Privacy Policy

Last updated: 1 November 2026

This policy explains how Galatia (“we”, “us” or “our”) collects, uses, stores and shares personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.

1. Who to contact

Galatia is the name under which these services are offered. For privacy questions, requests or complaints, contact us at hello@galatia.co.za. Privacy requests are handled through this email address.

2. Information we collect

• Identity and contact details such as name, email, telephone number and location.
• Application information such as occupation, business experience, goals, available time and any capital range you choose to provide.
• Purchase records such as invoices, payment status, transaction references and agreements. Payment-card details are handled by the relevant payment provider, not stored by us unless expressly stated.
• Communications, including forms, emails, messages, bookings, call notes and support requests.
• Technical and usage information such as IP address, device/browser details, pages viewed, referral source and cookie or pixel identifiers, where enabled.

Do not send passwords, identity-document numbers, bank-card details or sensitive personal information unless specifically requested through an appropriate secure process.

3. Purposes and lawful grounds

We use information to respond to enquiries and assess applications; enter into and perform agreements; provide portal access, resources, calls and support; manage payments; maintain records and meet tax/legal obligations; prevent fraud and misuse; secure and improve our website and services; measure advertising; and send marketing where lawfully permitted. The lawful ground may include consent, steps taken at your request before a contract, contract performance, legal obligation or a legitimate interest that does not override your rights.

4. Marketing

We send promotional electronic communications only where permitted by POPIA, including where required consent has been obtained or an existing-customer exception applies. An application is not automatic consent to unrelated marketing. Where consent is required, the checkbox should be optional, separate and unticked by default. You can opt out through the unsubscribe link or by contacting hello@galatia.co.za.

5. Sharing and operators

We do not sell personal information. We may share it with service providers supporting our operations, including CRM/form/portal providers such as GoHighLevel/LeadConnector where used; payment processors and banks; email, calendar, video-meeting, hosting and analytics providers; advertising platforms such as Meta where tracking is enabled; and professional advisers, regulators or authorities where necessary or legally required. Operators must protect information and use it only for authorised purposes under appropriate written arrangements.

6. Transfers outside South Africa

Some providers may store or process information outside South Africa. We will transfer information only where POPIA section 72 permits, such as where adequate protection, an appropriate agreement or another permitted basis applies. We assess the safeguards applicable to each transfer and use appropriate measures where required by POPIA.

7. Security and compromises

We use reasonable technical and organisational measures to protect personal information. No online system is completely secure. If a security compromise occurs and POPIA requires notification, we will notify the Information Regulator and affected data subjects as required by law.

8. Retention

We retain information only as long as reasonably necessary for the purpose collected, to perform agreements, resolve disputes, maintain records or comply with law. We apply retention periods appropriate to each category: unsuccessful applications are retained only as long as reasonably necessary to assess and manage the application; customer and service records are retained for the duration of the relationship and any further period required to manage disputes or meet legal obligations; accounting and tax records are retained for the period required by applicable law; and marketing suppression records are retained as needed to respect opt-outs. We securely delete or de-identify information when no longer required unless retention is legally permitted or required.

9. Your rights

Subject to law, you may request access to information we hold, ask for correction or deletion, object to certain processing, withdraw consent where processing is based on consent, and ask questions about our use of information. Contact us at hello@galatia.co.za. We may verify your identity and may retain information where law requires or permits. You may complain to the Information Regulator at inforegulator.org.za.

10. Cookies, pixels and analytics

Our website may use essential cookies needed for core functionality and, if you consent, non-essential advertising technologies such as the Meta Pixel. The Meta Pixel may collect or receive information about your browser, device, pages visited and actions on the website so that we can measure advertising and build or measure advertising audiences. The Pixel is not activated on this website until you accept marketing cookies. You can accept, reject or customise non-essential cookies using the cookie notice, and you can change your choice later using the “Cookie settings” link in the website footer. You can also manage cookies through your browser settings. Some embedded third-party services, such as our application form provider, may use their own cookies or similar technologies; those services are subject to their providers’ privacy information.

11. Children

Galatia is intended for adults aged 18 and older. We do not knowingly collect children’s personal information. Contact the Information Officer if you believe a child has provided information.

12. Changes

We may update this policy. The current version and effective date will be published on our website and material changes communicated where required by law.