Privacy Notice

Who is responsible for your data

Galaxa for Export and Trade, 6 October City, Giza, Egypt, is responsible for the personal data collected through this website unless another party is identified for a specific processing activity.

For privacy questions or requests to exercise your data rights, contact Contact@galaxaexport.com.

Personal data we collect

The data depends on how you interact with us. It may include your name, work email, phone number, company, country, job or buyer context, product requirement, specification, packaging, volume, destination, timing, certificates, commercial notes, manufacturer information, website address, export history, and other information you choose to submit.

For security, attribution, and form operation, we may also process technical data such as a shortened cryptographic hash derived from the connection IP address, browser user agent, page and campaign attribution data, consent status, and form submission reference.

Where the data comes from

Most personal data is provided directly by you. Business contact data may also come from your organisation, a referral, correspondence with us, or public business sources such as company websites, professional networks, public registries, industry directories, and trade event material where lawful.

Why we process personal data

We process personal data to respond to enquiries, assess sourcing or manufacturer requests, prepare and operate commercial engagements, coordinate with relevant manufacturers or service providers, maintain business records, protect the website and forms from abuse, comply with legal obligations, and establish or defend legal rights.

Depending on the activity, the legal basis may be your consent, steps requested before entering a contract, performance of a contract, a legal obligation, the exercise or defence of legal rights, or a legitimate interest that does not override your rights and freedoms.

Submitting an enquiry does not automatically subscribe you to promotional marketing. Electronic direct marketing is handled separately and only where the applicable legal basis and required permissions are in place.

Who may receive personal data

Access is limited to Galaxa personnel and contractors who need the information for the relevant business purpose. We may share only the information necessary for an engagement with selected manufacturers, laboratories, inspection providers, customs or logistics providers, professional advisers, or other appointed service providers.

Website and form infrastructure currently includes Cloudflare for website delivery, security, and Turnstile verification, Supabase for lead storage, Resend for transactional email, and Google Tag Manager and Google Analytics only after analytics consent.

International processing and transfers

Website lead records are currently hosted through Supabase in Ireland. Cloudflare, Resend, and Google may process limited technical or communications data through international infrastructure according to the services used.

Cross border processing is subject to the Egyptian Personal Data Protection Law and any applicable licence, permit, exception, contractual safeguard, or other requirement issued by the Personal Data Protection Center. The countries and providers involved may change when infrastructure changes, and this notice will be updated when a material change affects the processing described here.

Retention

We retain personal data only for as long as reasonably necessary for the enquiry, engagement, business recordkeeping, security, dispute handling, and applicable legal obligations. The exact period depends on the type of record and the relationship.

Analytics consent choices are stored in the browser for up to 180 days unless you change the choice earlier.

Your rights

Subject to applicable law and any lawful exceptions, you may request information about processing, access to your data, correction, erasure, restriction, objection, portability where applicable, or withdrawal of consent where consent is the legal basis.

Send a request to Contact@galaxaexport.com. We may need reasonable information to verify the request before acting on it. You may also lodge a complaint with Egypt's Personal Data Protection Center.

Analytics and cookies

Analytics storage is denied by default. Google Tag Manager and Google Analytics load only after you accept analytics. Advertising storage, advertising user data, and advertising personalisation remain disabled. Enquiry forms work when analytics is rejected.

You can change your analytics choice at any time through Cookie settings in the website footer. If analytics consent is withdrawn, the website removes the analytics cookies it can identify and reloads the page to apply the change.

Security and data sale

We use reasonable technical and organisational controls intended to protect personal data against unauthorised access, alteration, disclosure, or loss. No internet or storage system can be guaranteed absolutely secure.

Galaxa does not sell personal data.

Changes to this notice

We may update this notice when our processing, providers, services, or legal obligations change. The date shown on this page identifies the current published version.