PRIVACY POLICY
LLP "Galactic Group"
Effective Date: 06.05.2026
1. Introduction
Welcome to the website of LLP "Galactic Group" ("we", "us", or "our") — an event agency based in Almaty, Republic of Kazakhstan. We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains what personal information we collect through our website at https://galacticgroup.agency, how we use it, and what rights you have.
We are committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR") where applicable, including in relation to personal data of individuals located in the EU or EEA, as well as with the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" dated 21.05.2013 No. 94-V in relation to residents of Kazakhstan.
2. Data Controller
LLP "Galactic Group"
050040, Republic of Kazakhstan, Almaty, Bostandyk district, Satpayev street, 30/2, office 111
Email: hello@galacticgroup.agency
Website: https://galacticgroup.agency
3. What Personal Data We Collect
3.1 Data You Provide Directly
When you submit a contact or inquiry form on our website, we may collect:

• Full name;
• Email address;
• Phone number (if provided);
• Company name and event details (if provided);
• Any other information you choose to include in your message.

When you subscribe to our newsletter or mailing list, we collect:

• Full name;
• Email address.

3.2 Data Collected Automatically
Our website, built on the Tilda platform and using Google Analytics, may automatically collect certain technical data when you visit, including:

• IP address;
• Browser type and version;
• Pages visited and time spent;
• Referring website or traffic source;
• Device type and operating system.

Where applicable, we use Google Analytics with IP anonymization enabled.
For more details, please refer to Tilda's Privacy Policy: https://tilda.cc/privacy/ and Google's Privacy Policy: https://policies.google.com/privacy.
4. Legal Basis for Processing
We process your personal data on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)) — for newsletter subscriptions and non-essential cookies;
• Legitimate interests (Art. 6(1)(f)) — to respond to your inquiries and improve our website;
• Contract performance (Art. 6(1)(b)) — when processing is necessary to provide our services.

For residents of Kazakhstan, processing is carried out in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" dated 21.05.2013 No. 94-V, on the basis of your consent or other grounds provided by law.
5. Cookies and Tracking
Our website, hosted on Tilda, uses cookies and similar technologies to ensure functionality and gather usage statistics.
Non-essential cookies, including analytics and preference cookies, are used only with your consent where required by applicable law.
5.1 Types of Cookies

• Essential cookies — required for the website to function correctly;
• Analytics cookies (Google Analytics) — used to understand how visitors interact with the site (requires your consent);
• Preference cookies — to remember your settings and choices (requires your consent).

You can manage or withdraw your cookie consent at any time through the cookie settings widget on our website. Disabling cookies may affect the functionality of certain parts of the website.
6. How We Use Your Data
We use the personal data we collect to:

• respond to your inquiries and project briefs;
• send newsletters and marketing communications (only with your consent);
• understand how our website is used and improve its content;
• comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
7. Data Sharing and Third Parties
We may share your data with trusted service providers who help us operate our website and business, including:

• Tilda Publishing — website hosting and page building platform;
• Google LLC (Google Analytics) — website traffic analytics;
• Email service providers — for sending newsletters and inquiry responses.

All third-party providers are required to handle your data in accordance with applicable data protection laws.
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside the Republic of Kazakhstan or the European Economic Area (EEA), including by service providers such as Google LLC and Tilda Publishing.
Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where applicable.
9. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this Policy:

• Contact form submissions — up to 2 years from the date of inquiry;
• Newsletter subscriber data — until you unsubscribe, withdraw your consent, or the mailing list is discontinued;
• Technical/analytics data — as per Tilda's and Google Analytics' data retention settings.

Once data is no longer needed, it is securely deleted or anonymised.
10. Your Rights
10.1 Rights of EU/EEA Data Subjects (GDPR)
If you are located in the EU/EEA, you have the following rights:

• Right of access — request a copy of the personal data we hold about you;
• Right to rectification — ask us to correct inaccurate or incomplete data;
• Right to erasure — request deletion of your data ('right to be forgotten');
• Right to restriction — ask us to limit how we process your data;
• Right to data portability — receive your data in a structured, machine-readable format;
• Right to object — object to processing based on legitimate interests or direct marketing;
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
10.2 Rights of Kazakhstan Residents
If you are a resident of the Republic of Kazakhstan, you have the right to:

• receive information about the processing of your personal data;
• request correction, blocking, or deletion of your personal data;
• withdraw your consent to the processing of personal data;
• seek protection of your rights through the authorised body — the Committee for Information Security of the Ministry of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan.

To exercise any of these rights, please contact us at hello@galacticgroup.agency. We will respond within 30 days. To unsubscribe from our newsletter, please use the unsubscribe link included in every marketing email we send.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. Such measures may include SSL encryption, restricted access controls, and secure hosting infrastructure.
However, no method of data transmission over the internet or electronic storage can be guaranteed to be 100% secure.
12. Children's Privacy
Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted their data through our website, please contact us at hello@galacticgroup.agency and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Effective Date" at the top of this page will be revised accordingly. We encourage you to review this Policy on our website from time to time.
14. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact us:
LLP "Galactic Group"
050040, Republic of Kazakhstan, Almaty, Bostandyk district, Satpayev street, 30/2, office 111
Email: hello@galacticgroup.agency
Website: https://galacticgroup.agency
© 2026 LLP "Galactic Group". All rights reserved.