Privacy Policy

Last updated: 13 May 2026

This Privacy Policy describes how Gigablue Ltd. and its affiliates ("Gigablue", "we", "us", or "our") collect, use, store, share, and protect information about you when you visit www.gigablue.co (the "Site"), submit a form, correspond with us, or otherwise interact with us. This policy is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the Brazilian LGPD, and the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13 of 2024).

  1. Who we are and how to contact us

Data controller: Gigablue Ltd.
Mailing address: 169 Madison Ave STE 2871, New York, NY 10016, USA
Email for privacy enquiries: hello@gigablue.co (subject line "Privacy")

If you contact us about your personal data, please tell us which right you are exercising and provide enough information for us to verify your identity. We aim to respond within 30 days (or sooner where the law requires).

  1. What information we collect

We collect the following categories of personal data:

  • Information you give us directly: your name, email address, the content of your message, and any other details you choose to share when you use our contact / feedback form, subscribe to updates, request a carbon removal proposal, or correspond with us by email.
  • Information collected automatically when you use the Site: IP address, approximate location derived from IP, device and browser characteristics, operating system, language, referring URL, the pages you view, links you click, the date and duration of your visit, and similar diagnostic data.
  • Information from third-party enrichment and analytics services: our analytics and marketing tools may match your IP address or device signals with publicly available business records (for example, the company you appear to be visiting from, its industry, size, and location). We do not collect special-category data (such as data about your health, religion, or political opinions).
  • Cookies and similar technologies: see Section 8 and our separate Cookie Policy.
  1. Why we collect it and the legal basis

We process personal data for the following purposes:

  • To respond to your enquiries and provide information you request (legal basis: performance of a contract, or our legitimate interest in operating our business; under Israeli law, your consent given when you submit the form).
  • To operate, secure, and improve the Site (legal basis: our legitimate interest in maintaining a functional, secure website).
  • To send you marketing or business communications where you have requested them or where we are otherwise permitted by law (legal basis: your consent; or our legitimate interest in promoting carbon-removal services to businesses, subject to your right to opt out).
  • To measure and improve marketing performance using Google Ads conversion tracking and HubSpot analytics (legal basis: your consent for non-essential cookies in jurisdictions where required; otherwise our legitimate interest).
  • To comply with legal obligations such as tax, accounting, record-keeping, responding to lawful requests, and exercising or defending legal claims (legal basis: legal obligation; legitimate interest).
  1. Who we share it with

We do not sell your personal data. We share it only with:

  • Service providers acting on our instructions: Squarespace (website hosting and form processing), HubSpot (CRM and email), Google (Google Ads / Google Analytics), Apollo.io (B2B contact enrichment and website visitor analytics), and similar processors under written contracts that require them to protect your data.
  • Professional advisers such as lawyers, accountants, auditors, and insurers, where reasonably necessary.
  • Authorities and regulators where we are legally required to do so or where it is necessary to protect our rights, safety, or property, or the rights, safety, or property of others.
  • Acquirers and successors in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business; in any such case the recipient will be bound by terms at least as protective as this policy.
  1. International transfers

We are based in the United States and Israel and use service providers located in the United States, the European Economic Area, the United Kingdom, and other countries. When we transfer personal data outside the EEA, the UK, or Israel to a country that does not have an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms. A copy of the relevant safeguards is available on request from <hello@gigablue.co data-preserve-html-node="true">.

  1. How long we keep it

We retain personal data only for as long as we need it for the purposes set out in this policy. Enquiry data is typically kept for up to 36 months after our last meaningful contact with you, after which we delete or anonymize it. We may keep data longer where the law requires (for example, for tax or accounting purposes) or where it is needed to establish or defend a legal claim.

  1. Your rights

Depending on where you live, you may have the following rights in relation to your personal data:

  • Access a copy of the data we hold about you.
  • Rectification of inaccurate or incomplete data.
  • Erasure ("right to be forgotten") in certain circumstances.
  • Restriction of processing in certain circumstances.
  • Portability of the data you provided to us in a structured, machine-readable format.
  • Objection to processing based on legitimate interests or for direct marketing.
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • For California residents: the right to know, delete, correct, and limit the use of sensitive information; the right to opt out of sale or sharing for cross-context behavioral advertising; and the right not to be discriminated against for exercising these rights.
  • For Brazilian residents (LGPD): equivalent rights of access, anonymization, deletion, portability, and information about sharing.
  • For Israeli residents: the rights set out in sections 13 and 14 of the Israeli Privacy Protection Law, including the right to review and correct your information.

To exercise any of these rights, email hello@gigablue.co. You also have the right to lodge a complaint with a supervisory authority:

  1. Cookies and tracking technologies

We use first-party and third-party cookies and similar technologies (pixels, tags, local storage) for essential site functions, performance measurement, and advertising. Categories used on our Site:

  • Strictly necessary cookies set by Squarespace to keep the Site secure and functional. These do not require consent.
  • Analytics cookies set by HubSpot to understand how visitors use the Site so we can improve it.
  • Advertising cookies set by Google Ads (conversion tracking) and by Apollo.io's visitor identification script to measure marketing performance and identify business visitors.

You can accept or reject non-essential cookies through the cookie banner shown on your first visit. You can change your choices at any time by clearing your browser storage or by emailing us. See our Cookie Policy for the full list.

  1. Children

The Site is not intended for, and we do not knowingly collect personal data from, children under 16. If you believe a child has provided us with personal data, please email <hello@gigablue.co data-preserve-html-node="true"> and we will delete it.

  1. Security

We use commercially reasonable technical and organizational measures designed to protect personal data, including encryption in transit (TLS), access controls, and vendor due diligence. No system is perfectly secure, however, and we cannot guarantee absolute security.

  1. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. If the changes are material, we will provide a more prominent notice (for example, by posting a banner on the Site).

  1. Contact

Questions or complaints about this policy or our handling of personal data: hello@gigablue.co.