Privacy Policy — goptichub.com
Last updated: 6 June 2026Effective date: 6 June 2026 Published: 23 May 2026 Replaces: GO-HUB Privacy Policy (Website - 2026-04-26).md
1. Introduction
This Privacy Policy describes how Global Optic Hub Ltd. (Company No. 516292901) — operating under the brand "GoHub" and reachable at the address below — collects, uses, discloses, and otherwise processes personal data when you visit or interact with the website at www.goptichub.com (the "Site").
In this Policy, "we", "us", and "our" refer to Global Optic Hub Ltd.; "you" and "your" refer to the individual whose personal data we process.
This Policy applies to the public marketing website only. It does not describe:
- How we process personal data inside the GoHub platform / dashboard at app.goptichub.com (separate Dashboard Privacy Policy)
- How we process personal data on behalf of our customers when they integrate the GoHub platform into their own retailer websites (governed by the relevant Commercial Agreement and any applicable Data Processing Agreement)
- How retailers using the GoHub Virtual Try-On tool collect and process biometric data on their own sites (governed by the GoHub Biometric Data Policy and the retailer-specific consent screen)
If you have any question about this Policy, please contact us at cs@goptichub.com.
2. Who is the controller of your personal data
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the Israeli Privacy Protection Law 5741-1981, and similar laws around the world, the controller of your personal data when you use the Site is:
Global Optic Hub Ltd.
Company No. 516292901
30 Shoham Street, Petach Tikva, 49517, Israel
Email: cs@goptichub.com
Telephone: +972-3-9229070
EU representative (GDPR Article 27)
As an Israeli-established controller processing personal data of individuals in the European Economic Area, we have appointed our EU-established affiliate as our representative under GDPR Article 27. Individuals in the EEA may contact our EU representative directly on any matter relating to the processing of their personal data:
Prestige Business Center, Floor 4
Triaditsa District, Sofia 1463
Stolichna Municipality, Bulgaria
Email: cs@goptichub.com
Data Protection Officer
We have not appointed a DPO; you can direct any data protection enquiries to cs@goptichub.com.
3. The personal data we collect
We collect personal data from three sources: (a) data you provide directly when you interact with the Site; (b) data generated automatically when you browse the Site; and (c) data we receive from third parties.
3.1 Data you provide directly
| Category | Examples |
|---|---|
| Identity and contact data | Name, business email, telephone number, business postal address, job title |
| Company data | Company name, country, role within the company, type of business (retailer, supplier, press, etc.) |
| Enquiry content | The free-text content of any contact form, demo request, partnership request, support enquiry, or similar message you send |
| Marketing preferences | Whether you have subscribed to our newsletter or product updates, your topic preferences, your unsubscribe choices |
| Recruitment data | If you apply for a position, your CV, cover letter, work history, educational background, and any other information you choose to share |
3.2 Data collected automatically when you browse the Site
| Category | Examples |
|---|---|
| Device and connection data | IP address, browser type and version, operating system, device type, screen resolution, language preference |
| Usage data | Pages viewed, links clicked, referrer URL, search terms used to reach the Site, date and time of access, duration of visit, navigation paths |
| Approximate location | Country and region inferred from your IP address (we do not collect precise GPS location) |
| Cookie and similar identifiers | Identifiers stored in cookies, local storage, pixels, or similar technologies — see the Cookie Policy for details |
3.3 Data we receive from third parties
| Category | Examples | Source |
|---|---|---|
| Business intelligence | Public information about your role and company | LinkedIn, public company websites, business directories |
| Form analytics | Information about how you completed a form | Marketing-automation vendors |
| Single sign-on | If you log in via Google, LinkedIn, or similar, your basic profile information | The identity provider you used |
We do not knowingly collect special-category personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, health data, or data about sexual orientation) through the Site. Please do not submit such information.
