Privacy Policy

Who I am

GTM Audit is the trading name of Edvard Nore, a sole trader. I am the controller of the personal data described here, which means I decide how and why it is used. The rules that apply are the UK GDPR and the Data Protection Act 2018.

You can reach me through the contact form or on LinkedIn (details at the bottom of this page).

What I collect

If you use the contact form, I collect:

• your name
• your work email
• anything you choose to add in the message box

I don’t ask for deal material through the form, and the form doesn’t accept attachments. Please don’t put confidential deal information in the message. Share it only after we have agreed an NDA.

When you visit the website, some technical information is collected automatically:

• your IP address, browser and device type, and the pages you request, which the web server records in its logs
• the pages you view, how you arrived and roughly where you are (country or city), which Google Analytics records as described under Cookies and analytics below

If you email me or message me on LinkedIn instead, I receive whatever you send.

How I use it and why

I use your name, email and message to read your enquiry, reply to it and, if you ask, to arrange work together. The legal basis is that this is needed to respond to your request and to take steps towards an agreement with you, and my legitimate interest in running a professional services business.

I use technical and analytics information to keep the website secure and working, and to understand how it is used so I can improve it. The legal basis is my legitimate interest in doing so.

I don’t sell your data, I don’t use it for advertising and I don’t send marketing email unless you have asked me to. No decision about you is made only by a computer.

Where it goes and how long I keep it

When you send the contact form, the message is saved on the website, in its database at my hosting provider, and emailed to me and to anyone I have set up to receive these notifications. I use hosting and email providers to run the site. They handle your data only on my instructions and under their own data protection terms.

Messages are kept for no longer than I need them: while I deal with your enquiry, and afterwards only as long as there is a good reason to keep a record of it, such as work we have done together or my legal and accounting duties. After that they are deleted. Web server logs are kept for a short period and then overwritten by the host.

Some providers, including Google, may process data outside the UK. Where they do, it is done under safeguards the law accepts, such as standard contractual clauses or an adequacy arrangement.

Deal material

Deal material is shared only after an NDA is in place, and never through this website. Everything is under NDA, and your data is never used in another engagement.

Cookies and analytics

This website uses Google Analytics 4 to count visits and see which pages are read. Google Analytics sets cookies in your browser, named _ga and _ga_ followed by the property identifier. They hold a random identifier that lets it tell one visitor from another, and they usually last up to two years. Google receives the information described above, and Google’s own privacy policy explains what it does with it. I use the reports only to understand how the site is used.

Apart from those analytics cookies, the website sets no cookies of its own: no advertising or tracking cookies, no social media buttons that track you, and no embedded video or maps. The contact form works without cookies, and the fonts and scripts the site uses are served from the site itself, not from other companies.

You can stop analytics cookies at any time. Block or delete cookies in your browser settings, or install Google’s opt-out add-on at tools.google.com/dlpage/gaoptout. The website works the same way if you do.

Your rights

You have the right to:

• ask for a copy of the personal data I hold about you
• have anything wrong corrected
• ask me to delete your data
• ask me to restrict how I use it, or to object to my using it
• receive the data you gave me in a portable form
• withdraw your consent at any time, where I rely on it

To use any of these, send a message through the contact form or message me on LinkedIn. I will answer within one month. I may ask you to confirm who you are first.

If you are unhappy with how I have handled your data, please tell me first so I can put it right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

Security

The website is served over HTTPS. Messages saved on the site can be read only by administrators with a login, and the form checks and limits what it accepts. No system is perfectly secure, so please keep confidential information out of the message box.

Changes to this policy

If I change how your data is used, I will update this page and the date at the top. Please check it from time to time.

Contact

For anything about your data, use the contact form or message me on LinkedIn.