Privacy Policy

Galito’s Holdings and its master franchisee in Eswatini (collectively referred to as “Galito’s”, “we”, “us”, or “our”) respect the privacy of all visitors to our online platforms, websites, and mobile applications (collectively, the “Websites”). We consider it a priority to ensure that our users are aware of how we handle, collect, process, and protect their personal information.

By utilizing our Websites, placing orders, or interacting with our brand digitally, you acknowledge and agree to the practices described in this privacy policy.

1. Compliance with data protection laws

1.1. We are committed to safeguarding the privacy and security of your personal data in strict compliance with the Eswatini Data Protection Act No. 5 of 2022 (as amended from time to time). 1.2. By trading with Galito’s and using our digital services, you authorize us to process your personal data for legitimate business interests, including order fulfilment, statistical analysis, marketing, and credit control.

2. Collection of personal information

2.1. Galito’s collects personally identifiable information that you voluntarily submit to us when you register an account, make an online or application-based order, complete a survey, or contact customer care. This information may include, but is not limited to:

Your full name;
Contact numbers (mobile or landline);
Email address;
Physical address for delivery;
Date of birth or age; and
Account credentials (username or screen name). 2.2. If you are ordering through our mobile routes, certain location-based data may be requested to assist in determining your closest participating Galito’s store or delivery zone.

3. Automatically collected technical information

3.1. When you browse the Websites, our servers may automatically capture non-personally identifiable technical and statistical information. This data includes:

Your Internet Protocol (IP) address;
Your internet browser type and operating system;
The pages you visit on our Websites, along with the time and duration of your visit; and
Device characteristics, performance metrics, and connection types. 3.2. This information is utilized solely in an aggregated, anonymous format to evaluate website traffic, optimize platform performance, and improve the online user experience.

4. Use of your personal information

4.1. Galito’s collects and uses your personal information to operate the digital platforms efficiently and to deliver the products or services you have requested. 4.2. Additionally, we may use your information to:

Inform you of promotional offers, new menu arrivals, combos, or exclusive rewards available from Galito’s (provided you have opted in to receive marketing communications);
Contact you via voluntary research surveys to gather your feedback regarding current or potential products and services; and
Verify order credentials and prevent fraudulent transactions.

5. Sharing and disclosure of information

5.1. Galito’s does not sell, rent, or lease its customer or mailing lists to third parties. 5.2. From time to time, we may contact you on behalf of trusted external business partners regarding specific offerings that may complement your preferences. In such cases, your unique personal data (such as name, email, or telephone number) is never transferred to the third party. 5.3. We may share data with trusted technical and logistics partners (such as delivery dispatch partners, point-of-sale providers, or payment gateways) strictly to help perform statistical analysis, distribute technical emails, manage customer care channels, or arrange for the delivery of your meals. All such third parties are prohibited from using your personal data except to provide these specific operational services to Galito’s, and they are required to maintain strict confidentiality. 5.4. Galito’s will disclose your personal information, without prior notice, only if required to do so by applicable Eswatini law or in the good faith belief that such action is necessary to:

Conform to statutory legal obligations or comply with legal processes served upon Galito’s or the Websites;
Protect and defend the rights, property, or intellectual assets of Galito’s; and
Act under urgent circumstances to protect the personal safety of users of Galito’s platforms, its staff, or the general public.

6. Use of cookies

6.1. The Websites utilize “cookies” to help personalise and enhance your online experience. A cookie is a small text file placed on your device by a webpage server. Cookies cannot be used to run programmes or deliver viruses to your computer. 6.2. One of the primary purposes of cookies is to provide a convenience feature to save you time. For instance, if you customise web pages or register an account, a cookie helps our platform remember your specific delivery address or order preferences on subsequent visits. 6.3. You have the choice to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser settings to decline them if preferred. Choosing to decline cookies may limit your ability to fully experience the interactive, automated features of Galito’s online services.

7. Security of personal information

7.1. Galito’s secures your personal information from unauthorised access, loss, use, or disclosure to the best of its technical capabilities. 7.2. The personal information you provide is stored on secure computer servers in a controlled, protected environment. When highly sensitive information (such as credit or debit card details) is processed, it is protected through data encryption protocols managed by certified payment gateways. 7.3. We implement a variety of commercially reasonable physical, technical, and administrative safeguards to align with data privacy best practices.

8. Data subject rights and information retention

8.1. Under the Eswatini Data Protection Act No. 5 of 2022, you possess clear rights regarding your personal information. You have the right to request access to the data we hold about you, request corrections to any inaccurate information, or request the deletion of your record. 8.2. Because records must remain accurate for business purposes, we may ask you periodically to confirm or update your information. If we are unable to verify information or reach a customer after reasonable attempts, expired data will be deleted in line with regulatory storage parameters. 8.3. Any formal compliance enquiries, data access requests, or privacy complaints can be lodged with the local franchise office. If you feel a complaint has not been adequately addressed, you have the right to escalate the matter to the Eswatini Communications Commission (ESCCOM).

9. Changes to this privacy policy

9.1. Galito’s will occasionally update this privacy policy to reflect regulatory changes, operational feedback, or localized amendments within Eswatini. 9.2. We encourage you to periodically review this page to stay informed about how we are protecting your information.