Privacy Policy

1. Who is responsible for your data

The data controller is GIGA IT LLC, a U.S. company with its legal address at 2028 Buffalo Terrace, Houston, TX 77019, USA, phone +1 (832) 850-4678. Depending on the country you contact us from, the GIGA group company serving you acts as joint or local controller: GIGA IT Colombia (NIT 900239678-5) in Colombia, GIGA IT ARGENTINA in Argentina, GIGA AUTOMATION & IT LTDA in Brazil, and AUTO-GIGA SA DE CV (RFC AGG110915HM5) in Mexico. You can request the full corporate details of each entity through the channels below.

Privacy contact: info@grupo-giga.com (subject "Privacy").

2. Personal data we collect

• Contact forms (Microsoft Dynamics 365): name, business email, phone, company, job title, country, and the details you share about your project or hiring needs.
• Webchat: the messages, voice notes and files you send, the full conversation transcript, and the contact details you choose to give us.
• Meeting booking: name, email and the time you select.
• Technical and usage data: IP address, device and browser, pages visited, referring source, approximate location and interaction events, collected through cookies and similar technologies.
• Marketing communications: your subscription status and whether you open or click our emails.

We do not knowingly collect sensitive data. Please do not include it in forms or chats.

3. Cookies and analytics

We use Google Tag Manager to manage Google Analytics 4 (measurement), Google Ads (conversions and remarketing), LinkedIn Insight Tag, Microsoft Advertising (Bing) UET and, where enabled, the Meta Pixel. These tools may set cookies and receive your IP address and browsing events. Non-essential cookies only run with your consent through our cookie banner (Google Consent Mode); you can change your choice at any time and you can also block cookies in your browser. We honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing where required.

4. Why we use your data and legal bases

• Answer your inquiry, prepare proposals and manage the business relationship (pre-contractual and contractual measures; legitimate interest in B2B communication).
• Operate, secure and improve the website and webchat (legitimate interest).
• Measure campaigns and website performance (consent for non-essential cookies).
• Comply with legal obligations and defend legal claims.
• Newsletter and commercial communications: only if you give separate, optional consent (see section 5).

We do not sell personal data for money. We do not make decisions with legal effects about you based solely on automated processing.

5. Newsletter and commercial communications

If you tick the optional box "I'd like AI news and trends for my team" (never pre-checked), we will use your contact details to send you news, content, events and commercial offers about GIGA IT services. This consent is separate from your inquiry: not ticking it does not affect our answer. Every email includes an unsubscribe link, and you can also withdraw consent by writing to info@grupo-giga.com or the contact channels on this website. We process opt-outs within 10 business days, identify ourselves as sender, use truthful subject lines and include our postal address, as required by CAN-SPAM and local laws.

6. Who we share data with

We share data only with service providers acting on our behalf under contract: Microsoft (Dynamics 365, Microsoft 365), Cloudflare (hosting, security and webchat infrastructure), Google (Analytics, Tag Manager, Ads), LinkedIn, Microsoft Advertising and Meta (advertising measurement), our AI and messaging providers for the webchat, and GIGA group entities that need the data to serve you. We may also disclose data to authorities when legally required or in a corporate transaction.

7. International transfers

Our main systems are in the United States, and some providers process data in other countries. When we transfer data from Colombia, Mexico, Argentina, Brazil or the EU to the U.S. or other countries, we use the safeguards required by each law, such as standard contractual clauses, the EU-U.S. Data Privacy Framework where the provider is certified, contractual commitments and, where applicable, your consent. By submitting your data you are informed that it will be transferred to the United States.

8. How long we keep data

Inquiries, leads and chat transcripts: up to 3 years after the last interaction, unless a contract is signed. Client data: for the term of the contract plus the period required by tax and commercial law. Marketing consent: until you withdraw it. Analytics data: up to 14 months. Then we delete or anonymize it.

9. Your rights

Depending on where you live you may request access, correction, update, deletion, portability, restriction or objection, withdraw consent, and obtain information about who we share data with. In particular:

• California (CCPA/CPRA) and Texas (TDPSA): right to know, delete, correct, opt out of sale, sharing and targeted advertising, and limit use of sensitive data, without discrimination. You may use an authorized agent and appeal a denial by writing to us; if the appeal is denied in Texas you can contact the Texas Attorney General.
• Colombia (Law 1581 of 2012, Decree 1377 of 2013): know, update, rectify and delete your data, request proof of your authorization, revoke it, and file complaints with the Superintendencia de Industria y Comercio (SIC). Queries are answered within 10 business days (extendable by 5) and claims within 15 business days (extendable by 8).
• Mexico (LFPDPPP 2025): ARCO rights (access, rectification, cancellation, opposition) and revocation of consent; we answer within 20 business days. You may go to the competent data protection authority.
• Argentina (Law 25,326): free access every six months, rectification, update and deletion within the legal terms. The Agencia de Acceso a la Información Pública (AAIP), as supervisory authority, handles complaints about breaches of personal data rules.
• Brazil (LGPD): confirmation, access, correction, anonymization, portability, deletion, information on sharing and revocation of consent; complaints to the ANPD.
• EU/EEA (GDPR): access, rectification, erasure, restriction, portability, objection and complaint to your supervisory authority.

10. How to exercise your rights

Write to info@grupo-giga.com or the contact channels on this website or call +1 (832) 850-4678, indicating your name, the right you want to exercise and the country you write from. We may ask you to verify your identity. This is also our channel for questions, complaints and claims (PQR). We respond within the deadlines of the applicable law and, failing a specific one, within 30 days.

11. Security

We apply technical and organizational measures such as encryption in transit, access control and vendor management. No system is 100% secure; if a breach affects you, we will notify you and the authorities as the law requires.

12. Children

Our website is aimed at businesses and professionals. We do not knowingly collect data from people under 18. If you believe a minor has provided data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. We will publish the new version on this page with its date and, if the changes are significant, we will let you know by reasonable means. If a change requires new consent, we will ask for it.