Privacy Policy

1. Introduction

This Privacy Policy explains how Galo Australia Pty Ltd (ABN 37 700 448 684), trading as GALO (“Galo”, “we”, “us”, “our”), collects, uses, discloses and protects your personal information when you use the Galo website and platform (the “Platform”).

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). By using the Platform, you agree that we will collect, hold, store, use, disclose and otherwise handle your personal information in accordance with this Privacy Policy.

2. What personal information we collect

The personal information we collect depends on how you use the Platform. It may include:

• Identity and contact details — name, email address, phone number, postal or property address, and date of birth.
• Account and profile information — login details, rider experience and discipline, horse and listing details, photos, and preferences.
• Identity verification information — information you provide, and results returned, when your identity is verified through our verification provider.
• Payment information — payments are processed by our payments provider. We receive limited transaction details (such as confirmation of payment and the last digits of a card); we do not store your full card number.
• Communications — messages you send through the Platform, and correspondence with our support team.
• Usage and device information — information about how you access and use the Platform, collected automatically (see section 8).

If you do not provide the information we reasonably need, we may be unable to provide you with parts of the Platform — for example, verification or the ability to list a horse.

3. How we collect your information

• Directly from you — when you register, complete a profile or listing, verify your identity, make a payment, contact us, or otherwise use the Platform.
• Automatically — through cookies and similar technologies when you use the Platform.
• From third parties — such as our identity-verification and payments providers, in connection with the services they provide to us.

4. Why we collect, hold, use and disclose your information

We collect and use your personal information to:

• create and manage your account, and verify your identity;
• operate the Platform — including enabling owners and riders to search, connect and communicate, and to generate standardised documentation;
• process fees and payments through our payments provider;
• provide support, and handle complaints, disputes and incident reports;
• maintain safety, welfare standards, trust and security — including detecting and preventing fraud, misuse and breaches of our terms;
• administer any member protection or insurance offering, where you choose to take it up;
• send you service communications and, where permitted, marketing (see section 6);
• comply with our legal obligations and enforce our terms.

We handle personal information for the purpose it was collected, for a directly related secondary purpose you would reasonably expect, or as otherwise permitted or required by law.

We may store your personal information in hard copy or electronic format, and it may be combined or linked to other information held about you.

5. Who we share your information with

We do not sell your personal information. We may share it with:

• Other users, to the extent necessary for you to connect and transact — for example, an owner and a rider will see the profile and contact information needed to communicate and enter into a lease. You should only use another user’s information for that purpose.
• Service providers who help us run the Platform — including our payments provider, identity-verification provider, hosting provider, email/communications and analytics providers — who are permitted to use the information only to provide their service to us.
• Our insurance partner, where you choose to take up a protection or insurance product, for the purpose of providing and administering that product.
• Professional advisers, and authorities, where reasonably necessary or required by law, or to protect the safety of a person, a horse, or the community.

6. Marketing and communications

We may send you service-related messages that are necessary to operate the Platform. With your consent (or where otherwise permitted under the Spam Act 2003 (Cth)), we may also send you marketing communications. Every marketing message will include a way to opt out, and you can unsubscribe at any time. Opting out of marketing does not stop essential service messages.

7. Overseas disclosure

Some of our service providers may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs. You can ask us for the countries involved by contacting us using the details below.

8. Cookies and analytics

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how the Platform is used. You can manage cookies through your browser settings.

9. How we protect your information

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure — including access controls, secure hosting and using reputable providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How long we keep your information

We keep personal information only for as long as is reasonable for business purposes, or as permitted or required by law. Subject to any legal requirements, when personal information is no longer needed for any purpose for which it was collected in accordance with this Privacy Policy, we will take reasonable steps to destroy or permanently de-identify it.

11. Accessing and correcting your information

You can access and update much of your information through your account. You may also request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond within a reasonable period. We will take reasonable steps to let you know what sort of personal information we hold, for what purposes and how we collect, hold, use and disclose that information. We will only deny a request for access or limit access where permitted under the Privacy Act.

12. Complaints

If you have a privacy concern or complaint, please contact us first using the details below, and we will work to resolve it. We will acknowledge your complaint in writing as soon as practicable and we will investigate and respond to your complaint within a reasonable timeframe. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The current version will always be available on the Platform, and the “last updated” date above will reflect the most recent change. Material changes will be notified where required.

14. Contact us