Privacy Policy

Last Updated: 15 January 2026 | Effective Date: 15 January 2026

1. Cookie Categories

We use cookies to enhance your experience on our website. All cookies are classified into three categories based on their purpose and consent requirements.

Essential Cookies

Essential cookies enable core website functionality, security features, and session management. These cookies are necessary for the website to operate properly and cannot be disabled.

  • Purpose: Session management, security, CSRF protection
  • Examples: session_id, csrf_token, cookie_consent_status
  • Consent Required: No—activated automatically
  • Retention: Session duration or up to 12 months for preference storage

Analytics Cookies

Analytics cookies allow us to measure website traffic, user behaviour, and site performance. This data helps us understand visitor patterns and improve our services.

  • Purpose: Measuring traffic, user behaviour, site performance
  • Tools: Google Analytics 4
  • Examples: _ga, _ga_XXXXXXX, _gid, _gat
  • Consent Required: Yes—activated only after user accepts
  • Retention: Up to 14 months

Marketing & Advertising Cookies

Marketing and advertising cookies enable us to deliver personalised advertisements and measure campaign effectiveness across multiple platforms.

  • Purpose: Remarketing, personalised ad delivery, conversion tracking
  • Consent Required: Yes—activated only after user accepts
  • Retention: Up to 540 days (Google Ads default)
  • Platforms: Google Ads, Meta, display networks

2. Marketing Cookies & Third-Party Advertising

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve advertisements based on your previous visits to this website and other sites on the internet.

Advertising Partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

Remarketing Services

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our advertisements on other websites, apps, or platforms you visit.

YouTube & Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network based on your interests and browsing behaviour.

Tracking Technologies in Use

We use the following tracking technologies on this website:

  • First-party and third-party cookies
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

Advertising Measurement

We use conversion tracking to understand which advertisements lead to actions on our website—such as form submissions, calls, or account registrations. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta for platform optimisation.

Active Advertising & Analytics Technologies

The following advertising and analytics technologies are active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

Opt-Out from Personalised Advertising

You may opt out of personalised advertising at any time:

Opting out does not remove advertisements entirely—you will continue to see non-personalised advertisements on our site and others.

Manage Cookie Preferences

You can manage your cookie preferences at any time by clicking the "Manage Cookie Preferences" link in the website footer. This allows you to accept or reject each cookie category independently.

3. Your Consent & Rights

Our cookie consent banner appears when you first visit our website and offers three options: "Accept All Cookies", "Reject Non-Essential Cookies", or "Manage Preferences". Marketing and analytics cookies are activated only after you explicitly accept them. Your choice is stored for 12 months.

Your Consent Statement: By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

If you are located in the European Economic Area or the United Kingdom, this consent notice complies with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage Cookie Preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

4. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Our advertising partners and the data categories shared include:

Google LLC

Data Categories: Cookie identifiers, conversion events, anonymised behavioural data, remarketing lists

Governed by Google's Privacy Policy at https://policies.google.com/privacy

Meta Platforms, Inc.

Data Categories: Pixel events, conversion data, custom audiences

Governed by Meta's Data Policy at https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for advertising targeting and campaign measurement only—not resold to unaffiliated third parties. Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage you to review those policies directly.

5. Lead Forms & Contact Requests

When you submit a contact form, investment registration, or inquiry, we collect the information you provide. This typically includes: full name, email address, phone number, investment amount, and your message.

Legal Basis for Processing

Consent (GDPR Article 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Article 6.1.b).

Data Retention

Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

Your Rights

You may request deletion of your data at any time by contacting us at [email protected]. A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgement of this policy.

6. Google Services & Analytics

This website uses the following Google services to enhance user experience and measure effectiveness:

Google Analytics 4

Collects anonymised usage data, device information, and behavioural signals. IP anonymisation is enabled. Data retention is set to 14 months. This helps us understand how visitors interact with our website.

Users may opt out via the Google Analytics Opt-out Browser Add-on.

Google Ads Conversion Tracking

Records when a user completes a defined action (form submission, account registration) after clicking one of our advertisements. This data is used solely for measuring ad campaign performance and optimisation.

Google Remarketing

Allows us to show targeted advertisements to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

Google Tag Manager

Deploys tracking tags on our behalf. No personal data is collected by GTM itself; it serves as a container for the tracking codes listed above.

All Google advertising products are governed by https://policies.google.com/technologies/ads.

7. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record page views, time on site, specific conversion events, and custom audience membership for retargeting.

Data Collection & Privacy

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its platform. You can view and manage your ad preferences by visiting https://www.facebook.com/adpreferences/.

Refer to Meta's full Data Policy at https://www.facebook.com/privacy/policy.

8. Prohibited Content Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, unlicensed gambling services, adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9. Landing Page Integrity & Cloaking

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.

11. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

12. Your Data Rights (GDPR Articles 15-22)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

Right of Access (Article 15): Request a copy of data we hold about you

Right to Rectification (Article 16): Correct inaccurate or incomplete data

Right to Erasure (Article 17): Request deletion ("right to be forgotten")

Right to Restrict Processing (Article 18): Limit how we process your data

Right to Data Portability (Article 20): Receive your data in structured, machine-readable format

Right to Object (Article 21): Object to processing based on legitimate interest

Withdraw Consent (Article 7.3): Revoke consent at any time without penalty

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority: EU users should contact https://edpb.europa.eu, and UK users may contact https://ico.org.uk.

13. Data We Collect

We collect the following categories of data:

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submissions, account registrations)

14. Legal Basis for Processing (GDPR Article 6)

For each data type, we process data under the following legal bases:

Contact Form Data & Investment Registration

Consent (Article 6.1.a) and contract performance (Article 6.1.b)

Analytics Data

Consent (Article 6.1.a)

Marketing & Remarketing Data

Consent (Article 6.1.a)

Security & Fraud Prevention

Legitimate interest (Article 6.1.f)

15. Data Retention Periods

We retain personal data for specific periods based on the data type and legal requirements:

Contact Form Submissions: 2 years

Analytics Data (GA4): 14 months

Marketing Cookies (Google Ads): Up to 540 days

Email Communications: Duration of relationship + 1 year

Server Logs: 90 days

Cookie Consent Records: 3 years (audit requirement)

16. Contact Information & Policy Updates

For privacy-related questions or to exercise your rights, please contact us:

BUGNUT Limited

Address:
94 Hawthorn Crescent
Cosham
Portsmouth, PO6 2TR
United Kingdom

Email: [email protected]

Phone: +44 (0) 23 9264 8392

VAT Number: GB449464262
Company Registration: 14114433

We may update this Privacy Policy periodically. Changes will be notified via a homepage banner minimum 14 days before taking effect. Continued use of the website following such notification constitutes acceptance of the updated policy.