Privacy Policy

Effective date: October 17, 2026 · Last updated: October 17, 2026

1. Who we are. This Privacy Policy explains how we collect, use and protect personal information when you visit gatsby.ac (the "Site") or contact us through it. "We", "us" and "our" mean the controller named below. Controller: Gatsby Giveaways Inc., a Delaware corporation, Houston, Texas, United States. Email: team@gatsby.ac. The Site is informational for prospective brand partners. No sales or payments take place on the Site.

2. Information we collect. Enquiry form. When you use the enquiry form on the Site, we collect the details you enter: your name, work email, brand, store or channel, website or store URL, audience size or monthly orders, preferred launch window and any message you add. Cal.com booking. When you book a call through our Cal.com booking page, Cal.com collects and shares with us your name, email address, the time and time zone you choose, any answers to booking questions and the meeting link details. Cal.com also handles some data under its own privacy policy. Emails and calls. If you email us or join a call, we keep your messages and any notes we take about your enquiry. Technical data. Our hosting provider records standard server log data when you visit, such as IP address, browser type, pages requested and the date and time of the request. The Site loads fonts from Google Fonts, so Google receives your IP address when a page loads. Analytics. We do not currently use analytics or advertising tools on the Site. Please do not send us sensitive personal information (for example health data or government ID numbers) through the Site.

3. How we use information and our legal bases. To reply to enquiries and arrange scoping calls. Legal basis: steps you ask us to take before a possible contract, and our legitimate interest in responding to business enquiries. To assess and prepare a possible partnership, including projections you request. Legal basis: legitimate interests and pre-contract steps. To run, secure and fix the Site. Legal basis: legitimate interests in a safe, working Site. To meet legal obligations and defend legal claims. Legal basis: legal obligation and legitimate interests. We send marketing emails only if you ask to receive them. We do not use your information for automated decisions that have legal or similar effects on you.

4. Sharing with service providers. We share personal information only with service providers that process it on our behalf and under contract, such as: website hosting (DigitalOcean); the enquiry form delivery tool; Cal.com, for call booking; our email provider (Google Workspace); Namecheap, the domain registrar; and Google Fonts, for loading fonts. We may also disclose information to professional advisers, to authorities where the law requires it, to protect our rights, or to a buyer or successor in a merger, acquisition or sale of assets. We do not sell personal information and we do not share it for cross-context behavioral advertising.

5. International transfers. We are based in the United States and our service providers may process data in the United States and other countries. Where EU or UK law applies, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or an adequacy decision where one exists.

6. Retention. Enquiry, booking and email records: up to 24 months after our last contact with you, unless you become a partner. If you become a partner: for the length of the relationship and afterwards as long as needed for legal, tax and accounting purposes. Server logs: as set by our hosting provider, normally no more than 90 days. We delete or anonymize information when it is no longer needed.

7. Security. We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

8. Your rights. EEA and UK (GDPR and UK GDPR). You may ask to access, correct or delete your personal information, to restrict or object to our use of it, and to receive a copy in a portable format. Where we rely on consent, you may revoke it at any time. You may also complain to your local data protection authority (in the UK, the Information Commissioner's Office). California and other US states (CCPA style). Depending on where you live, you may have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, and to opt out of its sale or sharing. We do not sell or share personal information and do not use sensitive personal information to infer characteristics. In the past 12 months we have collected identifiers (such as name and email), professional or business information (such as brand and audience details) and internet activity (such as server log data), from you directly and from the tools named above, for the purposes in Section 3. We will not discriminate against you for using your rights. You may use an authorized agent. How to use your rights. Email team@gatsby.ac. We may need to verify your identity before we act. We reply within one month for GDPR requests and within 45 days for US state requests, and will tell you if we need more time as the law allows.

9. Cookies. The Site itself does not set cookies. Our Cal.com booking page may set its own cookies when you visit it, under Cal.com's cookie policy. If we add analytics or other non-essential cookies, we will update this section and ask for your consent where the law requires it. You can block or delete cookies in your browser settings.

10. Children. The Site is meant for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

11. Changes to this policy. We may update this policy from time to time. We will post changes on this page and update the "Last updated" date above.

12. Contact. Questions or requests about privacy: team@gatsby.ac.