Privacy & Data Protection
Great White (“Great White,” “Company,” “we,” “us,” or “our”) is a media intelligence agency providing performance media, digital acquisition, data architecture, measurement, analytics, and related consulting services.
We respect the privacy of individuals who visit our website, communicate with us, submit business inquiries, or otherwise interact with Great White.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our website, digital properties, business operations, and services.
This Privacy Policy applies to personal information that Great White processes for its own business purposes. Section 19 also covers Google user data accessed through Great White Ads MCP, including confidential advertising account information.
When Great White processes personal information on behalf of a client as part of advertising, analytics, measurement, media activation, or other services, Great White may act as a processor or service provider on behalf of that client. In those circumstances, the relevant client's privacy policy and our contractual data-processing arrangements with that client may also apply.
For personal information collected directly through the Great White website or in connection with our own business operations, Great White generally acts as the organization responsible for determining how and why that information is processed.
Organization: Great White Legal Entity: Great White Privacy Contact: [email protected] Business Address: Great White, Adib Bldg, Ghannoum Street, Habib Lteif, Ain Al Roummani, Lebanon
Questions relating to this Privacy Policy or our handling of personal information may be submitted using the contact details above.
The information we collect depends on how you interact with Great White.
3.1 Information You Provide Directly
We may collect information that you voluntarily provide to us, including:
Name
Business or corporate email address
Telephone number
Company or organization name
Job title or professional role
Country, region, or general geographic location
Information submitted through contact forms or inquiry forms
Information provided when requesting a consultation, proposal, audit, or strategic evaluation
Business objectives, marketing requirements, campaign information, budgets, performance benchmarks, and project requirements
Information contained in emails, messages, calls, meetings, or other communications with our team
Any other information you choose to provide to us
Please avoid submitting sensitive personal information unless it is specifically requested and necessary for a legitimate business purpose.
3.2 Information Collected Automatically
When you access or interact with our website or digital properties, certain information may be collected automatically, including:
Internet Protocol (IP) address
Browser type and version
Operating system
Device type and device identifiers
Language settings
Referring and exit pages
Date and time of access
Pages viewed
Session duration
Clicks and website interactions
Scroll activity
Video or content interactions
Approximate geographic location derived from IP address
Cookie, advertising, analytics, or similar online identifiers
3.3 Advertising, Analytics and Measurement Data
Depending on the technologies implemented on our website, we may collect or receive information associated with advertising and measurement activities, including:
Cookie identifiers
Session identifiers
Advertising identifiers
Click identifiers
Campaign parameters
Conversion events
Referral information
Attribution data
Pseudonymized or hashed identifiers
Browser-side and server-side event data
Analytics events
Conversion API signals
Tag-management identifiers
Where information has been hashed, encrypted, pseudonymized, or otherwise transformed, it may still be treated as personal information where required by applicable law.
3.4 Information Received From Third Parties
We may receive information from third parties where appropriate, including:
Advertising and media platforms
Analytics providers
Technology vendors
CRM and business systems
Referral partners
Business partners
Clients
Publicly available professional or corporate sources
We process such information only where we have an appropriate purpose and legal basis to do so.
We may use personal information for the following purposes.
4.1 Business Inquiries and Client Relationships
We use information to:
Respond to inquiries
Understand business requirements
Evaluate potential engagements
Prepare proposals and recommendations
Arrange meetings and consultations
Conduct strategic assessments or audits
Establish and manage client relationships
Deliver contracted services
Provide customer and account support
4.2 Media, Analytics and Measurement Services
Where applicable, we may process information to:
Plan, execute, measure, and optimize media campaigns
Conduct performance analysis
Measure conversions and campaign effectiveness
Support attribution and analytics
Operate measurement infrastructure
Improve data quality and reporting
Support browser-side and server-side measurement
Integrate advertising, analytics, CRM, and measurement systems
Diagnose tracking or measurement issues
Improve the accuracy and reliability of campaign reporting
Where we perform these activities on behalf of a client, our processing may be governed by our agreement with that client.
4.3 Website Operation and Improvement
We may use information to:
Operate and maintain our website
Understand how visitors interact with our website
Analyze website traffic and usage trends
Measure content performance
Improve website navigation and functionality
Test and optimize user experience
Diagnose technical problems
Maintain website security and availability
4.4 Marketing and Business Development
Where permitted by law, we may use relevant business contact information to:
Communicate information about Great White
Follow up on business inquiries
Share relevant services, capabilities, insights, or company updates
Develop and maintain business relationships
Where consent is legally required for a particular form of marketing, we will rely on consent before conducting that activity.
