Privacy Policy

Who we are

GALC FZE is an aviation trading and consultancy company established in Dubai Airport Freezone, United Arab Emirates.

For the purposes of applicable data protection legislation, GALC FZE is responsible for determining how and why the personal data described in this Privacy Policy is processed.

Personal data we collect

We may collect personal data that you provide directly to us, including:

• —your name;
• —company or organisation;
• —business email address;
• —telephone number, if provided;
• —information contained in your enquiry;
• —details of an aircraft or other aviation asset;
• —information concerning an acquisition, sale, lease, financing, valuation, technical advisory or airline project;
• —correspondence and other information you choose to provide.

When you visit our website, our hosting or security providers may also automatically receive limited technical information, such as your IP address, browser type, device type, date and time of access, referring website and pages visited.

How we use personal data

We may use personal data to:

• —receive, review and respond to enquiries;
• —understand your requirements and determine whether GALC can assist;
• —prepare for or enter into a business relationship;
• —provide requested information, proposals or services;
• —communicate about an existing or potential mandate;
• —coordinate with professional advisers, technical specialists or service providers where required;
• —maintain business and correspondence records;
• —protect the security and proper operation of our website and systems;
• —establish, exercise or defend legal rights;
• —comply with applicable legal, regulatory and contractual obligations.

We will not use personal data for purposes that are materially different from those described above without providing appropriate notice and, where required, obtaining consent.

Basis for processing

Depending on the circumstances and applicable law, GALC may process personal data:

• —with your consent;
• —to respond to your request or take steps before entering into a contract;
• —to perform a contract or mandate;
• —to comply with a legal or regulatory obligation;
• —to establish, exercise or defend legal claims;
• —to pursue legitimate business interests, where permitted and where those interests do not override your rights and interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.

Sharing personal data

GALC does not sell personal data.

We may share personal data only when reasonably necessary with:

• —employees and representatives who require access for legitimate business purposes;
• —hosting, communications, information technology and cybersecurity providers;
• —legal, tax, financial, insurance or other professional advisers;
• —qualified aviation consultants, technical specialists and service providers engaged in connection with a potential or existing mandate;
• —prospective transaction counterparties, but only where appropriate, lawful and consistent with the relevant engagement;
• —government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law;
• —a successor entity in connection with a restructuring, merger, acquisition or transfer of business, subject to appropriate confidentiality protections.

Third parties acting on our behalf are expected to process personal data only for authorised purposes and to apply appropriate confidentiality and security measures.

We will not disclose the substance of an enquiry to a prospective counterparty without an appropriate basis for doing so. Where necessary, additional confidentiality arrangements may be agreed before commercially sensitive information is exchanged.

International transfers

Aviation transactions and advisory assignments frequently involve parties and service providers located in different countries. Personal data may therefore be transferred to or accessed from jurisdictions outside the United Arab Emirates.

Where required, GALC will take reasonable and appropriate measures to ensure that international transfers are made in accordance with applicable data protection requirements and that personal data receives an appropriate level of protection.

Data retention

We retain personal data only for as long as reasonably necessary to:

• —respond to an enquiry;
• —assess or perform a potential or existing mandate;
• —maintain appropriate business and transaction records;
• —comply with legal, regulatory, accounting or reporting obligations;
• —resolve disputes or protect legal rights.

The appropriate retention period depends on the nature of the information, the relationship with the individual or organisation, and any applicable legal or contractual requirements.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

Data security

GALC applies reasonable organisational and technical measures intended to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should therefore avoid sending sensitive or confidential documentation through the initial website enquiry form.

Your rights

Subject to applicable law and any relevant exemptions, you may have the right to:

• —obtain information about how your personal data is processed;
• —request access to your personal data;
• —request correction of inaccurate or incomplete personal data;
• —request deletion of personal data;
• —request restriction or suspension of processing;
• —object to certain processing activities;
• —withdraw consent where processing is based on consent;
• —request transfer of personal data where applicable;
• —object to decisions based solely on automated processing, where applicable;
• —submit a complaint to the competent data protection authority.

GALC does not currently use the website enquiry form to make decisions based solely on automated processing.

To exercise a right or raise a privacy concern, contact us at . We may request reasonable information to confirm your identity and locate the relevant records before responding.

Cookies and similar technologies

The website may use technologies that are strictly necessary for security, technical operation and delivery of website content.

GALC does not use cookies to sell personal data or conduct behavioural advertising. If non-essential analytics, advertising or preference cookies are introduced, this Privacy Policy and any related cookie notice will be updated, and consent will be requested where required.

You may also control cookies through your browser settings. Disabling essential technologies may affect the operation of certain website features.

Third-party websites

Our website may contain links to websites operated by third parties. GALC is not responsible for the privacy, security or content practices of those websites. You should review the applicable privacy policy before providing personal data to a third-party website.

Children’s privacy

Our website and services are intended for businesses and aviation professionals and are not directed at children. We do not knowingly collect personal data from children through the website.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, processing activities or applicable legal requirements.

The revised version will be published on this website with an updated effective date. Material changes may also be communicated by other appropriate means where required.

Contact us

For questions, requests or concerns regarding this Privacy Policy or the processing of personal data, please contact:

Scope of services and professional responsibility

Information published on this website is provided for general information and does not constitute an offer, a commitment or professional advice. The scope of each mandate is defined in writing between GALC FZE and the client.

GALC FZE is an aviation trading and consultancy company. It is not a law firm, a certifying authority, an accredited appraiser or an approved maintenance organisation. Responsibility for regulatory approvals, legal opinions, airworthiness certification and similar matters remains with the relevant authorities and with the professional advisers appointed by the client.