Privacy Policy

1. Introduction

GTM37 is committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy applies to all information collected through our website (https://www.gtm37.com), our marketing services, and any related services, sales, marketing, or events (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

This policy complies with applicable privacy laws, including:

• General Data Protection Regulation (GDPR) - for users in the European Economic Area (EEA)
• California Consumer Privacy Act (CCPA) - for California residents
• Other applicable U.S. state privacy laws

2. Information We Collect

We collect several types of information from and about users of our Services:

2.1 Personal Data

Personal data is information that can be used to identify you. We may collect the following personal data:

• Contact Information: Name, email address, phone number, business name, mailing address
• Business Information: Company name, job title, industry, business type
• Account Information: Username, password (encrypted), account preferences
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Communication Data: Information contained in communications you send us (emails, contact forms, chat messages)

2.2 Usage Data

We automatically collect certain information when you visit, use, or navigate our Services:

• Device Information: IP address, browser type and version, device type, operating system
• Usage Information: Pages viewed, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Performance Data: Website performance metrics, error logs, diagnostic data

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services. The technologies we use include:

• Cookies: Small files placed on your device to store preferences and track usage
• Web Beacons: Electronic images used to track page views and email opens
• Analytics Tools: Google Analytics 4 and similar services to understand user behavior
• Session Storage: Temporary data storage for website functionality

2.4 Third-Party Sources

We may receive information about you from third-party sources, including:

• Social media platforms (LinkedIn, Twitter) when you interact with our content
• Business partners and referral sources
• Publicly available databases and business directories
• Marketing and analytics service providers

3. How We Use Your Information

We use the information we collect for various legitimate business purposes:

3.1 To Provide and Improve Our Services

• Deliver the marketing services you requested
• Create and manage your account
• Process payments and transactions
• Respond to your inquiries and provide customer support
• Monitor and improve website performance and user experience
• Develop new features, products, and services

3.2 For Marketing and Communications

• Send you marketing communications about our services (with your consent)
• Deliver newsletters, blog updates, and educational content
• Notify you about changes to our Services or policies
• Conduct market research and gather feedback
• Personalize your experience on our website

3.3 For Legal and Security Purposes

• Comply with legal obligations and enforce our Terms of Service
• Protect against fraudulent, unauthorized, or illegal activity
• Maintain the security and integrity of our Services
• Resolve disputes and enforce our agreements
• Protect the rights, property, and safety of GTM37, our users, and others

3.4 For Analytics and Business Intelligence

• Analyze usage patterns and trends
• Measure the effectiveness of our marketing campaigns
• Understand customer needs and preferences
• Make data-driven business decisions

4. Will Your Information Be Shared With Anyone?

We only share your information in the following situations:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Hosting Providers: Netlify (website hosting and infrastructure)
• Analytics Providers: Google Analytics 4 (website analytics and performance tracking)
• Email Services: Email marketing and communication platforms
• Payment Processors: Secure payment processing services
• Customer Support Tools: Help desk and customer relationship management (CRM) systems

These service providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

4.2 Business Transfers

If we are involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and provide choices regarding your information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

4.4 With Your Consent

We may share your information for any other purpose disclosed to you at the time we collect the information or with your consent.

5. Do We Use Cookies and Other Tracking Technologies?

Yes, we use cookies and similar tracking technologies to collect and store information about your use of our Services.

5.1 Types of Cookies We Use

5.2 Third-Party Cookies

We use the following third-party services that may set cookies:

• Google Analytics 4: Website analytics and user behavior tracking. Google Privacy Policy
• Social Media Platforms: Cookies from LinkedIn, Twitter when you interact with social sharing features

5.3 Managing Cookies

You can control and manage cookies in several ways:

• Browser Settings: Most browsers allow you to refuse or accept cookies. Check your browser's help section for instructions.
• Opt-Out Tools: Use browser extensions or privacy tools to block tracking cookies
• Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on

6. How Long Do We Keep Your Information?

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Retention Periods

• Active Customers: We retain your information for the duration of your business relationship with us and for a reasonable period thereafter to maintain records
• Prospective Customers: We retain contact information and communications for up to 3 years from last interaction
• Marketing Data: We retain marketing consent records and preferences indefinitely or until you withdraw consent
• Website Usage Data: Analytics data is typically retained for 26 months (Google Analytics default)
• Legal Requirements: Some data may be retained longer to comply with legal, accounting, or regulatory requirements

6.2 Data Deletion

When we no longer need your information, we will securely delete or anonymize it. You may also request deletion of your data subject to certain exceptions (see Section 9: Your Privacy Rights).

7. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

7.1 Security Measures

• Encryption: We use SSL/TLS encryption to protect data in transit
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Hosting: Our website is hosted on Netlify's secure infrastructure with DDoS protection
• Regular Updates: We keep our systems and software up-to-date with security patches
• Password Protection: User passwords are encrypted and never stored in plain text
• Monitoring: We monitor our systems for potential security vulnerabilities and attacks

7.2 Your Responsibility

While we strive to protect your personal information, please remember that:

• No method of transmission over the Internet is 100% secure
• You are responsible for maintaining the confidentiality of your account credentials
• You should use strong, unique passwords and enable two-factor authentication where available
• You should notify us immediately of any unauthorized access to your account

8. Do We Collect Information From Minors?

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at info@gtm37.com. We will take steps to remove such information from our systems and terminate the child's account.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible.

9. What Are Your Privacy Rights?

Depending on your location, you may have certain rights regarding your personal information under applicable privacy laws.

9.1 General Rights

You have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information (subject to certain exceptions)
• Opt-Out: Opt out of receiving marketing communications from us
• Data Portability: Request a copy of your personal information in a structured, machine-readable format
• Object: Object to certain processing of your personal information

9.2 GDPR Rights (EEA Residents)

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR:

• Right to Restriction: Request restriction of processing of your personal information
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA). See Section 11 for detailed information about California-specific rights.

9.4 Exercising Your Rights

To exercise any of your privacy rights, please:

• Email us at info@gtm37.com with "Privacy Request" in the subject line
• Clearly describe the request and specify which right(s) you wish to exercise
• Provide sufficient information to verify your identity

We will respond to your request within 30 days (or as required by applicable law). We may request additional information to verify your identity before processing your request.

9.5 Marketing Opt-Out

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing us at info@gtm37.com
• Updating your communication preferences in your account settings

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

However, you can control tracking through:

• Browser cookie settings (see Section 5.3)
• Google Analytics opt-out browser add-on
• Privacy-focused browser extensions
• Mobile device privacy settings

11. Do California Residents Have Specific Privacy Rights?

Yes. If you are a California resident, you have specific rights regarding access to your personal information under the California Consumer Privacy Act (CCPA).

11.1 California Consumer Rights

California residents have the right to:

• Know: Request information about the categories and specific pieces of personal information we have collected about you in the past 12 months
• Know About Business Practices: Request information about our data collection and sharing practices
• Delete: Request deletion of your personal information (subject to certain exceptions)
• Opt-Out of Sale: Opt out of the "sale" of your personal information (Note: We do NOT sell personal information)
• Non-Discrimination: Not be discriminated against for exercising your CCPA rights

11.2 Categories of Personal Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, IP address
• Commercial Information: Purchase history, payment information
• Internet/Electronic Activity: Browsing history, interaction with our website
• Geolocation Data: General geographic location from IP address
• Professional Information: Company name, job title, industry

11.3 Sources of Personal Information

• Directly from you (when you contact us, create an account, or use our Services)
• Automatically when you visit our website (cookies, analytics)
• From third-party sources (social media platforms, business partners)

11.4 Business or Commercial Purposes

We use personal information for the purposes described in Section 3 of this Privacy Policy.

11.5 Information Sharing

We share personal information with service providers as described in Section 4 of this Privacy Policy. We do NOT sell personal information.

11.6 Exercising Your California Rights

To exercise your CCPA rights, please contact us at:

• Email: info@gtm37.com
• Subject Line: "CCPA Privacy Request"

You may designate an authorized agent to make a request on your behalf. We will require written authorization from you confirming the agent's authority.

11.7 Verification Process

To protect your privacy and security, we will verify your identity before processing your request. We may request:

• Your name and email address
• Information about your recent interactions with us
• Additional identifying information if necessary

11.8 California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.

12. Do We Make Updates to This Policy?

Yes, we may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

12.1 Notification of Changes

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website
• Notify you via email (if you have provided your email address) for significant changes
• Obtain your consent if required by applicable law

12.2 Your Responsibility

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after we post changes constitutes your acceptance of those changes.

12.3 Previous Versions

You may request previous versions of this Privacy Policy by contacting us at info@gtm37.com.

13. How Can You Contact Us About This Policy?

If you have questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us: