Privacy Policy

Privacy Policy

Last updated: October 30, 2017

1. Introduction

GalleyCloud ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the GalleyCloud website, platform, and related services (collectively, the "Services").

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use our Services.

2. Information We Collect

We collect information that you provide directly to us, as well as information generated through your use of the Services.

Information you provide

  • Account details such as name, work email, phone number, and professional role
  • Operator or organization information required to verify aviation credentials
  • Order details, messages exchanged with caterers, and payment information
  • Any content you submit through contact forms or support channels

Information collected automatically

  • Device and browser data such as IP address, user agent, and language
  • Usage analytics including pages viewed, features used, and session duration
  • Cookies and similar tracking technologies (see "Cookies & Tracking" below)
3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Services
  • Verify aviation credentials and approve accounts
  • Facilitate orders, messaging, and payments between operators, crews, and caterers
  • Send transactional communications (confirmations, updates, security alerts)
  • Monitor performance, diagnose issues, and maintain platform security
  • Comply with legal, regulatory, and contractual obligations
4. Sharing & Disclosure

We do not sell your personal information. We share information only in the ways described below.

  • With catering providers and service partners to fulfill the orders you place
  • With payment processors (e.g. Stripe) to process transactions securely
  • With trusted service providers who support hosting, analytics, or customer support under confidentiality obligations
  • Where required by law, regulation, court order, or to protect rights, safety, or property
  • In connection with a merger, acquisition, or sale of assets, subject to the protections of this Policy
5. Data Retention

We retain personal information only for as long as necessary to provide the Services, meet legal obligations, resolve disputes, and enforce agreements.

When retention is no longer required, we either delete the information or anonymize it so it can no longer be linked to you.

6. Security

We use a combination of technical and organizational safeguards designed to protect your information, including encryption in transit, access controls, and continuous monitoring.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us of any suspected unauthorized use.

7. Your Rights

Subject to applicable law, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal information
  • Object to or restrict certain processing
  • Port your information to another service
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details in the "Contact Us" section.

8. Cookies & Tracking

We use cookies and similar technologies to authenticate users, remember preferences, measure performance, and improve the Services.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of parts of the platform.

9. International Transfers

GalleyCloud operates globally. Your information may be processed in countries other than where you live, including jurisdictions whose data protection laws may differ from your own.

Where required, we implement appropriate safeguards such as contractual clauses to ensure your information receives an adequate level of protection.

10. Children's Privacy

The Services are intended for professional use and are not directed to children under 18. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised Policy with an updated "Last updated" date and, where appropriate, notify you through the Services or by email.

Continued use of the Services after changes become effective constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions about this Privacy Policy or our handling of your information, you can reach us at privacy@galleycloud.com.