Privacy Policy
Effective date: June 15, 2026
Who we are
This website, gerald.us, is operated by Gerald US, Inc., 4 Venture, Suite 210, Irvine, CA 92618, United States ("Gerald," "we," "us"). For any privacy question or request, contact us at info@gerald.us.
Our Japanese website, gerald.co.jp, is operated by our affiliate Gerald K.K. (Tokyo, Japan). The Japanese-language privacy policy published on gerald.co.jp identifies Gerald K.K. as the business operator responsible for personal information collected there.
What this policy covers
This policy explains what personal information we collect on this website, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to website visitors, people who contact us or download our resources, newsletter subscribers, and job applicants.
Personal data we process while delivering consulting or managed services to clients is governed by the agreements with those clients, not by this policy.
Information we collect
Information you give us
- Contact and booking forms: your name, business email address, company, the service you are interested in, and your message or scheduling details.
- Newsletter: your email address.
- Resource downloads: some guides and whitepapers ask for your name, business email, and company before download.
- Job applications: your name, contact details, CV/résumé, cover letter, and any information you include about your work history and qualifications.
Information collected automatically
- Usage data: IP address, browser and device type, the pages you visit, time spent, referring page, and interactions such as clicks and downloads.
- First-party analytics: we operate our own analytics, which assigns your browser a random visitor identifier to count page views, sessions, and resource downloads. This data is stored in our own database and is not shared with advertising networks.
- Google Analytics: with your consent (see our Cookie Policy), we use Google Analytics to understand how the site is used.
- Security data: we process IP addresses to rate-limit job application submissions and protect the site against abuse.
We do not collect payment information through this website. We do not knowingly collect data from children under 16, and the site is not directed at them.
How we use your information
- To respond to your inquiries and provide the information or meetings you request.
- To send you resources you download and, if you subscribed, our newsletter (you can unsubscribe at any time via the link in every email).
- To review and respond to job applications. AI-assisted tools may help our team by summarizing applications; every hiring decision is made by a human being, and no application is rejected by automated means.
- To understand how our website is used and improve it.
- To keep the website secure and prevent abuse.
- To comply with legal obligations.
For visitors from the EEA/UK: our legal bases are your consent (analytics cookies, newsletter), our legitimate interests (responding to inquiries, first-party analytics, security, recruitment administration), and compliance with legal obligations.
We do not sell your information
We do not sell or rent personal information, and we do not share it with third parties for advertising purposes. There are no advertising or social-media tracking pixels on this site.
Who we share information with
We share personal information only with service providers who process it on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and backend hosting — forms, applications, analytics | United States |
| Lovable | Website hosting | EU / United States |
| Google Analytics — website usage statistics, consent-based | United States | |
| Resend | Transactional email and notifications | United States |
We may also disclose information if required by law or legal process, to protect our rights or safety, or as part of a corporate transaction (merger, acquisition), in which case this policy continues to apply to the transferred data.
International transfers
Our infrastructure is located primarily in the United States. If you visit from outside the US (including Japan and the EEA), your information is transferred to and processed in the United States. Where required, our providers rely on recognized transfer safeguards (such as the EU-U.S. Data Privacy Framework or standard contractual clauses).
For users of gerald.co.jp: personal information collected by Gerald K.K. is stored on infrastructure operated by the US providers listed above. Details required under the Act on the Protection of Personal Information (APPI), including information about the protection regime of the destination country, are provided in the Japanese-language policy on gerald.co.jp.
How long we keep information
| Category | Retention period |
|---|---|
| Contact, booking, and lead records | 24 months after our last interaction with you |
| Newsletter subscription | Until you unsubscribe |
| Job applications | 12 months after the application process ends; longer only with your consent |
| Website analytics (first-party and Google Analytics) | 24 months |
| Records we must keep by law | As long as the law requires |
Your rights and choices
Wherever you are located, you can contact us at info@gerald.us to request access to, correction of, or deletion of your personal information, to object to a particular use, or to withdraw a consent you have given. We will verify your request and respond within the timeframe required by applicable law (and in any case within 30 days where feasible).
California residents
We do not sell or share personal information as defined by the CCPA/CPRA, and we honor access, deletion, and correction requests as described above. We do not discriminate against anyone for exercising privacy rights.
EEA/UK visitors
In addition to the rights above, you may lodge a complaint with your local data protection supervisory authority.
Japan
Requests for disclosure, correction, or suspension of use under the APPI relating to gerald.co.jp should be directed to Gerald K.K. via the contact details in the Japanese-language policy. Requests relating to this site can be made to info@gerald.us.
Do Not Track / Global Privacy Control
Our site does not currently respond to browser "Do Not Track" signals. Because we do not sell or share personal information, there is no sale or sharing for Global Privacy Control signals to opt out of. Analytics cookies can be declined in the cookie banner at any time.
Security
We protect personal information with encryption in transit, access controls and row-level security on our databases, and monitoring of our systems. No internet transmission is completely secure, but we work to protect your data appropriately.
Changes to this policy
When we update this policy we will post the new version here with a new effective date, and flag material changes with a notice on the website.