You may opt out of direct marketing communications at any time.
4.5 Security, Fraud Prevention and Compliance
We may process information to:
Secure our website and systems
Detect unauthorized activity
Prevent fraud, abuse, or misuse
Maintain system integrity
Investigate security incidents
Protect our legal rights
Enforce contractual obligations
Comply with applicable legal, regulatory, accounting, or audit requirements
Where applicable data protection laws require a legal basis for processing personal information, Great White may rely on one or more of the following:
Contractual Necessity
Where processing is necessary to take steps at your request before entering into an agreement or to perform obligations under an existing agreement.
Legitimate Interests
Where processing is reasonably necessary for legitimate business purposes, including:
Operating and improving our business
Responding to business inquiries
Managing professional relationships
Protecting our systems
Measuring website performance
Improving our services
Conducting appropriate business-to-business marketing
Establishing, exercising, or defending legal rights
Where required, we balance these interests against the privacy rights and interests of affected individuals.
Consent
Where processing requires your consent, including certain cookies, advertising technologies, marketing communications, or other activities where consent is required by applicable law.
Where processing is based on consent, you may withdraw that consent at any time.
Legal Obligations
Where processing is necessary to comply with laws, regulations, legal proceedings, government requests, accounting requirements, or other legal obligations applicable to Great White.
Other lawful bases may apply where permitted under the laws of the relevant jurisdiction.
Our website may use cookies, pixels, tags, local storage technologies, web beacons, software development tools, server-side technologies, and similar mechanisms.
These technologies may be used for purposes including:
Essential Technologies
Required for website functionality, security, network management, fraud prevention, or other services necessary for the website to operate.
Functional Technologies
Used to remember settings or improve functionality and user experience.
Analytics Technologies
Used to understand website traffic, visitor behavior, content performance, and how visitors interact with our digital properties.
Advertising and Measurement Technologies
Used, where applicable, to measure advertising effectiveness, understand campaign attribution, create audiences, measure conversions, or support digital advertising activities.
Depending on our website configuration, these technologies may involve third-party providers such as advertising platforms, analytics providers, or measurement technology vendors.
Where required by applicable law, non-essential cookies and similar technologies will be activated based on your consent choices.
You may be able to manage your preferences through our website's cookie consent or preference-management interface.
You can also manage certain cookies through your browser settings. Blocking some technologies may affect the availability or functionality of certain website features.
Where legally required, users may have additional rights to object to or opt out of certain advertising or data-sharing activities.
Great White does not disclose personal information indiscriminately.
We may disclose information to third parties where reasonably necessary for the purposes described in this Privacy Policy.
7.1 Service Providers
We may work with service providers that support functions such as:
Website hosting
Cloud infrastructure
Cybersecurity
Analytics
Customer relationship management
Data storage
Tag management
Server-side measurement
Business operations
Professional communications
These providers may process information only as necessary to provide their services and subject to applicable contractual or legal obligations.
7.2 Advertising and Media Technology Providers
Where advertising or measurement technologies are used, information may be shared with or processed through relevant technology providers, which may include:
Search engines
Social media platforms
Advertising platforms
Demand-side platforms
Programmatic advertising providers
Analytics providers
Attribution platforms
Measurement partners
Connected television or digital media providers
Depending on our technology configuration, providers may include companies such as Google, Meta, TikTok, Snapchat, X, or other advertising and analytics technology companies.
The specific technologies active on our website may change over time.
7.3 Professional Advisors
We may disclose relevant information to professional advisors such as lawyers, accountants, auditors, insurers, consultants, or other professional service providers where reasonably necessary.
7.4 Corporate Transactions
Information may be disclosed in connection with a merger, acquisition, financing, restructuring, sale of assets, change of ownership, or similar corporate transaction, subject to appropriate confidentiality and legal safeguards.
7.5 Legal Requirements
We may disclose information where reasonably necessary to:
Comply with applicable law
Respond to valid legal proceedings
Comply with court orders or regulatory requirements
Respond to lawful government or law-enforcement requests
Protect the rights, safety, property, or security of Great White or others
Investigate suspected fraud or unlawful activity
Great White does not sell personal information for monetary consideration as part of its ordinary business operations.
However, certain jurisdictions define terms such as “sale,” “sharing,” or “targeted advertising” broadly enough that some advertising or analytics technologies may fall within those definitions even where no money is exchanged for personal information.
Where such laws apply and our activities fall within those definitions, we will provide the notices, consent mechanisms, or opt-out rights required by applicable law.
Great White provides media, advertising, analytics, data, and measurement services to clients.
