Privacy Policy

1. Introduction

JS Galactic, a division of JS Holdings Ltd (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or otherwise interact with us.

2. Information We Collect

Information you provide

• Contact information (name, email address, phone number, company name)
• Project details and requirements submitted through our contact form
• Business correspondence and communications
• Contractual and billing information for active engagements

Information collected automatically

• Device and browser information (type, version, operating system)
• IP address and approximate geographic location
• Pages visited, time spent, and navigation patterns
• Referring website or source
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and communicate about potential or active engagements
• Deliver and improve our services
• Process payments and manage contractual obligations
• Send relevant updates about our services (with your consent)
• Analyze website usage to improve user experience
• Comply with legal obligations and protect our rights

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given explicit consent (e.g., marketing communications)
• Contract: Where processing is necessary for a contract or pre-contractual steps
• Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal obligation: Where processing is required by applicable law

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers: Trusted partners who assist in operating our website and delivering services (e.g., hosting, analytics, payment processing)
• Legal requirements: When required by law, regulation, legal process, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you have given explicit permission

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Contact form submissions are retained for up to two (2) years. Client engagement records are retained for seven (7) years after the conclusion of the engagement as required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, regular security assessments, and employee training. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time (where consent is the basis for processing)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@jsgalactic.com.

9. International Data Transfers

JS Galactic operates from Kenya and serves clients globally. Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms approved by relevant authorities.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact our Data Protection Officer at privacy@jsgalactic.com or write to JS Galactic, a division of JS Holdings Ltd, Nairobi, Kenya.