Covenant compliance
Privacy Policy
Last updated: 20/10/2026
1. Who we are
Galago Compliance Ltd (“Galago”, “we”, “us”) is registered in England and Wales (company number 17525669), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For any privacy question, contact privacy@galagocompliance.com.
2. Scope of this policy
This policy explains how we handle personal data when you visit our website, contact us, request information, or work with us as a client contact. When we process information inside the Galago platform on behalf of our clients, we act as their data processor under a separate data processing agreement, and our client’s own privacy notice applies.
3. The information we collect
Contact and enquiry details: name, job title, company, work email, phone number and the content of your message.
Client account information: contact details of the people at our clients who use or manage the service, and records of our communications.
Marketing preferences: whether you’ve chosen to receive updates from us.
Website usage data: anonymous analytics, such as pages visited and approximate location, collected without cookies, as described in section 10.
Information from other sources: business contact details from public sources such as company websites, LinkedIn or Companies House, used for business-to-business outreach.
4. How and why we use it
Purpose
Legal basis
Responding to enquiries and requests
Our legitimate interest in responding to people who contact us
Providing and managing our services to clients
Performing our contract with the client, and our legitimate interests
Business-to-business marketing to work email addresses
Our legitimate interest in promoting our services (you can opt out at any time)
Improving our website and services
Our legitimate interests
Meeting legal, tax and regulatory obligations
Legal obligation
5. Who we share it with
We share personal data only with trusted providers who help us run our business, such as website hosting, platform hosting, email, customer relationship management and IT security providers. They act only on our instructions, under contracts that protect your data. We may also share data with professional advisers, or where the law requires it. We never sell personal data.
6. International transfers
Some of our providers may process data outside the UK. Where they do, we use appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
Enquiries and requests: up to 2 years after our last contact with you.
Client account records: for the length of the contract plus 6 years.
Marketing data: until you opt out. We then keep a minimal record so we don’t contact you again.
8. Your rights
You have the right to:
access your personal data
have it corrected
have it erased
restrict or object to how we use it, including objecting to marketing at any time
receive a copy of it in a portable format
Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email privacy@galagocompliance.com. We will respond within one month.
9. Complaints
If you’re unhappy with how we’ve handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
10. Cookies
Our website does not use cookies other than those strictly necessary for it to work.
11. Security
We use appropriate technical and organisational measures to protect personal data. See our Security page for details.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.