Privacy Policy

We collect the following types of personal data: • Contact data: name, email address, phone number, company address • Communication data: messages sent through our contact form • Technical data: IP address, browser type, operating system, site visit data • Cookies: we use cookies to improve user experience

We use the collected data for the following purposes: • To respond to your inquiries and provide requested services • To improve our website and services • To send you information about our services (only with your consent) • To comply with our legal obligations • To protect our legitimate interests

We ask for consent on your first visit. "Essential only" turns analytics and advertising off; you can change your choice at any time with the "Cookie settings" button below. • Google Analytics 4 and Google Tag Manager (Google): visit statistics. Without consent Google receives only anonymous, cookieless signals. • Google Ads (Google): measuring enquiries from Google ads. Only with marketing consent. • Meta Pixel (Meta): measuring Facebook and Instagram ads. Only with marketing consent. • OpenAI Ads pixel (OpenAI): measuring ads in ChatGPT. With marketing consent the pixel keeps the ad click identifier (cookie __oppref, 30 days), and when you send a form we pass OpenAI that identifier plus your email and phone hashed with SHA-256 (irreversible), so the enquiry can be matched to the ad. Without consent only an anonymous signal is sent, with no identifiers. • Visit source: for the current session (sessionStorage) we remember which ad or site brought you and attach it to the enquiry you send. This information stays with us. • Voice assistant (Google Gemini): only if you tap the voice-fill button, the recording is processed by Google Gemini to fill in the form and is not stored.

We apply appropriate technical and organizational measures to protect your personal data: • SSL encryption of all communications • Limited access to personal data only for authorized employees • Regular security audits • Secure data storage in certified EU data centers

Under GDPR, you have the following rights: • Right of access: to receive a copy of your personal data • Right to rectification: to request correction of inaccurate data • Right to erasure: to request deletion of your data • Right to restriction: to restrict the processing of your data • Right to portability: to receive your data in a structured format • Right to object: to object to the processing of your data To exercise your rights, please contact us at office@gambit-technologies.com