GAL Aerospace Inc. ("GAL Aerospace", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with our website and services. This Privacy Policy describes how we collect, use, disclose, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec Law 25 (Act respecting the protection of personal information in the private sector), and applicable privacy legislation.
1. Who We Are
GAL Aerospace Inc. is an aircraft cabin interiors company headquartered in Montreal, Quebec, Canada. We design, engineer, manufacture, certify, and support aircraft interior components and cabin modification programs for commercial aviation operators, MROs, OEMs, and aircraft lessors. Our website is located at galaerospace.com.
2. Information We Collect
We collect personal information that you voluntarily provide to us when you submit an inquiry through our contact form, request a technical consultation, book a meeting, subscribe to our communications, or otherwise interact with our website. The types of information we may collect include: your name, job title, company name, business email address, telephone number, aircraft type or fleet information you choose to share, your selected meeting time and time zone, and the content of your inquiry or message. We also collect limited technical information automatically: your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit are processed in server and infrastructure logs for security, abuse prevention and troubleshooting. Additional measurement information is collected only if you allow the Analytics or Marketing categories described in Section 10.
3. How We Use Your Information
We use the personal information we collect to respond to your inquiries and provide the information or services you have requested; to schedule, hold and follow up on technical consultations, including creating the calendar invitation and online meeting; to send you communications you have requested; to operate, secure and troubleshoot our website; to comply with legal obligations; and — where you have consented — to measure how our website is used and how our marketing performs. We do not sell, rent, or trade your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.
4. Legal Basis and Consent
We process your personal information based on your consent (given when you submit a form, request a consultation, or allow optional technologies in the privacy preferences panel), the performance of a contract or pre-contractual steps at your request, our legitimate interests in operating and securing our business, and compliance with legal obligations. Consent to optional cookies and similar technologies is separate from, and never a condition of, using the website or contacting us. You may withdraw your consent at any time — for optional technologies through Privacy Choices in the footer, and for other processing by contacting our Privacy Officer. Withdrawal is as easy as giving consent and does not affect the lawfulness of processing carried out beforehand.
5. Service Providers and Disclosure
We share personal information only as needed to run our website and respond to you. Our current service providers include: Google Cloud Platform (website hosting and infrastructure) and Google Firestore (storage of consultation and contact records); Microsoft 365, Microsoft Graph and Microsoft Teams (business mailboxes, calendar invitations and online meetings for booked consultations); Google reCAPTCHA (protection of our forms against automated abuse); and, only where you have consented, Google Analytics 4 for audience measurement and the LinkedIn Insight Tag for advertising measurement, both delivered through Google Tag Manager. Each provider is bound by its data processing terms and may use the information only to provide the service to us. We may also disclose personal information to professional advisors where necessary, and to government authorities or law enforcement where required by law or to establish or defend legal rights.
6. Processing Outside Quebec and Canada
Some of our service providers process or store personal information outside Quebec and outside Canada, including in the United States, Ireland and the European Union. Where information is transferred outside Quebec, we assess the processing in accordance with Quebec Law 25 and rely on the provider's contractual data protection commitments and technical safeguards. We do not claim that your information always remains in Canada. If you would like details of the assessment applicable to a specific service, contact our Privacy Officer.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. Consultation and contact records are retained for the duration of the commercial relationship and for a reasonable period afterwards for follow-up and legal-record purposes. Analytics information is retained according to the retention period configured with the provider. Your cookie preference is stored for 180 days, after which you are asked again. When personal information is no longer required, we securely delete or anonymize it.
8. Automated Decision-Making and Profiling
We do not use your personal information to make decisions about you based exclusively on automated processing. Where you allow the Analytics or Marketing categories, aggregated measurement helps us understand which content and campaigns are useful to aviation professionals. If you allow Marketing, LinkedIn may also use the information it receives to build advertising audiences and to match a visit to a LinkedIn member, in line with its own privacy policy. GAL Aerospace does not use any of this to decide whether you may access our website, our services or a consultation.
9. Your Rights
Depending on your jurisdiction, you may have the right to access the personal information we hold about you; to request correction of inaccurate or incomplete information; to request deletion of your personal information, subject to legal exceptions; to withdraw consent; to request that we cease disseminating information or de-index it where the law provides; to receive computerized personal information you provided in a structured, commonly used technological format; and to lodge a complaint with a supervisory authority, including the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada. To exercise any of these rights, contact our Privacy Officer using the details in Section 12. We respond within the timeframes required by applicable law.
10. Cookies, Tracking Technologies and Your Privacy Choices
Our website uses a small number of cookies and similar technologies. Those that are strictly necessary — the record of your own privacy choices, and the reCAPTCHA protection that loads when you open our consultation form — are always active because the website cannot be operated and secured without them. Optional technologies are grouped into Functional/Preferences, Analytics and Marketing/Advertising. All optional categories are denied by default and load nothing until you allow them; continuing to browse, scrolling or dismissing the banner is not consent. Google Consent Mode v2 is used so that Google technologies receive your choices, and our tag manager container is not requested at all until you have allowed the optional categories its tags require. If your browser sends a Global Privacy Control signal, we honour it and keep Marketing/Advertising denied. The Cookie Policy lists every confirmed technology, its provider, purpose, cookie names and durations, and you can change or withdraw your choices at any time using the control below or Privacy Choices in the footer.
11. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include secure server infrastructure, HTTPS encryption, access controls, and abuse protection on our forms. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. Where a confidentiality incident presents a risk of serious injury, we act in accordance with our legal obligations, including notification where required.
12. Contact Us and Privacy Officer
GAL Aerospace has designated a Privacy Officer responsible for the protection of personal information. If you have questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal information, please contact us at: GAL Aerospace Inc., Attn: Privacy Officer, Montreal, Quebec, Canada. Email: info@galaerospace.com
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised date. Where a change affects the technologies covered by your consent, we also raise the consent version, which asks you to make a fresh choice. We encourage you to review this policy periodically.