Privacy Policy

1) Who we are (Controller) and how to contact us

Galaxyway Limited (UK) is the data controller responsible for your personal information.

Contact (privacy requests): info@galaxyway.ai
(You can also contact us via the Contact page form.)

You also have the right to complain to the UK Information Commissioner's Office (ICO).

2) Personal information we collect

A) Information you provide to us — when you fill in forms, book a consultation, or contact us, we may collect:

• Identity & contact details
• Project details
• Communication data
• Marketing preferences

B) Information we collect automatically (technical/device data) — when you browse our site, we may collect:

• IP address, browser type, device type, operating system
• approximate location derived from IP (e.g., city/region)
• referral source (e.g., search engine or campaign)
• pages viewed, clicks, scrolls, and general interaction patterns
• cookies and similar technologies (see section 6)

C) Information from third parties — we may receive limited information via scheduling tools, payment processors, and analytics providers.

3) How we use your personal information (purposes)

We use personal data to:

• respond to enquiries
• deliver services
• manage our relationship
• improve our website
• support security and fraud prevention
• send marketing (optional)

4) Our lawful bases for processing

Under the UK GDPR, we rely on the following lawful bases (depending on context): Contract, Legitimate interests, Consent, and Legal obligation.

5) How we share personal information

We only share personal information where needed for business operations and delivery, including with:

A) Service providers (processors) — examples may include:

• Hosting / CDN / security
• Database / infrastructure
• Email delivery
• Analytics
• Payments

These providers process data under contracts designed to protect personal data and restrict how it can be used.

B) Legal and compliance — we may share information if required to comply with law, regulation, or lawful requests, or to protect our rights, users, and systems.

6) Cookies and analytics

We use cookies and similar technologies for essential functionality and for performance/analytics. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

7) International data transfers

Some of our service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as contractual protections and recognised transfer mechanisms) to protect personal data.

8) How long we keep your information (retention)

We keep personal data only as long as necessary for the purposes in this policy, including:

• Enquiries / leads — up to 24 months
• Client/project records — 6–7 years
• Marketing — until you opt out
• Technical logs/security records — up to 12 months

We may anonymise data and keep it in aggregated form (where it no longer identifies you).

9) Your rights

Depending on your location and applicable law, you may have rights including:

• access to your data
• correction of inaccurate data
• deletion (erasure) in certain cases
• restriction of processing
• objection to processing (especially for marketing)
• data portability (where applicable)
• the right to complain to the ICO

To exercise rights, contact us at info@galaxyway.ai.

10) Security

We use appropriate technical and organisational measures to protect personal data, such as access controls, least-privilege permissions, encryption where appropriate, monitoring, and secure configuration practices. However, no system is 100% secure, and we cannot guarantee absolute security.

11) Children's privacy

Our website and services are not intended for children. We do not knowingly collect personal data from children via our website. If you believe a child has provided personal data to us, please contact us so we can delete it.

12) Third-party links

Our website may link to third-party sites. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

13) Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Please review this page periodically to stay informed about how we protect your information.