Privacy Policy

Welcome to Galaxio. We are committed to protecting your personal data and respecting your privacy. This policy explains how Galaxio ("we," "us," or "our"), processes the personal data of our website visitors, brand clients, and our network of influential creators (The Galaxio Network).

Galaxio is the data controller responsible for your personal data.

Contact Details:

• Name: Galaxio Ltd
• Email: Contact@galaxio.co.uk
• Address: 30 churchill place, canary wharf

We collect and process various types of personal data depending on your relationship with Galaxio.

Category of Individual

Type of Data Collected

Source of Data

Website Visitors

Usage Data (IP address, browser type, pages viewed, time spent on site), Cookie Data, Location Data (approximate).

Automatically via website technology and analytics tools (e.g., Google Analytics).

Brand Clients & Business Contacts

Identity Data (Name, Job Title), Contact Data (Business email, Phone number), Financial Data (Payment/billing details).

Directly from you via forms, emails, or contracts (B2B).

Influencer Creators (The Galaxio Network)

Identity Data (Full Name, Age), Contact Data (Email, Phone, Home Address for contracts/shipments), Financial Data (Bank details for payment), Creator Performance Data (Follower counts, audience demographics, engagement rates, content niche, social media handles/links).

Directly from you (Creator Application/Contract) and Publicly available social media platforms.

Marketing Subscribers

Contact Data (Email Address, Preferences).

Directly from you via website sign-up forms.

Under UK GDPR, we must have a lawful basis to process your personal data.

Purpose of Processing

Lawful Basis for Processing (UK GDPR)

To onboard and manage Influencer Creators (Contracts, payments, briefing)

Contract: Necessary for the performance of the contract between Galaxio and the Creator.

To source and propose Creators to Brand Clients (Sharing Creator Performance Data)

Legitimate Interest: To effectively run our agency business by matching creators with campaigns, balanced against the Creator’s public-facing data.

To manage and fulfil Brand Client Campaigns (Billing, reporting, project management)

Contract: Necessary for the performance of the contract with our Brand Clients.

To improve our website and services (Analytics, troubleshooting, testing)

Legitimate Interest: To define our customer types, keep our website updated, and develop our business.

To send marketing communications (Newsletters, agency updates)

Consent: Where you have explicitly opted-in (for consumer data). Legitimate Interest: Where permissible under PECR (e.g., B2B marketing with soft opt-in).

To comply with legal obligations (Tax, reporting to regulatory bodies)

Legal Obligation: Necessary to comply with a legal or regulatory duty.

We may share your personal data with the following parties:

• Our Core Team: Only the specific Galaxio employees/contractors (Digital Marketing Expert, Influencer Manager, etc.) who need the data to perform their job duties.
• Brand Clients: We share Creator Performance Data (social handles, follower stats, engagement rates, niche) with Brand Clients to secure campaign work.
• Third-Party Service Providers: Such as payment processors, email service providers, accountants, and cloud storage providers (e.g., Google Cloud, Xero).
• Legal/Regulatory Authorities: Where we are legally obliged to do so.

We are a UK-based company. However, our service providers (e.g., cloud platforms, analytics tools) may process data outside of the UK or the European Economic Area (EEA).

Whenever we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

1. We transfer data to countries deemed to provide an adequate level of protection for personal data.
2. We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to those employees, agents, and third parties who have a business need to know.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain financial records for six years, as required by HMRC. Creator and Client contract data is typically retained for the duration of the relationship plus two years, or as long as required to resolve legal disputes.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include:

• The right to be informed about how your data is used (this policy).
• The right of access to your personal data.
• The right to rectification if your data is inaccurate or incomplete.
• The right to erasure (The "Right to be Forgotten").
• The right to restrict processing of your personal data.
• The right to data portability (transfer your data to another party).
• The right to object to processing based on legitimate interests or direct marketing.
• The right to withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of the rights set out above, please contact us at [Insert Dedicated Privacy Policy Email Address]. We aim to respond to all legitimate requests within one month.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

Our website uses cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Note that if you disable or refuse cookies, some parts of the website may become inaccessible or not function properly. We use an industry-standard cookie banner to gain explicit consent for non-essential cookies.