Privacy Policy

Who we are

GTM Wizard.io is operated by Mathew Joseph, a GTM infrastructure consultancy. The data controller is based in Bangalore, India. Our website address is https://gtmwizard.io and the data controller can be reached at mathew@gtmwizard.io.

What personal data we collect and why

Contact forms and booking

When you book a discovery call via Cal.com, we collect your name, email address, and any information you provide in the booking notes. This data is used solely to schedule and prepare for your consultation. Cal.com processes this data as a third-party service. Refer to Cal.com's privacy policy for their data handling practices.

Analytics

We use Google Analytics 4 and Google Tag Manager to understand how visitors use our website. These services are deployed via Google Consent Mode v2 with the default state set to denied. No analytics cookies are set, and no measurement events fire, until you grant consent via our cookie banner. With consent granted, Google Analytics collects page views, referrer information, device type, country-level location, and anonymized IP address; this data is shared with Google as a third-party processor. We do not collect personally identifiable information through analytics, and we do not use this data for advertising. You can revoke consent at any time via the cookie banner (revisit it through the Cookies section below) or through your browser's cookie controls.

Direct communication

If you contact us through our booking page or during a scheduled call, we retain the information you provide for the purpose of responding to your inquiry and maintaining business correspondence.

Newsletter

If you subscribe to our newsletter, we collect your email address and use it solely to deliver the newsletter (typically two emails a week) and a confirmation message verifying you asked to subscribe. We process newsletter subscriptions on a double opt-in basis: your address is only added to our active list after you click the confirmation link in the verification email we send. Until you confirm, your address is not added and no further messages are sent. We never share, sell, or rent newsletter addresses to any third party. The lawful basis under GDPR Article 6(1)(a) is your explicit consent, which you can withdraw at any time via the unsubscribe link included in every newsletter email.

How long we retain your data

Contact form submissions and booking data are retained for the duration of any business relationship plus 12 months. Email correspondence is retained for 24 months unless a longer retention is required for legal or contractual purposes. Newsletter subscriber addresses are retained for as long as you remain subscribed; when you unsubscribe, your address is marked as such in our list and is no longer used for sending. You may request full deletion of your data at any time via the contact options below.

Your rights under GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right of access:request a copy of your personal data
• Right to rectification:request correction of inaccurate data
• Right to erasure:request deletion of your personal data
• Right to restrict processing:request limitation of how we use your data
• Right to data portability:request your data in a machine-readable format
• Right to object:object to processing of your personal data

To exercise any of these rights, contact us through our contact page. We will respond within 30 days.

Third-party services

We use the following third-party services that may process your data:

• Cal.com: appointment scheduling (privacy policy)
• Vercel: website hosting, plus Vercel Web Analytics and Speed Insights (cookie-free, no personally identifiable information collected; data is aggregated for traffic counts and real-user Core Web Vitals only) (privacy policy)
• Google Analytics 4 & Google Tag Manager: website analytics, deployed only after consent via Consent Mode v2 (privacy policy)
• Resend: newsletter delivery, sub-processor for the double-opt-in confirmation flow and the recurring newsletter send (privacy policy, DPA)

Cookies

We use a small number of cookies grouped into two categories. Analytics cookies are off by default and are only set after you grant consent via our cookie banner.

Essential (always on)

Essential cookies are required for the website to function. These may be set by our hosting provider (Vercel) for security and performance, and by the Cal.com booking widget when you interact with it. No consent is required for essential cookies under GDPR Article 6(1)(f) (legitimate interest).

Analytics (consent-gated)

If you accept analytics cookies via our banner, Google Analytics 4 sets the following cookies on your device:

• _ga: distinguishes unique users; retention 2 years
• _ga_<property-id>: stores session state; retention 2 years
• _gid: distinguishes unique users (24-hour window); retention 24 hours

Revoking consent

You can revoke analytics consent at any time by clearing your browser's site data for this domain, which will cause our cookie banner to reappear on your next visit. You can also block cookies entirely via your browser's privacy settings without affecting essential site functionality.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Supervisory authority

You have the right to lodge a complaint with your local data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). In the EU, contact your national Data Protection Authority.

Contact

For any questions about this privacy policy or your personal data, contact:
Mathew Joseph (Data Controller)
mathew@gtmwizard.io
Contact page
GTM Wizard.io