--- title: "Privacy Policy: Data, Cookies and Opt-Outs | OneGTM" description: "How OneGTM collects and uses data on getaob.com, including analytics, website visitor identification with RB2B, cookies, and your opt-out rights." url: https://getaob.com/privacy --- # Privacy policy Last updated October 10, 2026 This policy explains what information OneGTM collects when you visit getaob.com, book a call, or work with us, what we do with it, and the choices you have. OneGTM is a GTM engineering and AI transformation agency run by Garrett Wolfe in New York, NY. When this policy says "we" or "us," it means OneGTM. Questions or requests about your data go to [team@getaob.com](mailto:team@getaob.com). ## What we collect **Information you give us.** When you use the booking form we collect your name, work email, company, and, if you add them, your LinkedIn URL and a note about what you're working on. If you pick a time, the scheduling tool collects the details needed to book the call. If you email us or talk to us on a call, we keep what you share. **Information collected automatically.** Like most websites, ours records your IP address, browser and device type, the pages you view, the page that referred you, which links you click, and when you visited. We do this with cookies, pixels, and similar technology set by us and by the tools listed below. **Website visitor identification.** We use RB2B, and may use similar providers such as Vector, to learn which businesses and professionals visit our site. These providers match signals like your IP address, cookies, and device information against their own data sources. When they find a match, they may tell us your name, business email, job title, employer, LinkedIn profile URL, and the pages you looked at. Person-level matching mainly applies to visitors in the United States. Outside the US we may only learn the company name, if anything. **Information from other sources.** We sometimes add publicly available professional information, such as a LinkedIn profile or company website, and data from enrichment providers to the records above so we understand who we are talking to. ## Tools that collect data on this site - **Google Analytics 4** (Google): traffic and conversion measurement. Opt out with the [Google Analytics opt-out add-on](https://tools.google.com/dlpage/gaoptout). - **Microsoft Clarity**: heatmaps and session recordings that show how people use pages. See the [Microsoft privacy statement](https://privacy.microsoft.com/privacystatement). - **Dreamdata**: B2B attribution, which connects visits to the companies behind them. - **LinkedIn Insight Tag**: measures ads we run on LinkedIn and lets us show ads to past visitors. Control this in your [LinkedIn ad settings](https://www.linkedin.com/psettings/advertising). - **RB2B**: website visitor identification, described above. See the [RB2B privacy policy](https://www.rb2b.com/privacy-policy). - **Default**: runs the booking form and the scheduling calendar. - **Cloudflare**: hosts the site, protects it from abuse (including Turnstile bot checks), and briefly stores form submissions. - **Attio, Slack, and Resend**: when you send the booking form, the details go to our CRM (Attio), our team chat (Slack), and our inbox (sent through Resend). ## How we use it We use this information to reply to you and run the calls you book, to deliver client work, to understand which pages and channels bring in interested companies, to reach out to businesses that showed interest in what we do, to measure and target our advertising, to keep the site secure and stop spam, and to meet legal obligations. If visitor identification tells us that you looked at our site, we may contact you at your business email or on LinkedIn about our services. Every email we send has a way to opt out, and replying "stop" works too. ## Legal bases (EEA and UK visitors) Where the GDPR or UK GDPR applies, we rely on our legitimate interests in running and marketing a B2B business, on steps needed to enter into or perform a contract with you, on your consent where the law requires it (for example, for some cookies), and on legal obligations. You can object to processing based on legitimate interests at any time by emailing [team@getaob.com](mailto:team@getaob.com). ## Who we share it with We share personal information with the service providers above so they can do their jobs for us, with professional advisers, with authorities when the law requires it, and with a buyer if the business is ever sold or merged. We do not sell personal information for money. Some US state privacy laws treat letting advertising and visitor identification tools collect data on our site as "selling" or "sharing" personal information for cross-context behavioral advertising. To opt out, use the links in the next section, turn on Global Privacy Control in your browser, or email [team@getaob.com](mailto:team@getaob.com) with the subject line "Do not sell or share." ## Your choices and opt-outs - **Global Privacy Control.** If your browser sends a GPC signal, this site does not load the RB2B visitor identification script or the LinkedIn Insight Tag. - **RB2B.** Opt out of identification by RB2B on every site that uses it through [the RB2B opt-out form](https://app.retention.com/optout). EU and UK residents can also use the [RB2B GDPR opt-out](https://www.rb2b.com/rb2b-gdpr-opt-out). - **Vector.** Use the [Vector opt-out page](https://www.vector.co/opt-out). - **Interest-based ads.** Use the [NAI opt-out tool](https://optout.networkadvertising.org/?c=1) and your LinkedIn ad settings. - **Cookies.** Your browser can block or delete cookies. The site still works without them, though the booking calendar may need them to load. - **Email.** Use the unsubscribe link or reply asking us to stop. ## Your rights Depending on where you live, including California and other US states with privacy laws, the EEA, and the UK, you may have the right to know what personal information we hold about you, get a copy of it, correct it, delete it, limit how we use it, and opt out of its sale, sharing, or use for targeted advertising. EEA and UK residents can also object to processing, ask us to restrict it, and complain to their local data protection authority. To use any of these rights, email [team@getaob.com](mailto:team@getaob.com). We'll confirm the request within 10 days and answer within 45 days. We may need to verify your identity first, and you can have an authorized agent ask for you. If we turn a request down, you can appeal by replying to our answer. We won't treat you differently for using your rights. ## How long we keep it Form submissions sit in Cloudflare storage for 30 days. Records in our CRM and inbox stay for as long as there's a business relationship or a reasonable chance of one, then we delete them or strip out personal details. Analytics data follows each provider's retention settings, generally 14 months or less. We keep anything the law requires us to keep for as long as it requires. ## Security and international transfers We use reputable providers, encrypted connections, and limited access to protect your information. No system is perfectly secure, so we can't guarantee it. Our providers may process data in the United States and other countries. When we move personal data out of the EEA or UK, we rely on safeguards such as the providers' standard contractual clauses. ## Children This site is for businesses and isn't directed at children under 16. We don't knowingly collect their personal information. If you think we have some, email us and we'll delete it. ## Changes and contact We'll update this policy when our practices change and revise the date at the top. For anything privacy related, email [team@getaob.com](mailto:team@getaob.com) or write to OneGTM, New York, NY. You can also read our [terms of use](https://getaob.com/terms).