4. Why we use your personal data, and the legal basis for doing so
We use your personal data only for the purposes described below. The legal basis for each use under GDPR is shown.
| Purpose | What we do | Legal basis (GDPR) |
|---|---|---|
| Operate and secure the Site | Serve pages, authenticate logged-in users, prevent fraud and abuse, ensure availability and security | Legitimate interests (Art. 6(1)(f)) — our interest in operating a secure, functional website |
| Respond to your enquiries | Reply to contact forms, demo requests, partnership requests, press enquiries | Legitimate interests (Art. 6(1)(f)); steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Pre-contract evaluation and onboarding | Assess whether your business is a fit for GoHub, schedule meetings, run product demos, draft commercial proposals | Steps at your request prior to a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Send marketing communications (newsletter, product updates) | Send newsletters and product updates that you have subscribed to | Consent (Art. 6(1)(a)), withdrawable at any time; legitimate interests (Art. 6(1)(f)) for B2B promotional emails to existing business contacts where permitted by local law |
| Targeted advertising on third-party platforms | Use third-party advertising pixels (e.g., Meta, LinkedIn, Google) to deliver and measure ads that may be of interest to you, and to build audiences of similar prospects | Consent (Art. 6(1)(a)) where the cookie banner requires it; legitimate interests (Art. 6(1)(f)) elsewhere |
| Recruitment | Process job applications you submit | Steps at your request prior to a contract (Art. 6(1)(b)); legitimate interests (Art. 6(1)(f)) |
| Site analytics and improvement | Understand how the Site is used in order to improve content, performance, and user experience | Consent (Art. 6(1)(a)) for non-essential analytics cookies; legitimate interests (Art. 6(1)(f)) for aggregated server-side analytics |
| Compliance with law | Comply with our legal and regulatory obligations, respond to lawful requests from public authorities | Legal obligation (Art. 6(1)(c)) |
| Establish, exercise, or defend legal claims | Investigate complaints, defend ourselves in disputes, enforce our rights under contracts | Legitimate interests (Art. 6(1)(f)) |
Where we rely on consent, you may withdraw your consent at any time, without affecting the lawfulness of any processing carried out before withdrawal. Where we rely on legitimate interests, you have the right to object — see Section 9 below.
5. Cookies and similar technologies
We use cookies, web beacons, pixels, and similar technologies on the Site. Some are strictly necessary for the Site to function; others help us understand usage, remember preferences, or measure marketing effectiveness.
We use third-party advertising pixels and tags from platforms including Meta (Facebook/Instagram), LinkedIn, and Google. These pixels and tags share certain information about your visit with those platforms so we can show you ads, measure ad performance, and build audiences of similar prospects. Where this constitutes "sharing" or "selling" of personal information under applicable US state laws (such as California's CCPA/CPRA), you can opt out — see Section 11 below.
You can manage your cookie preferences through the cookie banner that appears on your first visit and through the "Cookie preferences" link in the Site footer. Where required by law (including in the EU/EEA, the UK, and Israel), non-essential cookies are set only after you have given consent.
For the full list of cookie categories in use, their purposes, and how to opt out, please see our Cookie Policy.
6. Who we share your personal data with
We share your personal data only as described below.
| Recipient category | Why | Examples (categories) |
|---|---|---|
| Service providers ("processors") | They process personal data on our behalf, under written contracts that meet GDPR Art. 28 requirements | Cloud hosting providers; email service providers; CRM and marketing-automation providers; analytics providers; e-signature providers; help-desk providers; legal, accounting, and audit providers |
| Advertising platforms | Limited identifiers shared via pixels and tags so we can deliver and measure advertising on those platforms | Meta (Facebook/Instagram), LinkedIn, Google |
| Our affiliates | Group-internal coordination, shared back-office functions, EU representative function | GoHub Ltd (Bulgaria) — our EU representative under GDPR Art. 27 |
| Business partners | Joint marketing, joint events, integration partners — only with appropriate disclosure and, where applicable, your consent | Co-marketing partners |
| Professional advisers | Legal, accounting, audit, and insurance advice | Law firms, auditors, insurers |
| Public authorities | Where required by law or in connection with legal proceedings | Tax authorities, courts, regulators |
| Acquirers | In connection with a merger, acquisition, financing, restructuring, or sale of all or substantially all of our assets | Potential or actual acquirers and their advisers |
We require all service providers to use personal data only for the purposes for which we engaged them, to keep it confidential and secure, and to delete or return it on termination of our relationship.
We have chosen to describe our sub-processors by category rather than to publish a named list. Enterprise customers and counterparties may request a current named list of sub-processors by emailing cs@goptichub.com.
