Privacy Policy
Last updated: September 29, 2026
Who is responsible
Moore World Wide Enterprises, LLC, doing business as gigiii, is the controller for the processing described here.
2102 Quail Hollow Dr Bryan, Texas 77802 United States Represented by: Judson Moore, President & CEO Contact: hello@gigiii.com
EU representative (Article 27 GDPR): Judson Moore Contact: gdpr@gigiii.com
This notice applies to website visitors, people who previously submitted registration interest, members, public-event visitors and people who contact us. The separate Data Protection Roles and Limited Processor Terms explain the exceptional, limited circumstances in which gigiii may process data solely on a member's documented instructions.
Location suggestions
When profile location fields are empty, we use approximate country and city metadata supplied by our hosting provider from your internet connection to suggest a location. Our legitimate interest under Article 6(1)(f) GDPR is to make profile setup easier with minimal data. The country is editable; the city is not saved as your base until you select it. The suggestion is used for the current form only, without a separate IP or inferred-location record, tracking cookie or device GPS access. A suggested city is sent to our place-search provider only when you choose to search for it. Existing profile locations are preserved.
Data we process
| Category | Examples |
|---|---|
| Account and authentication | Name, email address, authentication-provider details, account role and session data. |
| Profile and marketplace | Profile descriptions, professional location, capacity, pricing, technical requirements, portfolio items and contact methods. |
| Bookings and events | Applications, requests, agreed terms, availability, holds, agreement and signature metadata, RSVP name/email/party size, and ticket-order metadata. gigiii does not receive card numbers. |
| Communications and support | Notifications, support requests, problem reports and related metadata. Authorised problem reports may be copied to private GitHub Issues for triage. |
| Technical and security | IP address, browser and device information, server logs, cookies, session/security data and error/performance telemetry. |
| Location and forms | Place-search or address query data, map requests, and public contact form fields, previously submitted registration-interest fields, and anti-abuse data. |
| Consent and marketing | Cookie choices; consented advertising click and browser identifiers, public event/conversion data and widget context; and, where separately opted in, email, name, user ID, role/group and marketing-subscription state. |
The service is for adults and is not directed to people under 18. We do not knowingly collect children's data.
Why we process data
| Purpose | Legal basis | Retention |
|---|---|---|
| Account, authentication, profile, booking, RSVP and event services | Article 6(1)(b) GDPR | For the account or service relationship. An incomplete signup that has not accepted the Terms and this notice is anonymised after 7 days. |
| Operational notifications | Articles 6(1)(b) and 6(1)(f) GDPR | Read in-app notifications are eligible for deletion after 90 days. Completed email-outbox records are retained for 30 days; failed records for 90 days. |
| Security, abuse prevention, moderation, error monitoring and service reliability | Article 6(1)(f) GDPR, our legitimate interest in a safe and reliable marketplace | For the period needed for the relevant purpose and the applicable log/provider-retention setting. |
| Legal, tax, accounting and claims records | Articles 6(1)(c) and, where needed, 6(1)(f) GDPR | For the applicable statutory retention or limitation period. |
| Consent-based analytics and host-owned GA4 on applicable public-event surfaces | Article 6(1)(a) GDPR and, where applicable, consent under national cookie law | Until consent is withdrawn or the provider's configured retention period expires. |
| Organizer advertising measurement on public event pages | Article 6(1)(a) GDPR and, where applicable, consent under national cookie law | Until consent is withdrawn or the organizer/provider's configured retention period expires. Requires separate Analytics and Marketing cookie choices. |
| Marketing emails | Article 6(1)(a) GDPR | Until consent is withdrawn or the marketing record is deleted under the provider's retention process. |
Account and booking data are needed for the relevant marketplace function. If you do not provide them, we may be unable to create an account, publish a profile or process a booking. Analytics and marketing are optional.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects.
Recipients
We do not sell personal data. We disclose it only to:
- approved members, where necessary for the requested discovery, booking or RSVP feature. A member receiving disclosed information normally acts as a separate controller for its own use;
- event organizers and their advertising providers, only when the visitor has accepted Analytics and Marketing for organizer-controlled advertising tags on public event pages;
- the providers listed on Sub-processors and Service Providers, for hosting, database, authentication, file storage, email, anti-abuse, maps, diagnostics, analytics and operational support;
- pretix and the seller of record for paid tickets. The seller chooses any payment provider in pretix; gigiii neither selects that provider nor handles card payments; and
- public authorities or other recipients where disclosure is required by law or necessary to protect rights and safety.
International transfers
Some providers process data outside the EEA, including in the United States. Where required, we use an adequacy decision, EU Standard Contractual Clauses or another safeguard under GDPR Chapter V. Provider-specific location and transfer notes are available on Sub-processors and Service Providers. You may ask us for information about the applicable safeguard.
Account closure and retention
When you close an account, we irreversibly anonymise it rather than offering a routine hard deletion. We unpublish and scrub public profiles, events, contacts, links, media and availability. Confirmed, completed and cancelled booking history, including immutable agreement and invoice records, is retained only in a restricted legal archive where required for legal, accounting or claims purposes.
Your rights
You may request access, rectification, erasure, restriction, portability, or information about recipients and safeguards; withdraw consent at any time; and complain to your local data-protection supervisory authority. Contact gdpr@gigiii.com or hello@gigiii.com. We normally respond within one month.
Right to object
Where we process your data under Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to direct marketing at any time. We will stop the affected processing unless compelling legitimate grounds override your interests, rights and freedoms or the processing is required for legal claims.
Cookies and tracking
We use strictly necessary cookies and device access for authentication, security and form anti-abuse. Optional analytics through Google Tag Manager, Google Analytics 4, Microsoft Clarity and Vercel Analytics / Speed Insights run only with consent. On public event pages, organizer-controlled advertising tags such as Meta Pixel require separate Analytics and Marketing choices. These tags may receive the event URL, click and browser identifiers, and allowlisted conversion details such as the public event ID and RSVP quantity, but not guest names or email addresses from gigiii. Marketing-email consent is separate. See the Cookie Policy.
Changes and contact
We may update this notice and will communicate material changes by email or prominent platform notice. For privacy questions or to exercise rights, contact gdpr@gigiii.com or hello@gigiii.com.