As part of these services, clients may provide Great White with access to information relating to their customers, prospects, website visitors, leads, or advertising audiences.
In these situations, Great White may process personal information on behalf of the client and according to the client's documented instructions and the applicable contractual relationship.
The client remains responsible for determining the purposes for which such information is collected and processed where the client acts as the relevant data controller or equivalent responsible party.
Where required, Great White enters into appropriate data-processing or service-provider agreements with clients and vendors.
If your personal information was collected by one of our clients and you have questions about that client's use of your information, you should generally contact that organization directly.
Great White may use authorized connections to advertising, analytics, customer relationship management, reporting and other business platforms to deliver the services described in this policy. These connections can use platform APIs, OAuth authorization, connectors or other approved access methods. Access depends on the service being provided, the permissions granted and the account holder's authority to grant those permissions.
The general rules in Sections 9.1 to 9.5 apply to these integrations. The specific disclosures for Great White Ads MCP appear in Section 19 and take precedence for that application's Google data. An application-specific notice may provide additional details for another integration.
Depending on the authorized service, connected-account information can include account and business identifiers, account hierarchy, campaign or content settings, advertising costs, performance metrics, conversion summaries, reporting dimensions and relevant client-provided business records. Access to identifiable lead, customer or contact records requires a service purpose that specifically needs those records and appropriate authorization; it is not implied by permission to read campaign performance.
We use connected-account information for the authorized service, such as producing reports, reconciling performance data, analyzing campaigns, diagnosing measurement issues or carrying out an agreed business workflow. We request permissions appropriate to implemented functions. Additional permissions or automated account changes require their own disclosure and authorization; connecting a reporting tool does not by itself authorize campaign changes.
Where an authorized service includes AI-assisted analysis, selected account information, queries and related context may be processed by the AI provider supporting that feature. Before activating a new integration or materially changing an existing one, we will identify the relevant connected platform, information accessed, purpose and material onward processing in this policy, an application notice, onboarding information or service instructions, as appropriate. Required notices and consent will be provided before the changed processing begins.
AI processing is limited to the service explained to the account holder or client. Great White's policy is to use settings and contractual arrangements that exclude confidential connected-account data from training general-purpose AI models and to avoid optional feedback or data-sharing programs that would permit that use. Provider processing, retention and permitted human access must be assessed for the service being used; a training opt-out does not mean that a provider never stores or reviews information.
AI-generated findings may be inaccurate. Authorized personnel remain responsible for reviewing findings and any subsequent business or advertising decisions. Any use that involves decisions about individuals with legal or similarly significant effects requires a separate assessment and the disclosures and safeguards applicable to that use.
Access is limited to personnel and service providers needed to deliver and secure the authorized service, subject to the relevant client instructions and applicable platform restrictions. The security, international processing and retention provisions of this policy apply to connected-account information, with more specific application rules taking precedence where stated.
Credentials are retained while needed for the authorized connection; reports and diagnostic information are retained according to their service, troubleshooting and recordkeeping purposes. Copies in third-party platforms and exported files may require separate deletion steps. Account holders can request disconnection or deletion by contacting [email protected] and can revoke platform permissions through the relevant platform's controls where available. Revoking access does not automatically erase existing reports or original records held by the connected platform.
We review each new integration against the practices disclosed in this policy. If it introduces materially different information, purposes, recipients or retention practices, we will update the relevant notice and obtain any required authorization before commencing that processing. Platform-specific requirements may require additional statements even where the general service is already described here.
These provisions describe how integrations are governed; they do not establish consent for undisclosed processing, extend an existing account permission or imply that a particular integration is currently active. The active service's notices and authorization process identify its actual scope.
Great White works with technology providers, advertising platforms, infrastructure vendors, clients, and service providers that may operate internationally.
As a result, personal information may be transferred to, accessed from, stored in, or processed in countries outside the country in which it was originally collected.
Data protection laws and standards may differ between jurisdictions.
Where applicable law requires safeguards for international transfers, we take appropriate steps designed to ensure that personal information receives an appropriate level of protection.
Depending on the jurisdiction and circumstances, these measures may include:
Contractual data-protection provisions
Approved standard contractual clauses
Data-processing agreements
Recognized adequacy mechanisms
Organizational and technical safeguards
Encryption or pseudonymization
Other transfer mechanisms recognized by applicable law
We assess international data transfers according to the requirements applicable to the relevant processing activity.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or for other legitimate and lawful purposes.
Retention periods may depend on factors including:
The nature of the information
The purpose for which it was collected
The duration of a business or client relationship
Contractual requirements
Legal and regulatory obligations
Accounting and financial requirements
Security requirements
The need to resolve disputes
The establishment, exercise, or defense of legal claims
Information that is no longer reasonably required may be deleted, anonymized, or securely archived in accordance with applicable requirements.
