Corhaven Corporation, operating under the trade names "GTM Eng" and "RocketOps" ("Corhaven," "GTM Eng," "we," "us," or "our"), operates the website gtmeng.co and provides data infrastructure and revenue operations consulting services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage our services.
We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), and where applicable, the General Data Protection Regulation ("GDPR") and other privacy laws that may apply to the data we process on behalf of our clients.
Understanding our role in data processing is important:
When you engage our services, we access your CRM data (e.g., HubSpot) solely to provide the contracted data infrastructure and analytics services. This CRM data may contain personal information about your customers, leads, and contacts, including names, email addresses, company information, and interaction history.
We process this data exclusively as your data processor, in accordance with your Service Agreement and any applicable Data Processing Agreement.
We use the information we collect to:
Legal Basis (GDPR, where applicable): We rely on legitimate interest for website analytics and service improvement, consent for marketing communications, and contractual necessity for responding to inquiries and delivering requested services.
When processing your CRM data as a data processor, we:
In the course of providing our services, we use the following third-party sub-processors:
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform (BigQuery) | Data warehousing, analytics, and compute | Client CRM data | Region selected per engagement (typically US or Canada) |
| Airbyte | Data pipeline and integration | Client CRM data in transit | Cloud or self-hosted per engagement |
| dbt (dbt Labs) | Data transformation and modeling | Runs transformation queries against client data warehouse | No separate data storage; executes against BigQuery |
| Lightdash | Business intelligence and dashboards | Reads from client data warehouse | Cloud or self-hosted per engagement |
| Google Analytics | Website analytics | Website visitor usage data | United States |
| Cal.com | Appointment scheduling | Name, email, scheduling details | United States |
We maintain data processing agreements with each sub-processor, requiring them to protect data in accordance with applicable privacy laws. We will provide notice of any material changes to our sub-processor list.
If you require a formal Data Processing Agreement ("DPA") for your engagement, please contact us at [email protected].
Some of the sub-processors we use are located outside of Canada. Where personal information is transferred outside Canada, we ensure that appropriate safeguards are in place as required by PIPEDA.
For clients subject to the GDPR, where data is transferred outside the European Economic Area, we rely on appropriate transfer mechanisms, including Standard Contractual Clauses or adequacy decisions, to ensure an adequate level of data protection.
| Cookie Type | Provider | Purpose | Duration |
|---|---|---|---|
| Analytics | Google Analytics | Understand website traffic and usage patterns | Up to 2 years |
| Functional | Cal.com | Enable appointment scheduling functionality | Session |
| Analytics | PostHog | Session recordings, web analytics, and product insights to improve usability | 1 year |
| Marketing | Professional audience demographics and campaign measurement | Up to 2 years | |
| Consent Preferences | Klaro (first-party) | Stores your cookie consent choice | 1 year |
When you first visit our site, you will see a cookie consent notice at the bottom of the page. Analytics cookies are not loaded unless you actively choose to accept them. You may:
We do not use cookies for advertising, retargeting, or cross-site tracking.
We implement appropriate technical and organizational measures to protect information under our control, including:
No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable measures to protect your information, we cannot guarantee absolute security.
In the event of a security breach involving personal information under our control that creates a real risk of significant harm, we will:
You have the right to:
If you are located in the European Economic Area, you additionally have the right to:
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. We do not sell personal information.
To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within thirty (30) days, or as required by applicable law.
Our website and services are directed to business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it promptly.
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. Where we have your email address, we will make reasonable efforts to notify you of material changes. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
Corhaven Corporation
Toronto, Ontario, Canada
[email protected]
For privacy-related complaints that we are unable to resolve to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.