7. International transfers
GoHub is headquartered in Israel and operates internationally. Your personal data may be transferred to, and processed in, countries other than the country in which you are located. These countries may have data protection laws that differ from those in your home jurisdiction.
When we transfer personal data from the European Economic Area or Switzerland to a country outside those regions, we rely on one or more of the following safeguards:
- Adequacy decisions. The European Commission has determined that Israel provides an adequate level of protection for personal data (Decision 2011/61/EU, as confirmed under the GDPR). Transfers from the EEA to GoHub in Israel rely on this adequacy decision.
- Standard Contractual Clauses. Where data is transferred to a country without an adequacy decision (for example, the United States in the case of certain service providers), we use the European Commission's Standard Contractual Clauses, supplemented by additional safeguards where required.
- Other lawful mechanisms such as your explicit consent or the necessity of the transfer for the performance of a contract.
A copy of the safeguards relied on for any specific transfer is available on request at cs@goptichub.com.
8. How long we keep your personal data
We retain personal data only as long as necessary for the purposes for which it was collected, plus any additional period required for legal, regulatory, accounting, or dispute-resolution purposes.
| Category | Typical retention |
|---|---|
| Contact form / demo request data, where no commercial relationship results | Up to 24 months from last interaction, then deleted or anonymised |
| Marketing-list subscribers | Until you unsubscribe, plus a short suppression-list retention to honour your opt-out |
| Recruitment data, where no offer is made | Up to 12 months from the end of the recruitment process, unless you ask us to keep your CV on file longer |
| Recruitment data, where you become an employee | Per the relevant employment retention schedule |
| Server logs, IP addresses, security logs | Up to 12 months, then deleted or aggregated |
| Cookie data | As described in the Cookie Policy |
| Records relating to a contract or transaction (invoices, contracts, communications) | Up to 7 years from the end of the relationship, to comply with tax and accounting law |
When personal data is no longer needed, we either securely delete it or anonymise it so that it can no longer be associated with you.
9. Your rights
Depending on your location and the applicable law, you have some or all of the following rights in respect of your personal data:
- Access. Obtain a copy of the personal data we hold about you.
- Rectification. Have inaccurate or incomplete data corrected or completed.
- Erasure. Have your personal data deleted, in certain circumstances.
- Restriction. Have us restrict (rather than delete) processing in certain circumstances.
- Portability. Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller, in certain circumstances.
- Objection. Object to processing based on legitimate interests, including profiling.
- Object to direct marketing. At any time, including by clicking the unsubscribe link in any marketing email.
- Withdraw consent. Where processing is based on consent, withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Lodge a complaint with your local data protection supervisory authority. EU residents can find their authority via the European Data Protection Board (edpb.europa.eu). Israeli residents can contact the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority). California residents see Section 11 below.
To exercise any of these rights, contact us at cs@goptichub.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (one month under the GDPR, with a possible two-month extension for complex requests; 45 days under the CCPA, with one possible 45-day extension).
We will not discriminate against you for exercising your rights.
10. Security
We implement and maintain technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure. These measures include access controls, encryption in transit (TLS) and at rest where appropriate, secure development practices, vulnerability management, and staff training.
No security measure is absolute. If you believe that the security of your interaction with the Site has been compromised, please contact us immediately at cs@goptichub.com.
In the event of a personal data breach affecting your data, we will notify the relevant supervisory authority and affected individuals as required by applicable law.
11. California privacy notice
This Section 11 supplements the rest of this Policy and applies to California residents whose personal information is processed by GoHub. It is provided in compliance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").
11.1 Categories of personal information collected, sources, purposes, and disclosures
In the past 12 months, GoHub has collected the following CCPA-defined categories of personal information about California residents who interact with the Site:
| CCPA category | Examples (see Section 3 above) | Sources | Business purpose | Categories of recipients |
|---|---|---|---|---|
| Identifiers | Name, email, IP address | You; automatic; third-party data providers | Operate the Site; respond to enquiries; marketing; security | Service providers; advertising platforms; affiliates |
| Customer-records information (Cal. Civ. Code §1798.80(e)) | Business contact details, job title | You; third-party data providers | Pre-contract communications; marketing | Service providers; advertising platforms |
| Commercial information | Records of demo requests, marketing engagement | You; automatic | Sales operations; marketing | Service providers; advertising platforms |
| Internet or other electronic activity | Browsing history on the Site, interactions, search history | Automatic | Site improvement; analytics; ad measurement | Service providers; advertising platforms |
| Geolocation (approximate, IP-based) | Country and region | Automatic | Localisation; security | Service providers |
| Professional or employment-related information | Job title, employer, role | You; third-party data providers | Pre-contract qualification | Service providers; advertising platforms |
We do not knowingly collect information from California residents under 18 years of age.