We may retain certain records for longer periods where required or permitted by applicable law.
We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, misuse, alteration, disclosure, or destruction.
Depending on the nature of the processing, these measures may include:
Encryption in transit
Secure hosting infrastructure
Access controls
Authentication controls
Role-based permissions
Pseudonymization or hashing
Security monitoring
Data minimization
Vendor security controls
Infrastructure and configuration reviews
No website, transmission method, or information-storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security.
Depending on your location and applicable data protection law, you may have rights relating to your personal information.
These rights may include:
Right to Be Informed
The right to receive information about how your personal information is collected and processed.
Right of Access
The right to request confirmation of whether we process your personal information and, where applicable, receive a copy of that information.
Right to Correction
The right to request correction of personal information that is inaccurate, incomplete, or outdated.
Right to Deletion
The right to request deletion or destruction of personal information where applicable legal requirements are satisfied.
Right to Restrict Processing
The right, in certain circumstances, to request that processing of your personal information be limited.
Right to Data Portability
The right, where applicable, to request certain information in a structured, commonly used, and machine-readable format or to request its transfer to another organization.
Right to Object
The right, in certain circumstances, to object to processing based on legitimate interests, direct marketing, targeted advertising, or other processing activities.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing conducted before consent was withdrawn.
Right to Lodge a Complaint
Depending on your jurisdiction, you may have the right to submit a complaint to the relevant data-protection, privacy, or regulatory authority.
Privacy rights are not absolute and may be subject to legal exemptions, verification requirements, or other limitations under applicable law.
To submit a privacy request, contact:
We may need to verify your identity before fulfilling certain requests.
Where permitted by applicable law, we may send business-related communications regarding Great White's services, capabilities, insights, events, or other relevant information.
You may opt out of marketing communications at any time by:
Using the unsubscribe mechanism included in the communication, where available; or
Contacting us at [email protected]
Opting out of marketing communications will not prevent us from sending necessary administrative, contractual, transactional, or service-related communications.
Advertising, analytics, and measurement technologies may use automated processes to evaluate campaign performance, audience characteristics, website behavior, or other digital signals.
Great White does not ordinarily use personal information collected through its own website to make decisions about individuals that produce legal or similarly significant effects solely through automated processing.
Where applicable law provides specific rights relating to automated decision-making or profiling, those rights will be respected where applicable.
Great White's website and services are intended for businesses, professionals, and organizations and are not directed toward children.
We do not knowingly seek to collect personal information directly from children where parental or guardian authorization would be required under applicable law.
If we become aware that personal information relating to a child has been collected in circumstances where it should not have been collected, we will take reasonable steps to review and, where appropriate, delete the information.
If you believe a child has submitted personal information to Great White, please contact us using the details provided in this Privacy Policy.
Our website may contain links to websites, platforms, or services operated by third parties.
Great White is not responsible for the privacy practices, security, content, or policies of third-party websites or services.
When you leave our website or interact directly with a third-party service, the privacy policy and terms of that third party will apply.
We encourage users to review the privacy practices of third-party services before providing personal information.
We may update this Privacy Policy periodically to reflect changes in:
Our business operations
Our services
Our technology infrastructure
Our data-processing practices
Applicable legal or regulatory requirements
When we make changes, we will publish the revised Privacy Policy on this website and update the “Last Updated” date shown at the beginning of the policy.
Where required by applicable law, we may provide additional notice or request renewed consent before material changes take effect.
We encourage visitors to review this Privacy Policy periodically.
Great White Ads MCP is an internal reporting and analysis tool operated by Great White. It connects authorized Google Ads accounts to a locally operated Model Context Protocol (MCP) server and ChatGPT through an OpenAI Secure MCP Tunnel. Authorized Great White staff use the tool to review advertising performance, prepare reports, identify trends and develop recommendations for accounts Great White is permitted to access.
The integration is intended for read-only reporting and analysis. It does not create, edit, pause or publish campaigns, change budgets or bids, or upload customer lists. Read-only operation describes the application's implemented functions; it does not mean the Google authorization permission itself is necessarily limited to reading data.
This section applies specifically to Google user data accessed through Great White Ads MCP, including reports and other information derived from that data. Where this section is more restrictive than the general provisions elsewhere in this policy, this section governs that data.
Access is granted through Google's OAuth authorization process and remains subject to the authorizing user's Google Ads account permissions. The integration uses authorization tokens to make permitted API requests. Users authenticate directly with Google; the application does not request their Google password.
