1. Data controller
The data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:
Global Marketing Agency
Sacramento, California, United States
Email: info@globalmarketing.agency
A Data Protection Officer is not currently appointed. For privacy questions and data-subject requests, contact info@globalmarketing.agency with the subject line "GDPR request".
2. EU representative (per Art. 27 GDPR)
GMA currently relies on the limited-processing exemption under Art. 27(2) GDPR. EU residents may direct privacy questions to info@globalmarketing.agency.
3. Categories of data processed
GMA processes the following categories of personal data:
- Inquiry-form data: name, company, role, email address, country, business stage, and message text submitted through contact and inquiry forms.
- Email correspondence: contents of emails sent to info@globalmarketing.agency, partnerships@globalmarketing.agency, or any other published address operated by GMA.
- Server-log data: IP address (anonymised after thirty days), user-agent string, referrer, and timestamp, collected by the hosting provider for security and abuse-prevention purposes.
- Analytics data: pseudonymous identifiers, page-view events, device and browser data, and approximate geolocation, collected by analytics providers as described below.
- Cookies and similar technologies: session identifiers, language preference, and analytics identifiers.
4. Purposes and legal bases of processing
Processing is based on the following legal bases under Art. 6(1) GDPR:
- Inquiry handling: Art. 6(1)(b) GDPR (contract performance and pre-contract steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to operator inquiries).
- Server logs: Art. 6(1)(f) GDPR (legitimate interest in security, fraud prevention, and uptime).
- Analytics and pixel measurement: Art. 6(1)(a) GDPR (consent), where consent is required, and Art. 6(1)(f) GDPR for non-personalised aggregate measurement where lawful.
- Email correspondence: Art. 6(1)(b) and Art. 6(1)(f) GDPR depending on the nature of the exchange.
5. Third-party processors and recipients
GMA uses the following third parties to operate the site and the inquiry surface. Each is a processor or independent controller as named. Google Analytics 4 loads on page load for aggregate site measurement with Google Signals and ad-personalization signals disabled. Meta Pixel loads only after the visitor accepts the on-site consent banner. A declined or unanswered banner keeps Meta Pixel off.
- Cloudflare, Inc. (United States): hosting, content delivery, DNS, and DDoS protection. Loads on every page request. Standard Contractual Clauses (SCCs) apply for transfers to the United States. See Cloudflare privacy policy.
- Google LLC (Google Analytics 4, measurement ID G-W355MTHXN3): aggregate site analytics. Loads on page load with Google Signals and ad-personalization signals disabled. SCCs and IP-anonymisation apply. See Google privacy policy.
- Meta Platforms, Inc. (Meta Pixel): conversion measurement. Loads only after the visitor accepts the consent banner. SCCs apply. See Meta privacy policy.
- Yandex (verification ID f48a8256bed5a500): site verification only; no Yandex Metrica analytics is currently active on this property. See Yandex privacy policy.
- Web3Forms (Mahir Inc., service provider): processing of form submissions. GMA uses Web3Forms to deliver inquiry-form data to its inbox. See Web3Forms privacy policy.
6. International data transfers
The data controller is based in the United States. Personal data of EU/EEA, UK, or Swiss visitors is transferred to the United States and processed there. Transfers rely on the Standard Contractual Clauses (Commission Decision (EU) 2021/914) and, where applicable, the EU-US Data Privacy Framework adequacy decision (2023). Visitors may request a copy of the relevant safeguards via info@globalmarketing.agency.
7. Retention periods
Inquiry-form data is retained for as long as the inquiry remains commercially relevant, and in any event no longer than thirty-six months from the last meaningful contact, after which it is deleted unless a retention obligation under US or EU law requires longer retention. Server logs are retained for thirty days. Analytics data follows the retention settings of the respective provider (typically fourteen months for GA4 and the provider default for Meta).
8. Data-subject rights
Subjects in the EU/EEA, UK, or Switzerland have the following rights, exercisable by emailing info@globalmarketing.agency with the subject line "GDPR request":
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR), in particular to processing based on legitimate interest
- Right to withdraw consent at any time (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before withdrawal
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU/EEA member state of residence, place of work, or place of the alleged infringement
9. Cookies and consent
The site uses functional cookies (session, language preference) without consent because they are technically required to operate the site. Google Analytics 4 runs on page load for aggregate site measurement. Meta Pixel is gated behind an on-site consent banner shown on first visit.
How the banner works. On the first page load, the visitor sees a banner naming Google Analytics and Meta Pixel and offering Accept or Decline for Meta Pixel. The choice is stored in the visitor's browser using localStorage under the key gma_consent_v1. Accept loads Meta Pixel. Decline keeps Meta Pixel off. A small Manage choice toggle remains visible after a choice is made, allowing the visitor to revisit the decision at any time.
Withdrawal. Meta Pixel consent can be withdrawn at any time by clicking the Manage choice toggle and selecting Decline, or by clearing the browser's local storage for this site. Withdrawal does not affect the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).
If JavaScript is disabled. The banner does not appear and neither pixel is loaded. Visitors with JavaScript disabled receive only functional cookies.
10. Security
The site is delivered exclusively over HTTPS. Form submissions are transmitted over TLS. Hosting is on Cloudflare Pages with edge-level rate limiting and bot mitigation. Inquiry data is held in GMA's email infrastructure with multi-factor authentication.
11. Automated decision-making
GMA does not engage in automated decision-making within the meaning of Art. 22 GDPR.
12. Changes to this policy
This privacy policy may be updated when site infrastructure, processors, or legal requirements change. The current version is dated above. Material changes affecting EU/EEA subjects will be highlighted on this page for thirty days from publication.
13. Contact for privacy matters
Email: info@globalmarketing.agency (subject line: "GDPR request")
Postal: Global Marketing Agency, Sacramento, California, United States. See the Impressum →