Privacy Policy

1. General Information

This privacy policy explains how GALACTYC BRANDS LTD (hereinafter "we", "us", or "our") collects, uses, and protects your personal data when you visit our website or interact with us through various channels.

Controller:
GALACTYC BRANDS LTD
86a Leli Falzon St, NXR 2609, Naxxar, MALTA


If you have any questions regarding the processing of your personal data or wish to exercise your rights under data protection law, please contact us via our contact form.

We will respond to your inquiry as soon as possible and in accordance with applicable data protection regulations.

We take the protection of your data seriously and process your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Maltese data protection laws.

2. What Personal Data We Collect

We collect and process personal data that you provide to us or that is automatically collected through your interaction with our website.

Examples include:

  • Name, email address, phone number (when contacting us)

  • Message content (e.g., via contact forms or email)

  • IP address, browser type, access time, and visited pages (via server logs)

  • Device and usage data (via cookies and analytics tools)

3. Purpose and Legal Basis of Processing

We process your data for the following purposes:

  • To respond to your inquiries (Art. 6(1)(b) or (f) GDPR)

  • To fulfill contractual obligations (Art. 6(1)(b) GDPR)

  • To ensure security and optimize our website (Art. 6(1)(f) GDPR)

  • To comply with legal obligations (Art. 6(1)(c) GDPR)

  • For marketing and analytics purposes (with your consent, Art. 6(1)(a) GDPR)

4. Cookies and Tracking

We use cookies and similar technologies to make our site user-friendly and to analyze website usage.

You can manage your cookie preferences via your browser settings. Disabling cookies may limit certain functionalities.

Tools we may use:

  • Google Analytics

  • Meta (Facebook) Pixel

  • ConsentManager (for managing cookie consents)

5. Contact Forms & Communication

If you contact us (e.g., via email or form), we process your data only to respond to your inquiry. We do not use this data for other purposes unless explicitly permitted.

6. WhatsApp Business

If you contact us via WhatsApp, your data is processed to respond to your request. Your number, message, and any shared information will be stored accordingly.

Note: WhatsApp may transfer data outside the EU. Please refer to WhatsApp’s privacy policy for more information.

7. Data Transfers to Third Countries

Some services (e.g., Google, Meta, WhatsApp) may process data outside the European Economic Area. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

8. Data Storage and Retention

We store your personal data only as long as necessary for the purposes mentioned above or as required by law. After that, your data will be securely deleted.

9. Your Rights

As a data subject, you have the following rights:

  • Right to access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to lodge a complaint with a supervisory authority

You can contact us at any time at hello@galactycbrands.com to exercise your rights.

10. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

11. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in technology or legal requirements. The latest version will always be available on our website.

Last updated: 14 January 2026