Depending on the report requested and available permissions, the tool may retrieve:
Search terms and other free-text account fields can contain information entered by users or advertisers and should not automatically be treated as anonymous.
The tool's stated purpose does not require access to Gmail messages, Google Drive documents, Google Contacts, payment-card information or individual lead contact details. Additional Google services or materially different uses require updated disclosures and any necessary authorization before access begins.
Google Ads data is used to answer authorized reporting questions, summarize account performance, compare campaigns and periods, diagnose performance issues and prepare recommendations for the relevant account owner or client. Necessary technical information may also be used to troubleshoot the integration and protect against unauthorized access.
The integration's Google data is not used for unrelated marketing, sold to data brokers, or used to build audiences for personalized advertising or retargeting. Recommendations are reviewed by staff; this integration does not implement advertising changes automatically.
When an authorized user requests an analysis through ChatGPT, relevant Google Ads query results are transmitted through the MCP connection to OpenAI for processing and generation of the requested response. These results can include account or campaign names, identifiers, performance metrics and other fields returned by the requested report. Resulting conversations and reports may therefore contain confidential advertising information.
Access to the analysis is limited to authorized staff and recipients permitted by the relevant account owner or client. Any supporting infrastructure providers must be limited to processing needed to operate and secure the integration. Data may also be disclosed where required by applicable law. Broader website advertising disclosures elsewhere in this policy do not authorize unrelated transfers of Google data obtained through this application.
For use of this integration, Great White keeps ChatGPT's “Improve the model for everyone” setting disabled. OpenAI states that opting out excludes new conversations from model training. This setting does not remove existing chat history or mean that data is never retained or reviewed for service operation, security or legal purposes. Great White's operating policy is not to submit conversations containing Google Ads data through optional feedback or other data-sharing programs that permit model training.
OpenAI's processing is subject to the terms and data controls of the service used. Further information is available in OpenAI's Data Controls FAQ and data-use explanation. The international processing provisions in Section 10 apply to this integration.
The integration processes API requests through a local MCP server on a Great White-operated Windows computer. Google's local authorization credentials are stored in a configuration file within the Windows user's profile. Credentials are used to authorize requests and must be treated as confidential; they are not intended for publication or inclusion in ChatGPT prompts, reports or website content.
Query results transmitted to ChatGPT may be retained in conversation history and any saved files or reports. Reports downloaded by authorized staff are also stored wherever those staff save them. Local authentication tools, server software and connection software may produce diagnostic records or caches; any account data contained in such records is subject to the purposes and retention restrictions in this section. The integration should not be understood as guaranteeing that all data is temporary or that no local records are created.
The security measures described in Section 12 apply to this integration. Great White's policy is to restrict access to credentials, account information and generated reports to personnel authorized for the relevant accounts. Confidential account data must not be placed in public links, public repositories or website pages. Credential files must be removed or replaced when a connection is retired or credentials are compromised.
The following retention rules apply to data held by Great White for this integration:
Deletion and disconnection can require manual action by Great White. Revoking Google authorization or closing the MCP server does not automatically erase conversations, reports or diagnostic records. Provider-side copies are subject to the provider's deletion processes and any applicable security or legal retention exceptions. Where backup copies exist, removal can depend on the applicable backup lifecycle; this policy does not promise immediate erasure from every system.
To request disconnection or deletion, email [email protected] with the subject “Great White Ads MCP — Privacy Request.” Identify the relevant account or report without sending passwords or authorization tokens. We may verify the requester's identity and authority before acting. We will review copies under our control, carry out applicable deletion steps and explain any information that must be retained and why. A request concerning client-controlled information may require the client's instructions. These requests do not delete the original advertising account or campaign records held by Google.
Users can revoke the application's Google authorization through their Google Account's third-party connections settings at Google Account Connections. They can also contact Great White to request disconnection. Revoking this application's authorization prevents further access using that authorization; it does not delete the original Google Ads account or automatically remove previously generated conversations and reports. Deletion of existing copies is handled separately under Section 19.6.
Great White Ads MCP's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable. See the Google API Services User Data Policy.
Google data will be used only for the disclosed, authorized features. Material changes to the data accessed, purposes of use or recipients will be reflected in this policy and communicated to affected users, with additional consent obtained where required before the new processing begins.
If you have questions, concerns, complaints, or requests relating to this Privacy Policy or Great White's processing of personal information, please contact:
Great White Privacy & Data Protection Email: [email protected]
When contacting us regarding a privacy request, please provide sufficient information for us to understand and respond to your request without including unnecessary personal or sensitive information.