Privacy Policy
Privacy Policy
Galactic UK Comp LTD
Introduction
Welcome to the Galactic Giveaways Privacy Policy.
Galactic UK Comp LTD respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, and safeguard your personal data when you visit our website, regardless of where you access it from. It also outlines your privacy rights and how the law protects you.
Purpose of This Privacy Policy
This Privacy Policy explains how Galactic UK Comp LTD collects and processes your personal data through your use of our website, including when you:
Sign up for our newsletter
Request information
Purchase products or services
Enter a raffle, prize draw, or competition
This website is not intended for children, and we do not knowingly collect personal data relating to children.
It is important that you read this Privacy Policy together with any other privacy notice we may provide when collecting or processing your personal data. This policy supplements other notices and is not intended to replace them.
Controller
Galactic UK Comp LTD is the data controller and is responsible for your personal data.
We have appointed a Data Privacy Manager to oversee compliance with this Privacy Policy. If you have any questions or wish to exercise your legal rights, please contact us using the details below.
Contact Details
Legal Entity Name: Galactic UK Comp LTD
Data Privacy Manager: Florin SoarePhone: +44 7425 413581
Changes to This Privacy Policy
We regularly review and update this Privacy Policy.
Last updated: 10/02/2026It is important that the personal data we hold about you is accurate and current. Please inform us of any changes during your relationship with us.
Our website may contain links to third-party websites, plugins, or applications.
We do not control these third-party sites and are not responsible for their privacy policies. We encourage you to read the privacy policy of every website you visit.
The Data We Collect About You
Personal data means any information that can identify an individual. It does not include anonymised data.
We may collect, use, store, and transfer the following categories of personal data:
Identity Data
First name, last name, username (or similar identifier), and date of birth.
Contact Data
Billing address, email address, and telephone number.
Financial Data
We do not collect or store financial data. Payments are processed by third-party providers including PayPal, Cashflows, and Stripe, who act as independent data controllers.
Transaction Data
Details of payments to and from you and products or services purchased.
Technical Data
IP address, login data, browser type and version, time zone, location, operating system, platform, and other technology used to access our website.
Profile Data
Username, password, purchases, and order history.
Usage Data
Information about how you use our website, products, and services.
Marketing and Communications Data
Your preferences for receiving marketing from us and your communication preferences.
Aggregated Data
We may collect, use, and share aggregated data (such as statistical or demographic data). This data does not directly or indirectly identify you and is therefore not considered personal data.
If aggregated data is combined with personal data in a way that identifies you, it will be treated as personal data in accordance with this policy.
Special Categories of Data
We do not collect:
Sensitive personal data (including race, ethnicity, religion, health data, sexual orientation, political opinions, biometric data, etc.)
Information about criminal convictions or offences
Prize Draws and Competitions
We collect the minimum personal data necessary to allow you to enter competitions and administer promotions. If you win, we may need to collect additional information to award your prize. You will be informed at that time.
If you fail to provide required personal data, we may be unable to fulfil our contract with you or process your competition entry.
Marketing
We aim to provide you with clear choices regarding the use of your personal data for marketing purposes.
Promotional Communications
We may use your Identity, Contact, Technical, Usage, and Profile Data to determine which products, services, or offers may interest you.
You will receive marketing communications from us if you have:
Requested information
Purchased goods or services
Entered a competition or prize draw
Not opted out of marketing communications
Third-Party Marketing
We will obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes.
Opting Out
You may opt out of marketing communications at any time by:
Clicking the unsubscribe link in any marketing email
Contacting us directly
Opting out of marketing will not affect transactional communications related to purchases or services.
Cookies
You may configure your browser to refuse some or all cookies, or to alert you when cookies are used. Disabling cookies may affect the functionality of certain parts of our website.
For more information, please refer to our Cookie Policy.
Change of Purpose
We will only use your personal data for the purpose for which it was collected unless we reasonably determine that a new use is compatible with the original purpose.
If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis for doing so.
We may process your personal data without your knowledge or consent where required or permitted by law.
Disclosure of Your Personal Data
We may share your personal data with:
Service providers (IT and system administration)
Professional advisers (lawyers, auditors, insurers, accountants)
Regulators and authorities (including HMRC and the Advertising Standards Authority)
Approved marketing providers (e.g., Text Global Limited, Mailchimp)
All Response Media Ltd. for campaign analysis and optimisation via TAG4ARM tracking cookies
We may also transfer personal data in the event of a business sale, merger, or acquisition.
All third parties are required to respect the security of your personal data and process it only in accordance with our instructions.
International Transfers
Some of our third-party providers may be located outside the UK. When transferring data internationally, we ensure appropriate safeguards are in place, including:
Transfers to countries deemed to provide adequate protection
UK-approved standard contractual clauses
Contact us for further information on international transfer safeguards.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.
Access to personal data is limited to those with a legitimate business need. We also have procedures in place to address suspected data breaches and will notify you and regulators where legally required.
Data Retention
We retain personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting, or reporting requirements.
Retention periods are determined based on:
Nature and sensitivity of the data
Risk of harm from misuse
Legal obligations
You may request deletion of your data in certain circumstances (see “Your Legal Rights”).
We may anonymise data for research or statistical purposes and use it indefinitely.
Your Legal Rights
Under UK data protection laws, you have the right to:
Legitimate Interests – To operate and improve our business while balancing your rights.
Performance of Contract – To fulfil contracts or take steps at your request.
Legal Obligation – To comply with applicable laws and regulations.
Request access to your personal data
Request correction of inaccurate data
Request erasure of your data
Object to processing (including direct marketing)
Request restriction of processing
Request transfer of your data
Withdraw consent at any time (where consent is relied upon)
To exercise any of these rights, please contact us.
Fees
No fee is usually required. However, we may charge a reasonable fee or refuse a request if it is clearly unfounded, repetitive, or excessive.
Identity Verification
We may request information to verify your identity before processing your request.
Response Time
We aim to respond within one month. If your request is complex, we will notify you if additional time is required.
Lawful Bases for Processing
We rely on the following legal bases:
Legitimate Interests – To operate and improve our business while balancing your rights.
Performance of Contract – To fulfil contracts or take steps at your request.
Legal Obligation – To comply with applicable laws and regulations.