, Google Privacy Policy, and applicable Google Pay terms.

5. Purposes and legal bases

We process information only when a lawful basis applies. For users in the European Economic Area (EEA), European Union (EU), and United Kingdom (UK), the principal legal bases are:

  • Contract and pre-contract steps: to display products you request, maintain your cart, create and manage an account, process payment and orders, arrange shipping, handle returns and refunds, and provide customer service.
  • Legal obligations: to maintain required transaction, accounting, tax, product-safety, sanctions, and fraud-prevention records and to respond to lawful requests.
  • Legitimate interests: to secure the App and store, prevent abuse and fraud, diagnose errors, maintain service reliability, protect legal claims, and improve essential storefront functionality, provided those interests are not overridden by your rights.
  • Consent: for optional marketing, non-essential cookies, or another optional use where consent is legally required. You may withdraw consent at any time without affecting processing already completed lawfully.

6. How information is used

Information may be used to:

  • display, synchronize, and maintain the PALCLE product catalog;
  • provide account, cart, checkout, payment, order, shipping, return, and refund services;
  • respond to customer-support, account-deletion, and privacy requests;
  • authenticate users and protect accounts and transactions;
  • prevent fraud, misuse, and security incidents;
  • comply with legal, accounting, tax, and regulatory requirements; and
  • maintain and improve the reliability and essential operation of our services.

7. Sharing and service providers

We do not sell personal information through the App. We do not use App data for cross-app tracking, targeted advertising, or data-broker activity. We may disclose information only as reasonably necessary to:

  • Shopify and storefront, hosting, and infrastructure providers;
  • payment providers, Apple Pay, Google Pay, banks, card networks, and fraud-prevention services;
  • fulfillment, printing, shipping, delivery, return, and customer-support providers;
  • professional advisers, insurers, auditors, and corporate service providers under confidentiality obligations; and
  • courts, regulators, law enforcement, or other parties when required by law or necessary to protect users, PALCLE, or others.

Service providers are required by contract or applicable law to protect information and use it only for authorized purposes. Some platform providers may act as independent controllers for their own account, payment, security, or compliance operations.

8. App Store and Google Play disclosures

We maintain Apple App Privacy and, if an Android version is released, Google Play Data Safety disclosures that are intended to be consistent with this policy and the actual behavior of the released App. Data entered on PALCLE or Shopify pages opened from the App is included in our analysis of required store disclosures. The App does not include advertising SDKs or third-party analytics SDKs and does not use data for tracking.

9. Retention and deletion

Local cart and favorites information in the current App is discarded when the relevant App session ends. Account information is retained while the account remains active. Order, payment confirmation, shipping, refund, fraud-prevention, tax, and accounting records are retained for the period required by applicable law and legitimate business recordkeeping. Support and privacy-request records are retained only as long as reasonably necessary to resolve the request, demonstrate compliance, and protect legal claims. Technical and security logs are retained for limited periods determined by PALCLE and its infrastructure providers.

Users may request deletion of their PALCLE account and associated personal information from the Account section of the App or at our App Account Deletion page. Deletion means deletion of the account, not merely deactivation. We may verify identity before acting. Information that must be retained for legal, tax, accounting, fraud-prevention, dispute, chargeback, warranty, or product-safety obligations will be isolated, used only for those purposes, and deleted when the applicable retention obligation ends.

10. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a portable copy of personal information; to object to certain processing; to opt out of marketing; to withdraw consent; and to appeal or complain about a privacy decision. We will not discriminate against you for exercising a privacy right.

Submit a request at our deletion page, email support@palcle.com, or use our Contact Us page. We may request information necessary to verify your identity and authority. We will respond within the period required by applicable law, ordinarily within one month for GDPR requests. If an extension is permitted and needed, we will explain the reason.

11. Additional EU, EEA, and UK information

Individuals in the EU, EEA, and UK may have the right to be informed; access and receive a copy of personal data; correct inaccurate data; request erasure; restrict processing; receive portable data; object to processing based on legitimate interests or direct marketing; withdraw consent; and request human review of a decision based solely on automated processing that produces legal or similarly significant effects.

The App itself does not make decisions based solely on automated processing that produce legal or similarly significant effects. Payment, fraud-prevention, or financial providers may conduct automated security or authorization checks under their own policies and applicable law.

You may lodge a complaint with the data protection authority in the country where you live or work, or where you believe an infringement occurred. You may contact us first so we have an opportunity to address the issue, but doing so does not limit your right to complain to an authority or seek a judicial remedy.

12. International transfers

PALCLE is operated by APEX MERIDIAN LIMITED. PALCLE, Shopify, and other service providers may process information in the United States and other countries outside your country of residence. Where EU, EEA, UK, or other law restricts international transfers, we rely on an applicable adequacy decision, approved standard contractual clauses, binding legal safeguards, or a permitted legal exception. You may contact us for information about the safeguard relevant to your data.

13. Security

We and our service providers use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted network transmission where supported, access controls, tokenized payment processing, and service-provider controls. No internet transmission or storage system can be guaranteed to be completely secure. Please protect your account credentials and contact us if you suspect unauthorized activity.

14. Children's privacy

The App is a general-audience shopping service and is not directed to children. We do not knowingly collect personal information through the App from children under 13 in the United States or under the applicable age of digital consent in the EEA, UK, or another jurisdiction. Purchases should be made by an adult or with the involvement of a parent or legal guardian. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

15. Other policies and third-party services

When the App opens a PALCLE or Shopify web page, the PALCLE Website Privacy Policy and Cookie Policy also apply. Shopify processes information as described in the Shopify Privacy Policy. Apple and Google process platform and payment information under their own policies. A third party's privacy policy governs its independent processing and does not replace this policy for PALCLE's processing.

16. Changes to this policy

We may update this policy when the App, our service providers, store requirements, or applicable laws change. We will publish the revised policy on this page, update the effective date, and provide additional notice where required by law.

17. Contact us

For questions, account deletion, or privacy requests concerning the App, contact APEX MERIDIAN LIMITED, trading as PALCLE GALLERIA, at support@palcle.com or through our Contact Us page.