Privacy Policy
Last updated: May 8, 2026
This Privacy Policy describes how Giants Tokenomics Labs (“we”, “us”, “our”) collects, uses, and shares your personal information when you visit giantslabs.pro or engage with our services.
1. Who we are
Giants Tokenomics Labs is a tokenomics consulting firm specializing in design, modeling, audit, and tokenization for web3 projects. The data controller for personal data collected on this site is Alexey Karanyuk, Individual Entrepreneur registered in Georgia (the country), with primary contact email alexey@karanyuk.com.
For questions about this policy or to exercise your data subject rights, contact alexey@karanyuk.com.
2. What data we collect
We collect personal data through the following channels.
Inquiry forms (/quote/)
When you submit a project brief through our quote form, we collect:
- Name, email, company or project name, optional Telegram handle
- Project context — stage, sector, service interest
- Materials links you choose to share
- Description of your needs, optional timeline and budget range
- Optional source of how you found us (for attribution analytics)
- Submission timestamp and IP address (for spam prevention)
Booking (/book/)
When you book a discovery call through zcal:
- Name, email
- Selected date and time slot
- Optional context note you provide
- Time zone
Analytics (with your consent)
If you accept analytics cookies, we collect:
- IP address (anonymized where supported)
- Browser, device, operating system
- Pages visited, time on site, referral source
- Geographic region at country or city level
We use Google Analytics 4 (Google LLC, US/EU) and Yandex.Metrica (Yandex LLC, Russia/Netherlands) for this purpose. Without your consent, none of this is collected.
Marketing (with your consent)
If active and accepted by you, we may use Meta Pixel (Meta Platforms Inc., US/Ireland) for conversion tracking on Meta-served ads.
What we don’t collect
- Sensitive data — race, religion, health, sexual orientation, political opinions
- Children’s data — our services are B2B and not directed to users under 18
- Financial account credentials, passwords, or payment card information
3. How we use your data
We process personal data on the following lawful bases under GDPR Article 6:
| Purpose | Lawful basis |
|---|---|
| Respond to your inquiry, schedule calls, deliver consulting services | Legitimate interest (B2B inquiry response); contractual necessity once engaged |
| Improve our website and services through analytics | Your consent (revocable any time via cookie settings) |
| Comply with legal obligations (e.g., regulatory requests, accounting) | Legal obligation |
| Spam prevention on inquiry forms | Legitimate interest |
We do not use your data for automated decision-making or profiling that produces legal or significant effects.
4. Who we share data with
We use the following third-party processors, who may handle your data on our behalf:
| Provider | Purpose | Location | Privacy Policy |
|---|---|---|---|
| Web3Forms | Inquiry form submissions | Ireland (EU) | https://web3forms.com/privacy |
| zcal | Discovery call scheduling | United States | https://zcal.com/privacy |
| Google LLC | Analytics (GA4) — with consent | United States, EU | https://policies.google.com/privacy |
| Yandex LLC | Analytics (Yandex.Metrica) — with consent | Russia, Netherlands | https://yandex.com/legal/confidential |
| Meta Platforms Inc. | Conversion tracking — with consent | United States, Ireland | https://www.facebook.com/about/privacy |
| GitHub Inc. | Static site hosting (giantslabs.pro) | United States | https://docs.github.com/en/site-policy/privacy-policies |
| Cloudflare Inc. | DNS and CDN | United States, global | https://www.cloudflare.com/privacypolicy/ |
We do not sell personal data to third parties. We do not share data for direct marketing purposes by other companies.
5. International transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) and United Kingdom, including the United States and Russia.
For transfers to the US (zcal, Google, Meta, GitHub, Cloudflare partial), we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Where applicable, the EU-US Data Privacy Framework
For transfers to Russia (Yandex), we rely on Standard Contractual Clauses and your explicit consent for analytics cookies.
You may request copies of these safeguards by emailing alexey@karanyuk.com.
6. How long we keep data
| Data category | Retention period |
|---|---|
| Inquiry submissions (without engagement) | 24 months from submission |
| Active client data | Duration of engagement plus 7 years (statutory limitation period for contracts) |
| Booking calendar data | 12 months from booking |
| Analytics data | 14 months (GA4 default), revocable sooner via consent withdrawal |
| Email correspondence | 7 years for accounting and legal compliance |
After retention periods expire, data is permanently deleted or anonymized.
7. Your rights
Under GDPR, UK GDPR, and similar privacy laws, you have the following rights:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — request deletion, subject to legal retention obligations
- Restriction — request limited processing while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — for analytics or marketing cookies, anytime via cookie settings on this site
- Lodge a complaint with your local supervisory authority (e.g., ICO in UK, CNIL in France, Datatilsynet in Denmark)
To exercise these rights, email alexey@karanyuk.com. We respond within 30 days. We may need to verify your identity before fulfilling requests.
8. Cookies and tracking
We use cookies and similar technologies for three purposes:
- Essential cookies — site functionality (language preference, consent state). No consent required, no opt-out
- Analytics cookies — Google Analytics 4, Yandex.Metrica. Used only with your explicit consent through the cookie banner
- Marketing cookies — Meta Pixel (if active). Used only with your explicit consent
You can manage your consent at any time through the cookie settings link in our footer or by clearing your browser cookies. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.
For Google Ads we use Google Consent Mode v2 — without your consent, Google receives only anonymized cookieless pings and cannot track you individually.
9. Children’s privacy
Our services are B2B and not directed to children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact alexey@karanyuk.com and we will delete it.
10. Security
We protect personal data with reasonable technical and organizational measures: HTTPS-only transport, restricted access on a need-to-know basis, encryption of stored credentials, and contractual security obligations from sub-processors.
No system is perfectly secure. In case of a data breach affecting your rights, we notify the supervisory authority within 72 hours and notify you directly without undue delay where feasible.
11. Changes to this policy
We may update this Privacy Policy from time to time. The Last updated date at the top reflects the most recent revision. Material changes will be announced through a notice on giantslabs.pro and, where you have an active engagement, by direct email.
Previous versions are available on request.
12. Contact
For questions about this Privacy Policy or to exercise your rights:
- Email: alexey@karanyuk.com
- Postal address: 12 Ushangi Chkheidze Street, 0102 Tbilisi, Georgia
Supervisory authority for EU data subjects: your local Data Protection Authority. For UK: Information Commissioner’s Office (ICO), https://ico.org.uk.