Privacy Policy
Last updated: April 24, 2026
Salara Advisory Group, LLC ("Gale," "we," "us") operates shopwithgale.com. This policy explains what we collect, who we share it with, and how to exercise your rights. It is written for a US audience; Gale is not currently offered outside the United States.
Information We Collect
Account information
When you create an account we collect your email address and nursing role (e.g. RN, LPN, NP). We use this to personalize discounts, verify eligibility where brands require it, and send account-related messages.
Conversation data
We store your conversations with Gale to provide and personalize the service, including generating recommendations that may include affiliate links. You can delete conversation history at any time from your profile settings.
Usage and device data
We collect basic analytics such as pages visited, search terms, features used, IP address, coarse location (country-level, from IP), browser type, and referrer. This is processed only when you have accepted the Analytics cookie category.
Cookies and similar technologies
Gale uses first-party cookies that are strictly necessary for the site to work, and optional cookies for analytics and affiliate attribution. You can review, change, or revoke your choices anytime via the Cookie Preferences link in the footer of every page, or by clicking .
What Gale does NOT collect
- Protected Health Information (PHI)
- Clinical data of any kind
- Patient information
- Data from EHR, EMR, or any hospital system
Gale has no integration with any clinical system and no plans to build one.
Cookies and Third Parties
We group cookies and trackers into four categories. Only the first is always on. You control the rest.
Strictly necessary (always on)
| Provider | Purpose | Retention |
|---|---|---|
| Gale (first-party) | Session, sign-in, role memory, consent record | Up to 12 months |
| Amazon Web Services (CloudFront, Route 53) | Content delivery, security, DDoS protection | Session |
| vanilla-cookieconsent | Remembering your consent choices | 12 months |
Analytics (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Google Analytics 4 (Google LLC) | Page-level usage, anonymized traffic patterns | 14 months |
We run Google Analytics with Consent Mode v2, which means Google only receives pageview pings if you have opted in to the Analytics category. IP addresses are truncated on Google's servers.
Marketing and affiliate attribution (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Rakuten Advertising | Attribute purchases to Gale so we get paid commission | Up to 30 days |
| Impact Tech, CJ Affiliate, and other affiliate networks Gale joins | Same — affiliate click attribution | Up to 30 days |
Preferences (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Gale (first-party) | Remembering small UI preferences, e.g. your catalog filter state | 12 months |
| Brandfetch | Brand logo delivery (image-only, no cookies set) | N/A |
Sign-in SDKs (loaded on /login and /onboarding only)
When you visit the sign-in page, we lazy-load Google Identity Services (accounts.google.com) and the Apple Sign In JS SDK (appleid.cdn-apple.com). These are only loaded if you land on a sign-in page, and only to complete authentication. They are not loaded anywhere else on Gale.
How We Use Your Information
- Provide and personalize clinician-verified discount discovery
- Maintain your account and keep you signed in
- Send you product updates and essential service messages
- Measure which features and discounts are useful (analytics category only)
- Attribute affiliate clicks to Gale so brands pay us commission (marketing category only)
- Detect fraud and protect the service
- Comply with legal obligations
How We Share Information
We do not sell your personal data in exchange for money. We share data with the following categories of third parties strictly as needed:
- Service providers: AWS (hosting, storage), Anthropic and AWS Bedrock (LLM responses in chat), Postmark / Resend (transactional email), all acting as processors under written agreements.
- Analytics: Google, only if you have accepted the Analytics category.
- Affiliate networks: Rakuten and similar networks, only if you have accepted the Marketing category. Under California law, this cookie-based attribution can be classified as "sharing" of personal information, which is why Gale offers a dedicated Do Not Sell or Share My Info opt-out.
- Legal and safety: Law enforcement or regulators when required by valid legal process.
Your Privacy Rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, and other states with comprehensive privacy laws have the right to:
- Know what personal information we collect and how we use it
- Access a copy of the personal information we have about you
- Correct inaccurate personal information
- Delete your personal information
- Opt out of the sale or sharing of personal information
- Opt out of targeted advertising
- Not be discriminated against for exercising these rights
To exercise any of these rights, email privacy@shopwithgale.com. We will verify the request and respond within the timeframe required by the applicable law (typically 30-45 days).
Global Privacy Control (GPC)
Gale honors the Global Privacy Control browser signal as a valid opt-out of the sale or sharing of personal information, as required by California, Colorado, Connecticut, and other state laws. If your browser sends a GPC signal, Gale will not show you a consent banner and will treat all non-essential cookie categories as denied.
Appealing a decision
If we decline a privacy-rights request, you may appeal by replying to our response email. If you remain unsatisfied, you may contact your state Attorney General.
Data Retention
We keep account data for as long as your account is active, plus up to 24 months for dispute resolution and legal compliance. Conversation data is retained for up to 12 months by default, or until you delete it. Cookie-based data follows the retention periods in the tables above.
Children
Gale is not directed to children under 16 and we do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest on AWS, least-privilege access controls, and routine security review. No system is perfectly secure; please report any suspected vulnerability to security@shopwithgale.com.
Changes to This Policy
When we make material changes we will update the "Last updated" date and notify signed-in users by email or in-app notification.
Contact
Salara Advisory Group, LLC
Email: privacy@shopwithgale.com