Privacy and Cookie Policy

This Privacy and Cookies Policy, together with our Terms and Conditions and any other documents referred to in it, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read this Privacy and Cookies Policy carefully to understand our practices regarding your personal data and how we will treat it.

We will only use your personal data in the manner set out in this Privacy and Cookies Policy. We will only use your personal data in a fair and lawful manner. We will only collect personal data where it is necessary for us to provide our services, manage your account, comply with our legal obligations, or for other legitimate purposes described in this policy.

We will only retain your personal data for as long as it is necessary for the purpose for which it was collected, or for as long as we are required to retain it by law.

For the purposes of the Data Protection Act, 2019 of Kenya (the “Act”), the data controller is Galactik IT Solutions, trading through Galactik Hosting and operating the website www.galactikhosting.com.

Information we may collect from you

We may collect and process the following information about you:

• Your title, name, date of birth where required, address, email address, telephone number, username, password, business name (if applicable), billing details and other contact information required to provide our services.
• Information provided when registering for an account or purchasing or subscribing to our services.
• Information provided when submitting forms through the Website, including enquiries, support requests, service requests and other communications.
• Information provided when you report a problem with the Website or any of our services.
• Information relating to your domain names, hosting account, websites and services purchased from us where this information is necessary to provide and manage those services.
• If you contact us, we may keep a record of that correspondence.

You should only submit information to us which is accurate and not misleading. You should keep your information up to date and notify us if any of your details change.

If you provide us with personal data belonging to another person, you must ensure that you have the necessary authority or consent to provide that information to us and to allow us to process it for the purposes described in this Privacy and Cookies Policy.

You may contact us regarding your personal data or privacy matters through the contact details provided at the end of this policy.

IP addresses

We may collect information about your computer or device, including, where available, your IP address, operating system, browser type and other technical information.

This information may be used for system administration, security, troubleshooting, analytics and to understand how visitors use our Website. This information may be aggregated or otherwise used in a manner that does not directly identify an individual.

Cookies

The Website uses cookies. Cookies are small text files placed on your computer or device by websites that you visit. They allow a website to recognise your browser and remember certain information about your visit.

We may use cookies for purposes including:

• Helping the Website function correctly.
• Remembering preferences and settings.
• Maintaining login sessions and account functionality.
• Understanding how visitors use our Website.
• Improving the performance and usability of our Website.
• Supporting security and fraud prevention.

Some cookies may be placed by third-party services that we use to operate, analyse or improve the Website.

You can configure your browser to refuse cookies or notify you when cookies are being used. However, disabling certain cookies may affect the functionality of parts of the Website.

For general information about cookies, you may visit All About Cookies.

Where we store your personal data

Information you provide to us may be stored on our servers and with third-party service providers that we use to operate our services.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Where we provide you with, or you choose, a password that allows you to access your account or parts of the Website, you are responsible for keeping that password confidential. You should not share your password with anyone.

We maintain appropriate physical, electronic and procedural safeguards in connection with the collection, storage and processing of personal data.

Where appropriate, we may request additional information to verify your identity before providing access to personal information or making changes to an account.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we take reasonable steps to protect your personal data, we cannot guarantee the absolute security of information transmitted to the Website. Any transmission of information is therefore made at your own risk.

Once we receive your information, we use appropriate security procedures and safeguards to prevent unauthorised access, loss or misuse.

Security and payments

When you make a payment for our services, payment information may be processed by the relevant payment service provider or payment gateway.

Where payment processing is handled by a third-party provider, that provider may collect and process payment information in accordance with its own privacy policy and terms.

We do not intentionally store complete credit or debit card details on our own servers where payment processing is handled by an external payment provider.

We may retain transaction information such as the amount paid, transaction reference, payment status and date of payment where necessary for accounting, billing, customer support, service provision and legal or regulatory purposes.

Uses made of the information

We may use information held about you for the following purposes:

• To provide, operate and manage the hosting, domain registration, SSL, website and other services you purchase from us.
• To create and manage your account.
• To process orders, subscriptions, renewals and payments.
• To provide billing information and manage invoices and payments.
• To communicate with you about your account, services, renewals, payments, technical matters and support requests.
• To provide customer support and respond to enquiries.
• To maintain and improve the Website and our services.
• To ensure that content from the Website is presented in the most effective manner for you and your device.
• To detect, prevent and investigate fraud, abuse, security incidents and other prohibited activities.
• To carry out our obligations arising from contracts entered into between you and us.
• To notify you about changes to our services, terms, policies or other important information.
• To send service-related communications that are necessary for the management of your account.
• To send marketing communications where permitted by law and where appropriate consent has been obtained.
• To verify information provided to us where necessary for security, fraud prevention or compliance purposes.
• To comply with applicable laws, regulations, court orders or requests from authorised government or regulatory authorities.
• To protect our rights, property, systems and customers.
• To maintain appropriate business and financial records.

We will not sell your personal data to third parties.

We may disclose personal data to trusted service providers where this is necessary to provide our services or operate our business. Such providers may include payment processors, domain registries, data centre and infrastructure providers, software providers, security providers, email providers and other service providers.

Where personal data is shared with third parties, we take reasonable steps to ensure that it is handled appropriately and securely.

We may also disclose personal data where required or permitted by law.

Domain registration and third-party services

When you register or transfer a domain name through us, certain information may need to be provided to the relevant domain registry, registrar, registry operator or other service provider in order to register, maintain, transfer or manage the domain.

The information required may vary depending on the domain extension and the requirements of the relevant registry.

Third-party service providers used in connection with domain registration, hosting, payments, security or other services may have their own privacy policies. You should review the applicable policies of those providers where appropriate.

Other websites

The Website may contain links to third-party websites, services or platforms.

If you follow a link to another website, please note that the third party may have its own privacy policy and terms. We do not accept responsibility for the privacy practices, content or security of third-party websites.

You should review the privacy policy of any third-party website before submitting personal data to it.

Your rights

Under the Data Protection Act, 2019 and applicable data protection laws, you may have rights in relation to your personal data, including the right to:

• Be informed about how your personal data is being processed.
• Access personal data that we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data where there is a lawful basis to do so.
• Object to certain forms of processing.
• Request restriction of processing in certain circumstances.
• Withdraw consent where processing is based on consent.
• Exercise other rights provided under applicable data protection laws.

Some of these rights may be subject to legal or other limitations.

If you wish to exercise any of your rights or make a privacy-related request, please contact us using the contact details provided below.

We may need to verify your identity before processing certain requests.

Consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Please note that certain information may continue to be processed where we have another lawful basis for doing so, including where processing is necessary to provide a service, fulfil a contract, comply with a legal obligation, protect our legitimate interests or meet other requirements permitted by law.

Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining customer accounts, resolving disputes, enforcing agreements, maintaining business records and complying with legal, accounting or regulatory requirements.

When personal data is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with our applicable retention procedures.

Changes to our Privacy and Cookies Policy

We may update this Privacy and Cookies Policy from time to time.

Any changes will be posted on the Website. Where appropriate, we may also notify customers of significant changes by email or through their account.

You should review this policy periodically to remain informed about how we process personal data.

Contact

Questions, comments and requests regarding this Privacy and Cookies Policy are welcomed.

If you have a question about your personal data, wish to exercise your data protection rights, or have a concern about how we process your information, please contact us through the contact details provided on www.galactikhosting.com.

Website: www.galactikhosting.com

Galactik IT Solutions / Galactik Hosting

This Privacy and Cookies Policy was last updated on 14 September 2026.