Privacy policy.

This site has no accounts or advertising. It stores your language and cookie preferences in the browser. Google Analytics loads only if you allow it; you can refuse or change your choice using the preferences link at the bottom of the site. Without consent, Cloudflare records only essential aggregate Shop counts.

The data controller is the publisher of Golden Bear Capital, reachable at invest@gb.capital. This policy is provided under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Email. If you write to us, we process your address and message in order to reply. Legal basis: pre-contractual steps or our legitimate interest in replying. Retention: as long as needed to handle the request and, for purchases, the periods required by law.

Purchases and bookings. When you buy material or a session, Stripe and Cal.com collect the necessary data and pass us your name, email, purchased product or session, payment status and transaction reference. Card data never reaches us. We keep an operational record for delivery, support, duplicate prevention and legal obligations.

Essential measurement. Cloudflare records aggregate counts of Shop visits, viewed sections, clicks, checkout starts and errors, confirmed purchases and paid bookings. This register contains no name, email or session identifiers and counts events, not unique people. Ordinary retention: up to 13 months. Legal basis: our legitimate interest in checking that the service works and preventing errors.

Google Analytics (optional). Only after you consent, Google receives browsing data, page views, traffic sources, product interactions and, where technically possible, confirmed purchases. When you return from Stripe Checkout, the site first verifies the order in its database; only after confirmation does it send Google the purchase event associated with the Analytics session already in your browser. We do not send your name, email or payment details. Legal basis: consent, which you can withdraw at any time through cookie preferences; without consent the Google tag does not load. Google processes data under its own privacy notice. In the Google Analytics property, event and user data associated with identifiers are retained for 14 months; standard aggregate reports are not subject to this limit.

Newsletter and chat. Subscription happens on Substack, which is an independent controller for that data. We see subscribers' email addresses to send the newsletter and manage subscriptions.

Software. TradeDeck has its own policy, available at tradedeck.gb.capital.

Technical logs. The hosting provider automatically records IP address, date and time, page requested and browser, for security and operation of the service. We do not use this data to identify you.

Before consent, we do not load Google Analytics cookies. Your choice is stored in browser localStorage together with your preferred language. If you allow Analytics, Google may use cookies and pseudonymous identifiers to measure visits, traffic sources and purchase steps. You can refuse or change your choice at any time from “Cookie preferences” at the bottom of the site. External platforms apply their own rules when you visit them.

Data is processed by the providers we use to deliver the services: Google (only with consent, for Analytics), Substack, Stripe, Cal.com, Cloudflare and our email provider. Some may process data outside the European Economic Area; where applicable, transfers rely on the European Commission's standard contractual clauses or adequacy decisions. We do not sell data or share it with third parties for marketing.

You can request access, rectification, erasure, restriction, portability, object to processing, and withdraw consent where consent is the legal basis. Write to invest@gb.capital. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the authority of your country.

Our content and products are intended for adults. We do not knowingly collect data from minors.

We update this page whenever something changes in how we handle data. The date at the top marks the latest version.