—
This Privacy Policy describes how drgolly.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
We have your security and privacy in mind, every step of the way. When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address, and email address. Your personal information will never be forwarded to third parties without a lawful basis.
SECTION 2 – CONSENT
How do you get my consent?
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions (where applicable)
- Your explicit consent
SECTION 8 – SECURITY
We follow industry best practices to protect your personal information. Credit card information is encrypted using SSL and stored with AES-256 encryption.
No transmission method over the Internet or storage is 100% secure, but we follow all PCI-DSS and GDPR security obligations.
SECTION 9 – DATA RETENTION
We retain personal data only as long as necessary to:
- Complete your transactions
- Provide our services
- Comply with legal obligations
- Resolve disputes or enforce agreements
Once no longer required, data is securely deleted or anonymized.
SECTION 10 – COOKIES
We use cookies to enhance your experience and support core functionality, analytics, and advertising. Some cookies are essential; others require your consent.
See our Cookie Policy for full details and options to manage or withdraw cookie preferences.
SECTION 11 – DATA SUBJECT RIGHTS (GDPR + US STATES)
Depending on your jurisdiction, you may have rights including:
- Access to your personal data
- Correction of inaccuracies
- Deletion of your data (“Right to be Forgotten”)
- Data portability
- Restriction or objection to processing
- Opt-out of targeted advertising or profiling
- Withdrawal of consent (where applicable)
To exercise any of these rights, email privacy@drgolly.com. We will respond within the legally required timeframe.
If you are in the EU or UK and are dissatisfied, you may lodge a complaint with your local data protection authority.
SECTION 12 – CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal data we collect, use, share, or sell
- Request deletion of your personal data
- Correct inaccurate personal data
- Opt out of the sale or sharing of personal data
- Limit the use of sensitive personal information
- Not be discriminated against for exercising your rights
We do not sell personal data, but we may share it for targeted advertising purposes.
Submit requests by contacting privacy@drgolly.com.
SECTION 13 – YOUR U.S. STATE PRIVACY RIGHTS
Residents of Virginia, Colorado, Utah, and Connecticut may also have the right to:
- Access and delete personal data
- Correct inaccuracies
- Opt out of profiling and targeted ads
- Request data portability
Please email privacy@drgolly.com to make a request.
SECTION 14 – DO NOT SELL OR SHARE MY PERSONAL INFORMATION
We may use your personal information for targeted advertising via platforms like Meta (Facebook/Instagram). This may be considered a “share” under California law.
You have the right to opt out. To do so:
- Adjust your cookie preferences via the [Cookie Settings] link or banner.
- Use a browser that supports the Global Privacy Control (GPC).
- Contact us at privacy@drgolly.com with the subject line “Do Not Sell or Share My Personal Information.”