1. Information we collect
We may collect information that you provide, including your name, business email, company name, telephone number, service requirements, project details, and communications with us. Our hosting and security systems may also receive limited technical information such as IP address, browser type, device type, referring page, access time, and diagnostic or security logs.
2. How we use information
- Respond to inquiries and evaluate requested services.
- Prepare proposals, scopes of work, and potential engagement terms.
- Communicate with clients, prospects, suppliers, candidates, and business partners.
- Operate, secure, maintain, and improve our website and business systems.
- Prevent fraud, misuse, security incidents, and unlawful activity.
- Comply with legal, tax, accounting, and regulatory obligations.
3. Client information and managed specialist services
During an engagement, GBH may process information on behalf of a client as a service provider or processor. The client remains responsible for determining the lawful purpose and instructions for that processing. We process client information only for the contracted business purpose and subject to the written agreement, confidentiality obligations, and applicable security requirements.
Depending on the engagement, authorized team members or subcontractors may support delivery from the United States, Eastern Europe, Africa, Asia, or another client-approved location. Access is limited to personnel who need the information to perform assigned work and who are subject to confidentiality obligations.
4. How we disclose information
We may disclose information to hosting, email, security, communications, professional advisory, payment, and other vendors that help operate our business. We may also disclose information to assigned personnel and subcontractors when reasonably necessary to evaluate or provide requested services.
We may disclose information where required by law, legal process, court order, or a valid government request, or where reasonably necessary to protect rights, safety, property, or service integrity.
5. International access and transfers
Because we manage distributed teams, information may be accessed or processed in countries other than the country where it was collected. Where required by the engagement or applicable law, we use appropriate contractual and organizational safeguards. Clients requiring specific transfer mechanisms, data-location restrictions, or a data processing agreement should identify those requirements before work begins.
6. Data retention
We retain inquiry and business-contact information only as long as reasonably necessary for the purposes described here, to maintain business records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary according to the information and relationship.
7. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the information handled. No system is completely secure, and we cannot guarantee absolute security. Do not submit passwords, payment card details, protected health information, government identification numbers, export-controlled information, or other highly sensitive data through the public inquiry form.
8. Your choices and privacy requests
You may request access to, correction of, or deletion of personal information that we hold about you, subject to legal and operational exceptions. You may also ask us to stop non-essential communications.
We do not sell personal information and do not currently use personal information for cross-context behavioral advertising. If our practices materially change, we will update this policy.
9. State and regional privacy rights
Depending on your location and whether a particular law applies to GBH, you may have additional rights concerning access, correction, deletion, portability, or objection to certain processing. We evaluate verified requests under the law applicable to the request and our business.
10. Children
This website and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 through this website.
11. Changes to this policy
We may update this policy as our services, technology, or legal obligations change. The effective date above shows the latest revision.
Email: [email protected]
Please include "Privacy Request" in the subject line.