Privacy Policy | Giant Aim

01

Who We Are

Giant Aim ("we", "us", "our") is a performance marketing agency. Our website is giantaim.site. We act as the data controller for personal data collected through this website.

If you have any questions about this policy, contact us at hi@giantaim.site.

02

Data We Collect

We only collect data you voluntarily provide when completing our qualification quiz or contacting us directly.

Category	Data points	Required?
Identity	First name, last name	Yes
Contact	Email address, phone number	Email yes, phone optional
Business	Company name, website URL, country, what you sell, monthly budget, current revenue, target revenue	Optional
Quiz responses	Marketing channels used, business description, #1 obstacle, growth timeline, commitment score, how you heard about us	Optional
Booking	Chosen call date, time, and timezone	Optional
Technical	Vercel server logs may capture IP address and browser user-agent automatically	Automatic

We do not collect payment information, government IDs, or any special category data (health, race, religion, etc.).

03

How We Use It

To contact you — respond to your inquiry and schedule a free audit call
To send booking confirmations — transactional emails confirming your scheduled call
To qualify leads — determine whether we're a good fit for each other before investing both our time
To improve our service — understand what problems our prospective clients face

            We do not sell your data. We do not use it for automated decision-making or profiling. We do not add you to marketing lists without your explicit consent.
        

04

Legal Basis for Processing

For visitors in the UK and European Economic Area, our legal basis for processing your personal data is:

Legitimate interests — responding to a business enquiry you initiated (Article 6(1)(f) UK GDPR)
Contract — taking pre-contractual steps at your request (Article 6(1)(b) UK GDPR)
Consent — where we ask for it explicitly before sending non-transactional communications

For visitors in Australia, we handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

For visitors in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).

For visitors in California, USA, see your specific rights under the CCPA in Section 7 below.

05

Who We Share It With

We use a small number of trusted third-party services to operate the site. Your data is shared only with:

Service	Purpose	Location
Supabase	Secure database storage of lead submissions	United States (AWS)
Resend	Transactional email delivery (booking confirmations)	United States
Vercel	Website hosting and serverless functions	United States / Edge network

We do not share your data with advertisers, data brokers, or any other third parties. We will disclose data to law enforcement only if legally required to do so.

06

How Long We Keep It

Active leads — retained for up to 2 years from the date of submission
Non-responsive enquiries — deleted after 6 months of no contact
Email logs — retained by Resend per their own data retention policy (typically 30 days)

You can request deletion at any time — see Section 7 for how.

07

Your Rights

Depending on where you're based, you have some or all of the following rights over your personal data:

Access Request a copy of the personal data we hold about you.

Correction Ask us to fix inaccurate or incomplete data.

Erasure Ask us to delete your data ("right to be forgotten").

Portability Receive your data in a structured, machine-readable format.

Restriction Ask us to stop processing your data while a dispute is resolved.

Objection Object to processing based on legitimate interests.

California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

To exercise any right, email us at hi@giantaim.site with the subject line "Privacy Request". We'll respond within 30 days. We may need to verify your identity before actioning the request.

If you're in the UK or EU and are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK at ico.org.uk).

08

Cookies

We use the following analytics and advertising tools, all of which require your explicit consent via our cookie banner before loading:

Microsoft Clarity — records anonymised session heatmaps and user journey data to help us improve the site experience. Data is processed by Microsoft.
Meta (Facebook) Pixel — measures ad campaign performance and conversion events (e.g. consultation bookings). Data is processed by Meta Platforms, Inc.
Google Tag Manager — a tag management container that loads the above tools. No data is collected by GTM itself.

If you decline cookies, none of these scripts are loaded and no tracking data is collected. You can change your preference at any time by clearing your browser's localStorage for this site.

Your browser may also store session data (localStorage) while you complete the quiz — this stays on your device and is not transmitted to us until you submit the form.

09

Security

We take reasonable technical measures to protect your data:

All data is transmitted over HTTPS (TLS encryption)
Database access is restricted to server-side functions using a private service key — no public access
Row-level security is enabled on our database; only our backend can read or write records
API keys and credentials are stored as server-side environment variables, never in client-side code

No system is 100% secure. If you believe your data has been compromised, contact us immediately at hi@giantaim.site.

10

Contact Us

For any privacy-related questions, requests, or complaints:

Giant Aim
Email: hi@giantaim.site
Website: giantaim.site

We aim to respond to all privacy requests within 30 days.

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised "Last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.