Legal & Privacy Policy

Legal

Privacy Policy

Last updated: October 11, 2026

1. Introduction

rethinkGTM, operated by Giorgi Khoshtaria ("we," "us," "our"), protects your privacy. This policy explains how we collect, use, and protect your data when you visit rethinkgtm.io or engage with our services. Contact: george@rethinkgtm.io | +995 592 21 33 63 | Moscow Ave. 37, Apt 4, Tbilisi, Georgia 0137

By using our website or services, you agree to this Privacy Policy.

2. What We Collect

Contact Info: Name, email, phone, company, job title, LinkedIn profile (if provided).

Website Usage: IP address, browser type, pages visited, referring sites, device type, and geographic location, collected via cookies and Google Analytics.

Advertising Data: Ad impressions, clicks, conversions, and retargeting data from LinkedIn, Meta, and Google Ads.

Scheduling Data: Meeting preferences, availability, and time zone via Cal.com.

Communications: Email correspondence, contact form submissions, feedback, and blog comments.

Downloads: Resource type, download timestamp, and access frequency for gated content.

3. How We Use Your Data

Respond to inquiries and deliver contracted services
Schedule and conduct meetings
Send marketing emails (with consent): updates, content, case studies, event invitations
Analyze website performance and improve user experience
Run and measure targeted ad campaigns on LinkedIn, Meta, and Google
Comply with legal obligations

4. Legal Basis

Consent: You opt in when submitting forms, downloading resources, or booking meetings. Withdraw anytime.

Legitimate Interest: Website operations, analytics, marketing, and fraud prevention.

Contractual Necessity: Processing data to fulfill Marketing Services Agreements.

Legal Compliance: Tax, accounting, and regulatory requirements.

5. Who We Share Data With

We share data only with service providers who help us operate: Google Analytics, Cal.com, LinkedIn/Meta/Google (advertising), email providers, and web hosting.

We may disclose data if required by law or to protect our legal rights. In a merger or acquisition, your data may transfer to the acquiring entity.

We do not sell your personal data.

6. Data Security

We use HTTPS encryption, regular security updates, access controls, and data breach response procedures. No system is 100% secure, but we implement reasonable measures to protect your data.

7. Your Rights

You can: access your data, correct inaccuracies, request deletion, restrict processing, request data portability, object to processing, or withdraw consent.

Email george@rethinkgtm.io to exercise any right. We respond within 30 days.

8. Data Retention

Marketing leads: Until you opt out or request deletion
Client data: Duration of engagement + 7 years (financial records) / 3 years (project deliverables)
Website analytics: 26 months
Ad campaign data: 2 years
Download data: 3 years or until opt-out

After retention periods expire, we securely delete or anonymize your data.

9. Cookies

Essential: Required for site functionality. Can't be disabled.

Analytics: Google Analytics tracks usage.

Advertising: LinkedIn, Meta, and Google use cookies for ad tracking and retargeting. Manage through your browser settings or each platform's ad preferences.

Third-Party: Cal.com may set cookies for scheduling.

10. Marketing Emails

By providing your email, you consent to receive marketing communications. Opt out anytime via unsubscribe links or by emailing george@rethinkgtm.io. Opting out won't affect transactional or service-related emails.

11. International Transfers

rethinkGTM is based in Georgia. Your data may be transferred to and processed in Georgia. We implement safeguards consistent with GDPR principles for international transfers.

12. Children's Privacy

Our services are not directed to anyone under 18. If we've inadvertently collected data from a minor, contact us and we'll delete it immediately.

13. Regional Rights

California (CCPA): Right to know, delete, and opt out of data sales (we don't sell data). Email george@rethinkgtm.io with "CCPA Request."

EU/EEA (GDPR): Full rights outlined in Section 7. We process data in compliance with GDPR principles.

14. Changes & Breach Notification

We may update this policy anytime. Changes take effect when posted. In the event of a data breach affecting your data, we'll notify you within 72 hours (if required by law) with details and next steps.