Galaxy Store Privacy Notice


Effective Date: [Sep 5, 2025]

Samsung Electronics Co., Ltd. (“Samsung”) knows how important privacy is to our customers. Samsung is the data controller for Galaxy Store (the “Service”). We created this Privacy Notice to make sure you understand how we collect and use your personal information in relation to the Service.

Our Privacy Policy at https://account.samsung.com/membership/terms/privacypolicy also applies to your use of the Service. Our Privacy Policy contains more information about how Samsung uses your personal information. It also includes information about your rights and how to contact us. Please read our Privacy Policy in addition to this Privacy Notice. However, this Privacy Notice shall always prevail over the Privacy Policy in relation to how we use your information for the Service.

WHAT PERSONAL INFORMATION DO WE COLLECT?


Through the Service, Samsung processes personal information about you in a variety of ways.

Personal Information You Provide Directly


• Samsung account information, such as your Samsung account ID, nickname, and password;
• Contact and biographical information, such as name, email, date of birth, and phone number;
• Information related to event participation, such as when you choose to participate in an event or promotion offered through Galaxy Store, we collect information you submit to participate in such an event or promotion, such as your name, telephone number, address, email and other information you submit; and
• Customer-service related information, such as when you contact customer service, your communications, including any information you provide regarding your identity and the product or service you're contacting us about.

Personal Information About Your Use of the Service


In addition to the personal information you provide, we will collect personal information about your use of the Service through software on your devices and by other means.
We will collect:

• Device and software information, such as device type and model, country, country specific code, telecommunication provider information, language setting, software information, including operating system version, mobile country code/mobile network code, device identifiers and other unique identifiers (such as IP address, IMEI and Universal Unique ID), and the app version you use to access Galaxy Store;
• Diagnostic, technical, error and usage information, including how, when and for how long you use Galaxy Store, including when Galaxy Store or any app downloaded through Galaxy Store was installed or deleted and when you resume and suspend game apps. We will collect information related to what events or promotions you participate in. We will collect information related to vouchers, event codes or other promotions you have and use, including whether you have registered with Samsung Points and Samsung Rewards. We will also collect information about your use of Galaxy Store, including how you interact with content offered through Galaxy Store, such as what games you have played, what games we recommend for you, when you start, stop, restart, or finish a game, what kinds of custom events (such as a tutorial or level completion and item purchase) in the games you play, what game and game videos you may be interested in, and information stored on cookies and web beacons we have set on your device;
• Transaction-related information, such as information related to purchases of apps and subscriptions (including what was purchased, for how much, when and the payment method). When you apply for a refund, we will also collect additional information (depending on how the purchase was made) such as bank account name and number, issuing bank, contact information (such as phone number and Samsung account ID), product or service purchased, date of payment, payment amount, payment method, approval number and reason for cancellation or refund; and
• Information related to our third-party games and content streamed through the Service, such as what games and content you play, and how, when and for how long you use the games and content. This may include log data produced within such games and content.

We may also collect other personal information about you, your devices and apps, and your use of the Service in ways that we describe to you at the time of collection or otherwise with your consent.

HOW DO WE USE YOUR PERSONAL INFORMATION?


How we use the personal information we collect, and the legal basis for each use is outlined below:

Purpose of processing Legal Basis
• Identifying and authenticating you
• Providing you with the Service, such as allowing you to download apps offered through the Service
• Providing you with customised content, such as recommending content for you
• Allowing you to interact with other Samsung and third-party content
Keeping our promise to you
(performance of contract)
GDPR Article 6(1)(b)
• Operating, evaluating, and improving the Service and our business (including developing new products and services; enhancing and improving our products and services; managing our communications; analyzing our products, services and customer base; conducting market research; performing data analytics; and performing accounting, auditing and other internal functions)
• Responding to your requests, instructions and inquiries
• Maintaining adequate security measures
• Protecting against liability, including complying with industry standards and enforcing our policies
To promote our business interests (legitimate interest)
GDPR Article 6(1)(f)
• Complying with applicable legal requirements, relevant industry standards, and our policies
• Protecting against, identifying, and preventing fraud and other criminal activity, claims and other liabilities
To comply with the law, regulatory obligations and legal processes
GDPR Article 6(1)(c)
• Providing marketing notifications (such as via push notifications, emails, and text messages) With your consent
GDPR Article 6(1)(a)

Please note: you can withdraw your consent at any time

WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?


We will disclose your personal information internally within our business and to the following entities, but only for the purposes described above.

Business partners: partners who we work together with to provide you with the Service, such as third-party game providers who allow you to make purchases within their services. These business partners control and manage your personal information;
Service providers: carefully selected companies that provide services for or on behalf of us, such as service providers who maintain and operate Galaxy Store on our behalf. These providers are also committed to protecting your personal information;
Other parties when required by law or as necessary to protect the Service or users: for example, it may be necessary by law, legal process, or court order from governmental authorities to disclose your personal information. They may also seek your personal information from us for the purposes of law enforcement, national security, anti-terrorism, or other issues that are related to public security;
Other parties in connection with corporate transactions: we may disclose your personal information to a third party as part of a merger or transfer, acquisition or sale, or in the event of bankruptcy; and
Other parties with your consent or at your direction: in addition to the disclosures described in this Privacy Notice, we may share your personal information with third parties when you separately consent to or request such sharing.

WHERE DO WE SEND YOUR PERSONAL INFORMATION?


Your use of the Service will involve the transfer, storage, and processing of your personal information to other countries, where necessary; such countries include, without limitation, countries in the European Economic Area, the Republic of Korea and the United States of America. Some countries have been determined by the European Commission or relevant data protection authority to adequately protect your personal information, you can find a list of those countries here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. Please note that the data protection and other laws of countries to which your personal information may be transferred might not be as comprehensive as those in your country.

We will take appropriate measures, in compliance with applicable law, to ensure that your personal information remains protected. Such measures may include the use of Standard Contractual Clauses, International Data Transfer Agreement or equivalent to safeguard the transfer of personal information outside of the EEA and the United Kingdom. To request more information, please contact us by the methods outlined in the Contact Us section of this Privacy Notice.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATIONH?


We won’t keep your personal information for longer than is necessary for the purpose for which it was collected. This means that personal information will be destroyed or erased from our systems when it’s no longer required.

How long your personal information will be retained depends on the legal basis relied upon to process your data. For example, personal information we process to perform our contract with you requires us to keep the data throughout the time you use the Service. As long as you are an active user of the Service, we will retain and process this personal information. Personal information such as your account information and device information and identifiers fall into this category.

Personal information we process to promote our business interests, such as your usage of the Service, is only kept for as long as needed for the purposes for which it was collected. For example, this personal information may be collected to perform analytics so we can develop improvements to the Service, or we may process personal information to keep a record of inquiries you made through or about the Service to improve your customer service experience.

Please note, although we aim to retain your personal information for the time period described above, your personal information may be processed longer pursuant to applicable law. For example, if a law requires that we keep some of your personal information, we will comply and retain that data until the required retention period expires.

HOW DO WE KEEP YOUR INFORMATION SECURE?


We take data protection very seriously. We have put in place physical and technical safeguards to keep the personal information we collect secure. However, please note that although we take reasonable steps to protect your personal information, no website, internet transmission, computer system or wireless connection is completely secure.

WHAT ARE YOUR RIGHTS?


Your personal information belongs to you. In accordance with applicable law, you have the right to ask us to provide details about what we’ve collected and you can ask us to delete it or correct any inaccuracies. You can also ask us to restrict or limit the processing, sharing or transfer of your personal information, as well as to provide you with the personal information that we’ve collected so you can use it for your own purposes. You have the right to data portability which means you can ask us to provide your personal information to you or to a third party in a machine-readable format. You can also object to your personal information being processed and withdraw your consent. However, requesting the deletion of your personal information may also result in a loss of access to the Service. We won’t delete data that we’re required by law to retain. You also have the right to object to processing on the basis of legitimate interests, and to object to processing for marketing purposes, including profiling.

To make a request concerning your rights or to make an inquiry, contact us using the methods outlined in the CONTACT US section of this Privacy Notice.

CONTACT US


You can contact us to update your preferences, exercise your rights, submit a request, or ask us questions.

You can raise a request via our privacy support page here: https://www.samsung.com/request-desk.

If you are within the EEA and prefer to write to us, you can contact us at:

European Data Protection Officer
Samsung Electronics (UK) Limited
Samsung House, 2000 Hillswood Drive, Chertsey, Surrey KT16 0RS, UK

If you are outside the EEA, you can use this address:

Data Controller
Samsung Electronics Co., Ltd.
129, Samsung-ro, Yeongtong-gu,
Suwon-si, Gyeonggi-do 16677, Republic of Korea

You can lodge a complaint with the relevant supervisory authority if you consider that our processing of your personal information infringes applicable law. Contact details for all EU and EEA supervisory authorities can be found at https://edpb.europa.eu/about-edpb/board/members_en.

If you are in the UK, you can find the contact details for the UK supervisory authority at https://ico.org.uk/global/contact-us/.

UPDATES TO THIS PRIVACY NOTICE


This Privacy Notice may be updated to let you know about changes in how we collect and process your information in the Service or changes in related laws. The date when the document was last updated is shown at the top of this Privacy Notice.