Privacy notice

GTME is a LinkedIn outreach service, run by the GTME Consulting team, based in Delhi, India. When this notice says “GTME”, “we” or “us”, it means that business.

For the data in this notice, we’re the controller. The one exception is client work, where we act as a processor.

Privacy contact

privacy@gtme.consulting

Grievance officer

Prachi Agarwal, hello@gtme.consulting. Handles data questions and grievances, including for people in India.

Postal address

Delhi, India. We send the full postal address on request.

EU and UK representative

Not appointed yet. We’ll appoint one before the first client in the EU or UK starts outreach, and name them here.

• We collect what you type into our forms and what you tell us when you book a call. Our servers also log what they need to run the site.
• We use it to prepare your audit, reply to you and, if you become a client, run your outreach and bill you.
• We don’t sell personal data. We don’t use ad cookies. There’s no tracking pixel from LinkedIn or anyone else on this site.
• You can ask to see, correct or delete your data at any time by emailing privacy@gtme.consulting. We answer within 30 days.

Under the EU and UK GDPR we need a lawful basis for each use of data. This table lists what we collect and where it comes from. It also lists what we use it for and the basis we rely on.

We don’t ask for your phone number, team size or buyer title in any form. We don’t need them.

We use a few service providers to run GTME. Each one handles data only on our instructions, under a data processing agreement. It’s only for the job listed here.

We don’t sell data to anyone. We don’t share it with advertisers.

For clients only, we also use two more kinds of tool. The outreach tool sends invitations from the client’s profile (a cloud-based sending tool with daily limits).

The signal tools show us public buying signals (LinkedIn Sales Navigator and the other signal tools we use). Razorpay and Wise also act as controllers for their own legal duties. That includes things like fraud checks, under their own privacy notices. We never see your full card number.

We may also share data if the law requires it, or to protect our rights in a legal dispute.

GTME works from India, and several of the providers above are in the United States. So data from the EU and the UK goes to other countries. The EU and the UK haven’t found that those countries protect it well enough. India has no adequacy decision from the EU or the UK.

To protect it, we use the Standard Contractual Clauses from the European Commission. For the UK, we add the UK’s own addendum to them.

Both are part of each provider’s data processing agreement, and of our agreements with clients. You can ask us for a copy at privacy@gtme.consulting.

If you’re in the EU or the UK, you have the right to:

• ask for a copy of the data we hold about you
• have inaccurate data corrected
• have your data deleted
• limit how we use it while a question is sorted out
• object to how we use it. You can always object to direct marketing
• get the data you gave us in a file you can take elsewhere
• take back your consent at any time, where we rely on it
• complain to a data protection body. In the UK that’s the Information Commissioner’s Office. In the EU it’s the body where you live or work

If you’re in India, the Digital Personal Data Protection Act 2023 gives you rights too. You can ask for a summary of the data we hold about you.

You can have it corrected, completed, updated or erased. You can use our grievance process, and you can name someone to act for you. If we don’t resolve a grievance, you can complain to the Data Protection Board of India.

If you’re in California or another US state, we don’t sell personal information. We don’t share it either, as those laws define it. We don’t use it for targeted advertising either. We’ll answer a request to know, correct or delete your data like any other.

To use any of these rights, email privacy@gtme.consulting. We may ask you to confirm your identity first. We answer within 30 days and don’t charge for it.

This site doesn’t use cookies for analytics or ads. That’s why there’s no cookie banner.

• Plausible counts visits without cookies. It stores nothing on your device. It uses a daily visitor code made from your IP address and browser. It deletes that code every 24 hours.
• Cloudflare Turnstile loads when you reach the second step of the free audit form. It may use storage on your device to check that you’re a person. This is strictly necessary for the form you’re sending.
• Cal.com stores data on your device only when you open the booking calendar. It needs that to run the booking you asked for.
• Our fonts are served from this site, so no font provider sees your visit.

The form sorts requests by when they arrive. If a day is full, you’re offered the next available day instead. The form tells you so straight away.

This sorting has no legal or similar effect on you, and a person reads every request. Software alone never makes a decision about you that has a legal or similar effect.

GTME runs LinkedIn outreach for business clients from their own LinkedIn profiles. If you got an invitation or a message that way, the client controls your data.

We’re their processor, under a written data processing agreement. This section gives you the information the GDPR asks for when data wasn’t collected from you directly (Article 14).

• What we hold: your name, job title, company and public LinkedIn profile. We also hold the public post or company news that led to the invitation. We hold the messages you exchanged too, and whether you replied or booked a meeting.
• Where it came from: your public LinkedIn profile, LinkedIn Sales Navigator, public posts and public company news.
• Why: so the client could contact you about a problem their product solves. The client’s own privacy notice gives their lawful basis. It is usually their legitimate interest in contacting business buyers.
• How long: until the client’s contract with us ends, then deleted within 30 days.
• How to object: reply to the message, or email privacy@gtme.consulting. We add you to one do-not-contact list that covers every client we work for. That way, you won’t hear from any of them through us again.

We may list your name, title, company and public profile link in a private audit for one person. That comes only from what is public on LinkedIn. It is not indexed, expires after 30 days and is deleted after 30. Email privacy@gtme.consulting to be removed at once.

For our clients, GTME handles the data of the people contacted from the client’s profile. The client decides who is contacted and why.

We follow their instructions under a data processing agreement that meets Article 28 of the GDPR. It covers confidentiality, security and the providers we use. It also covers help with people’s requests and breach notice to the client within 48 hours. It covers deletion when the contract ends too.

Two-factor sign-in is switched on for every tool we use. Only the people who need access have it, and we check that every month.

Prospect data never goes onto our own phones, spreadsheets or chat apps. We never ask for, or store, a client’s LinkedIn password. If a breach affects your data, we’ll tell you fast. We’ll also tell the authorities where the law requires it.

GTME is a business service. This site isn’t meant for anyone under 18, and we don’t knowingly collect data about children.

We’ll update this notice when what we do with data changes. The version and date at the top of the page change with it, and we keep every earlier version.

Our records store which version was live when you sent a form. If a change affects how we use data we already hold about you, we’ll tell you by email first.

This notice is in English. If you’re in India, you can ask for it in a language from the Eighth Schedule of the Constitution of India. Just email privacy@gtme.consulting.