Privacy Policy

1. Introduction

Galaxy Consulting, LLC (“Galaxy Consulting,” “we,” “us,” or “our”) operates the website www.galaxyconsultingllc.com(the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our Site or submit an inquiry through our contact form. By using the Site you agree to the practices described in this policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

a. Information You Provide Voluntarily

When you fill out our contact form, you may provide:

• Full name
• Organization or company name
• Email address
• Phone number
• The nature of your inquiry or message

We only collect this information when you choose to submit it. No information is collected automatically from the contact form without your action.

b. Automatically Collected Information

When you visit the Site, certain technical data may be collected automatically through standard web server logs and analytics tools, including:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Referring URL and pages visited
• Date, time, and duration of your visit

c. Cookies and Similar Technologies

We use cookies — small text files stored in your browser — to remember your preferences and improve site performance. We also use session cookies to support basic site functionality. You can manage or disable cookies through your browser settings. Declining cookies via our consent banner will limit non-essential tracking but will not prevent you from using the Site.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Send you information about our CMMC compliance services, IT capabilities, or other offerings you have expressed interest in
• Improve the content, navigation, and overall performance of the Site
• Comply with applicable legal obligations
• Protect the security and integrity of our Site and business operations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Service Providers: Third-party vendors who assist in operating the Site (e.g., web hosting, email delivery), subject to confidentiality obligations and prohibited from using your information for their own purposes.
• Legal Requirements: When required by law, regulation, court order, or government request; or to protect the rights, property, or safety of Galaxy Consulting, our clients, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your information may be transferred as a business asset.

5. Data Retention

We retain personal information submitted through the contact form for as long as necessary to respond to your inquiry and fulfil any ongoing business relationship, or as required by applicable law. Inquiry records are typically reviewed and pruned on an annual basis. Automatically collected technical data is generally retained for no more than 24 months.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. Our Site is served over HTTPS (TLS encryption) to protect data in transit. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Third-Party Links

The Site may contain links to external websites (e.g., official DoD, Cyber-AB, or partner sites). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.

8. Children’s Privacy

The Site is intended for business and professional use and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

9. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Opt-Out: Unsubscribe from any marketing communications at any time by replying “unsubscribe” or contacting us directly.
• Cookie Control: Manage cookie preferences through your browser settings or our consent banner.

To exercise any of these rights, please contact us at the information provided in Section 11.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Effective Date” at the top of this page. We encourage you to review this policy periodically. Continued use of the Site after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: