Your Privacy, Considered Carefully

Policy Introduction

This policy applies to all visitors to galaferon.com and users of our event planning and entertainment services. We act as the data controller for personal data collected through our website and during our business activities. By using our website, you acknowledge the practices described in this policy.

This policy is effective as of 8 September 2026 and may be updated periodically. We will notify you of any material changes by posting the updated policy on this page. Your continued use of our services after changes constitutes acceptance of the revised policy.

Data We Collect

Information You Provide

We collect personal data that you voluntarily provide when you contact us, request a quote, or engage our services.

• Contact details: name, email address, phone number.
• Event details: event date, venue, number of guests, preferences.
• Payment information: processed securely by third-party providers; we do not store full card details.

Information Collected Automatically

When you visit our website, we automatically collect certain technical data through cookies and similar technologies.

• Device and browser information: IP address, browser type, operating system.
• Usage data: pages visited, time spent, referring URLs.
• Cookie identifiers as described in our Cookie Policy.

Information from Third Parties

We may receive personal data about you from third-party sources, such as social media platforms or business partners, only where permitted by law. This may include social media interactions if you engage with our content, or referral information from event venues or partners.

How We Use Your Data

Service Provision

We use your personal data to provide and manage our event planning and entertainment services. This includes responding to inquiries and providing quotes, planning and executing events according to your specifications, and communicating with you about your event.

Marketing and Communication

With your consent, we may send you promotional materials about our services, special offers, or events. You can opt out at any time by clicking the unsubscribe link or contacting us. We do not sell your personal data to third parties for marketing purposes.

Legal Obligations and Legitimate Interests

We process personal data to comply with legal obligations and pursue legitimate business interests, such as improving our services and preventing fraud. This includes record-keeping for tax and accounting purposes, enhancing website functionality and user experience, and ensuring the security of our systems.

Data Sharing and Disclosure

Service Providers

We share personal data with trusted third-party service providers who assist us in operating our website and delivering our services.

• Payment processors, email service providers, and CRM platforms.
• These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose personal data if required by law, court order, or governmental regulation. This includes complying with legal processes or enforcing our agreements, and protecting the rights, property, or safety of Galaferon, our clients, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction. We will notify you via email or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help us remember your preferences and understand how you use our site. We use both session cookies (temporary) and persistent cookies (remain until expiry). We also use similar technologies like web beacons and pixels.

Types of Cookies We Use

We use the following categories of cookies:

• Strictly necessary cookies: essential for website functionality.
• Performance cookies: collect anonymous usage data to improve the site.
• Functionality cookies: remember your choices (e.g., language, region).
• Targeting/advertising cookies: used to deliver relevant ads (only with your consent).

Managing Cookies

You can control cookies through your browser settings or our cookie consent tool. Most browsers allow you to block or delete cookies. Disabling certain cookies may affect website functionality. For more details, see our Cookie Policy.

Data Security

Security Measures

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, alteration, disclosure, or destruction.

• Encryption of data in transit and at rest.
• Access controls and regular security reviews.
• Staff training on data protection.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods vary depending on the type of data and legal obligations. When data is no longer needed, we securely delete or anonymise it.

Your Rights

Your Data Protection Rights

Under UK data protection law, you have the following rights regarding your personal data:

• Right to access: request a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data in certain circumstances.
• Right to restrict processing: limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in the Contact section below. We will respond to your request within one month of receipt. We may need to verify your identity before processing certain requests.

International Data Transfers

Transfers Outside the UK

Your personal data may be transferred to and processed in countries outside the United Kingdom, including the European Economic Area (EEA) and other jurisdictions. We ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions. You may request details of these safeguards by contacting us.

Changes to This Policy

Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The effective date at the top of this page will be updated accordingly. We encourage you to review this policy periodically for the latest information.