1. Introduction
This Privacy Policy explains how Galaxy Maintenance LLC ("Galaxy", "we", "us", "our") collects, uses, shares and protects your personal data when you use:
- the Galaxy Maintenance website,
- our booking forms and WhatsApp booking flow,
- our phone and customer-support channels, and
- any related communication or service delivered to you in the United Arab Emirates.
By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.
2. The personal data we collect
We collect different categories of personal data depending on how you interact with Galaxy Maintenance.
- Account & contact information — name, phone number, WhatsApp number, email address, country code.
- Address & location information — service addresses, building or unit details, directions, city and area.
- Booking & transaction information — booking history, scheduling preferences, service notes, maintenance plans, vouchers and any wallet-credit balance.
- Payment information — payment-card tokens generated by our PCI-DSS-certified payment processor. We do not store full card numbers, CVV numbers, or expiry dates.
- Device & usage information — IP address, browser type, operating system, referral source, page interactions.
- Communications information — customer-support emails, WhatsApp messages, support call recordings.
- Marketing preferences — newsletter subscriptions, SMS and marketing opt-ins.
Cookies, tracking technologies & device information
We may collect information about how you access and use our website, including: device identifiers, app version, browser type, operating system, IP address, approximate location derived from IP address, navigation behaviour, search and booking activity, diagnostics, performance data, cookie identifiers and analytics data collected through third-party providers.
We may use Google Analytics and similar providers to understand how users interact with our website, generate usage statistics, improve our services and measure marketing effectiveness. Information collected may be processed by the relevant provider under its own privacy policy — see Google's Privacy Policy.
Third-party providers, including analytics, advertising and payment partners, may also use cookies and similar technologies in connection with our services.
3. How we use your personal data
We use your personal data to operate, improve and secure our services. Specifically:
- Deliver and manage bookings — account, address, booking and payment data.
- Dispatch service professionals — name, address, phone number, booking details and service instructions.
- Process payments and refunds — payment tokens, booking and transaction records.
- Provide customer support — communications history, booking history and account details.
- Improve services and user experience — usage analytics, diagnostics and operational logs.
- Fraud prevention and security — device information, authentication data and security logs.
- Marketing and promotional communications — contact details and marketing preferences.
- Legal and regulatory compliance — transaction records, tax and accounting information.
We may also use aggregated and anonymised information for analytics, operational insights and service improvement. We do not sell, rent or lease personal information to third parties.
4. Lawful basis for processing
We only process personal data where we have a lawful basis to do so under UAE Federal Decree-Law No. 45 of 2021.
- Performance of a contract — account registration, booking fulfilment, payment processing.
- Legitimate interests — fraud prevention, analytics, product improvement, operational security.
- Legal obligations — tax, accounting, anti-money-laundering and lawful authority requests.
- Consent — marketing communications and optional notifications.
5. Who we share personal data with
We share personal data only where necessary to operate our services.
- Service professionals & technicians — to fulfil bookings and deliver services.
- Payment processors — to process payments and refunds.
- Communications providers — to send SMS, push, email and WhatsApp messages.
- Maps and address providers — address validation and routing.
- Cloud and infrastructure providers — hosting, analytics, monitoring and operational systems.
- Legal and regulatory authorities — where required by law.
Galaxy Maintenance does not sell, rent or lease personal information to third parties.
6. International data transfers
Personal data may be transferred to and processed in countries where Galaxy Maintenance or its service providers operate, including the United Arab Emirates, the United States and European Union member states.
Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections with our service providers and processors, in line with the UAE PDPL. By using our services, you acknowledge these international transfers.
7. Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, misuse, loss or disclosure. These measures include:
- encryption (HTTPS / TLS),
- authentication controls,
- firewall and access protections,
- operational logging,
- restricted internal access on a need-to-know basis.
However, no method of transmission or storage over the internet can be guaranteed to be completely secure.
8. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with legal obligations.
- Account information — until account deletion plus 30 days.
- Booking records — until account deletion plus 30 days, subject to UAE tax retention obligations (5 years).
- Customer-support tickets — until requested by the customer.
- Web analytics and device data — anonymised; aggregate retained indefinitely.
- Call recordings — 2 years.
- Fraud and security logs — 90 days.
- Invoices and tax records — 5 years (UAE VAT law).
We may retain anonymised and aggregated information for analytics and research purposes.
9. Your rights and choices
Under the UAE PDPL you may have the right to:
- access your personal data,
- correct inaccurate data,
- request deletion of your data,
- object to certain processing activities,
- withdraw consent,
- request data portability, and
- file a complaint with the UAE Data Office.
Marketing controls
You can opt out of marketing communications by:
- using the unsubscribe link in marketing emails,
- replying STOP to marketing SMS messages, or
- contacting us on WhatsApp at +971 50 998 2433.
Account deletion
To request account deletion, message us on WhatsApp or call +971 50 998 2433 with the subject "Data deletion request". Verified requests will be actioned within 30 days, subject to legal retention obligations.
10. Age limit
Our services are intended for adults over the age of 18. We do not knowingly collect personal data directly from children under the age of 18 except where necessary to provide services requested by a parent or guardian. If you believe we have unintentionally collected personal information from a child, please contact us.
11. Third-party services
Our services may contain links to third-party websites and services, including payment providers and mapping services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before submitting personal information to them.
12. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. When material changes are made, we may notify users through email, WhatsApp or a notice on our website. The "Last updated" date at the top of this policy reflects the latest revision date.
13. Contact us
If you have questions about this Privacy Policy or how your personal data is handled, please contact:
- Galaxy Maintenance LLC
- Phone & WhatsApp: +971 50 998 2433
- Business Bay, Dubai, United Arab Emirates
- Al Raha, Abu Dhabi, United Arab Emirates