11.2 Sale or sharing of personal information
GoHub does not "sell" personal information for monetary consideration.
GoHub does "share" personal information for cross-context behavioral advertising as that term is defined under the CCPA. Specifically, we use third-party advertising pixels and tags from platforms including Meta (Facebook/Instagram), LinkedIn, and Google, which share certain identifiers and browsing activity with those platforms to enable advertising, ad measurement, and audience building.
The categories of personal information we share for cross-context behavioral advertising are: Identifiers, Internet or other electronic activity, and Inferences. We share with: Meta Platforms Inc., LinkedIn Corporation, and Google LLC.
You have the right to opt out of this sharing. You can opt out by:
- Using the "Do Not Sell or Share My Personal Information" link in the footer of the Site
- Adjusting your cookie preferences in the Site's cookie banner / preference centre to disable Marketing & Targeting cookies
- Sending a request to
cs@goptichub.comwith "Opt out of sharing" in the subject line - Enabling the Global Privacy Control (GPC) signal in a supported browser — when our Site detects a GPC signal from your browser, we will treat it as a valid opt-out of sharing
We do not knowingly share personal information of consumers under 16 without affirmative authorisation.
11.3 Sensitive personal information
We do not collect or use sensitive personal information for the purpose of inferring characteristics about you. Therefore the right to limit the use of sensitive personal information does not apply.
11.4 Retention
See Section 8 above.
11.5 Your California rights
Subject to verification, you have the right to:
- Know the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting or sharing, and the categories of third parties to whom we disclose personal information
- Request deletion of personal information, subject to applicable exceptions
- Request correction of inaccurate personal information
- Opt out of the "sharing" of personal information for cross-context behavioral advertising (see Section 11.2)
- Limit the use of sensitive personal information (currently not applicable — see Section 11.3)
- Be free from discrimination for exercising your rights
To submit a request, email cs@goptichub.com with "California Privacy Request" in the subject line, or call us at +972-3-9229070. You may use an authorised agent; we will require proof of authorisation.
11.6 Shine the Light
California Civil Code §1798.83 permits California residents who have an established business relationship with GoHub to request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. To make such a request, contact us at cs@goptichub.com.
12. Other US state laws
Residents of certain other US states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as state privacy laws come into force) may have rights similar to those described in Section 11, including the right to opt out of targeted advertising. To exercise such rights, contact cs@goptichub.com or use the "Do Not Sell or Share My Personal Information" link in the footer.
13. Children
The Site is not directed to individuals under the age of 18, and we do not knowingly collect personal data from individuals under 18. If you believe that a minor has provided personal data to us through the Site, please contact us at cs@goptichub.com and we will take steps to delete it.
14. Automated decision-making
We do not use automated decision-making — including profiling — that produces legal effects concerning you or similarly significantly affects you in connection with your use of the Site.
15. Third-party links
The Site may contain links to third-party websites and services. This Policy does not apply to those third parties. We are not responsible for the privacy practices of third parties; please review their privacy notices before providing personal data to them.
16. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Effective date" at the top indicates when this Policy was last updated. Material changes will be highlighted on the Site for at least fourteen (14) days before they take effect, and where required by law we will obtain renewed consent.
We encourage you to review this Policy periodically.
17. Contact us
If you have any questions, concerns, or requests regarding this Policy or our processing of your personal data, please contact us:
- Email: cs@goptichub.com
- Post: Global Optic Hub Ltd., Attn: Privacy, 30 Shoham Street, Petach Tikva, 49517, Israel
- Telephone: +972-3-9229070
- EU representative (GDPR Art. 27): GoHub Ltd, 49 Patriarch Evtimiy Blvd., Prestige Business Center, Floor 4, Triaditsa District, Sofia 1463, Bulgaria — cs@goptichub.com