Privacy Policy.

Who we are

GEAFirst is a digital advertising agency specialising in Generative Engine Advertising (GEA). Our website is geafirst.com. We are responsible for the processing of personal data as described in this privacy policy.

What data we collect

We only collect personal data that you voluntarily provide to us. This happens in the following situations:

• Contact form: when you submit a message through our contact form, we collect your name, company name, email address, the service you are interested in, and the message you write.
• Waitlist and early access forms: when you register your email address for our waitlist or early access list.

We do not collect any data automatically beyond standard server logs (IP address, browser type, pages visited) that are retained for security and performance purposes only.

How we use your data

We use the data you provide exclusively to:

• Respond to your enquiry or message
• Notify you when early access or waitlist opportunities become available, if you have registered for these
• Improve our services based on the feedback and context you share

We do not use your data for automated decision-making, profiling, or any purpose beyond direct communication with you.

Who we share your data with

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with the following categories of service providers, solely to operate our website and communicate with you:

• Hosting provider: our website and its data are hosted on servers within the European Union
• Email service provider: used to send and receive emails in response to your contact form submissions

All service providers are contractually bound to process your data only on our behalf and in accordance with applicable data protection law.

Cookies

Our website uses a single functional cookie to store your cookie consent preference. We do not use tracking cookies, advertising cookies, or third-party analytics cookies without your explicit consent.

You can withdraw your consent at any time by clearing your browser cookies. This will cause the cookie notice to reappear on your next visit.

How long we keep your data

We retain contact form submissions for a maximum of 12 months after the last communication with you, unless a longer retention period is required for legal or contractual reasons. Waitlist registrations are retained until you unsubscribe or request deletion.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access: you can request a copy of the data we hold about you
• Right to rectification: you can ask us to correct inaccurate data
• Right to erasure: you can ask us to delete your data
• Right to restriction: you can ask us to limit how we use your data
• Right to object: you can object to our processing of your data
• Right to data portability: you can request your data in a machine-readable format

To exercise any of these rights, contact us at hello@geafirst.com. We will respond within 30 days.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS. Access to data is restricted to authorised personnel only.

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page reflects the most recent update. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, contact us at:

GEAFirst
Email: hello@geafirst.com
Website: geafirst.com