Privacy Policy

SECTION 1Who we are and what this covers

J & GM Marketing, doing business as Pivot Consulting (“Pivot,” “we,” “us,” or “our”), operates the website at pivotslc.com and provides HubSpot consulting, integration, data architecture, and automation services to business clients.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, contact us, subscribe to our communications, or otherwise interact with us as a prospective or current client.

This policy does not govern personal information we process on behalf of our clients in the course of delivering services to them. See Section 8.

SECTION 2Information we collect

Information you provide

• Contact and identity information — name, business email address, telephone and mobile number, employer, job title, mailing address.
• Communications — the content of emails, forms, meeting requests, support requests, and messages you send us.
• Marketing preferences — the subscriptions, topics, and channels you opt into, including SMS consent.
• Payment and billing information — where you engage us for services. Card payments are handled by our payment processor; we do not store full card numbers.

Information collected automatically

• Device and connection data — IP address, browser type and version, operating system, device type, and referring URL.
• Usage data — pages viewed, time on page, links and buttons clicked, forms started and submitted, files downloaded, and email opens and clicks.
• Cookies and similar technologies — see Section 7.

Information from other sources

• Business data providers and enrichment services, which may append company size, industry, technologies in use, and publicly available professional details.
• Our partners and platforms, including HubSpot, where you have engaged with co-marketing content or events.
• Publicly available sources, including company websites, public filings, and professional networking sites.

SECTION 3Mobile information and SMS

If you opt in to receive text messages from us, we collect your mobile telephone number together with a record of your consent — the date and time it was given, the method (web form or text-to-join), and the wording you agreed to.

We use this information only to send the messages you consented to receive and to operate the program, including delivering HELP and STOP responses.

Our handling of mobile information is described further in Section 6.

SECTION 4How we use information

We use personal information to:

• provide, operate, and improve our services and our website;
• respond to enquiries, prepare proposals, and deliver engagements;
• send administrative and transactional communications, including service notices, invoices, and account updates;
• send marketing communications by email and, where you have opted in, by SMS;
• personalize the content and offers we present to you;
• measure and analyze the performance of our website, content, and campaigns;
• maintain the security and integrity of our systems and detect fraud or misuse;
• comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

SECTION 5Legal bases for processing (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.

SECTION 6How we share information

We disclose personal information in the following circumstances:

• Service providers and subprocessors who perform functions on our behalf — including CRM and marketing automation, hosting and infrastructure, messaging and telecommunications, analytics, time tracking, email delivery, and payment processing. These providers are permitted to use the information only to perform services for us.
• Professional advisers — accountants, auditors, insurers, and legal counsel, under duties of confidentiality.
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply.
• Legal requirements — where disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Pivot, our clients, or others.
• With your direction or consent — including where you ask us to share information with a client, partner, or platform.

SECTION 7Cookies and similar technologies

We use cookies, pixels, and similar technologies to operate the site, remember your preferences, understand how the site is used, and measure our marketing.

The cookies we use fall into four categories:

• Necessary — required for the site to function and to remember your privacy choices. These are always active.
• Analytics — help us understand traffic and how visitors use the site.
• Advertisement — measure campaign performance and, where permitted, tailor the content and offers you see.
• Functionality — remember your preferences and support embedded content such as forms, chat, and scheduling tools.

Non-necessary cookies are not set unless you consent to them. You can accept or decline them when the banner appears, and you can change your choice at any time using the cookie preferences link on our site. You can also control cookies through your browser settings. Blocking some cookies may affect how the site works.

Where we decline to set a cookie, we may still record aggregated, anonymized page-view information that is not linked to you.

Global Privacy Control. Where your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out request and do not set non-essential cookies.

Do Not Track. There is no common industry standard for how to respond to Do Not Track browser signals, and we do not currently respond to them. We do respond to GPC, as described above.

SECTION 8Client data — our role as a processor

In delivering consulting, integration, and automation services, we access and process personal information held in our clients’ systems, including their CRM portals, databases, and the applications we build and maintain for them.

For that information, our client is the controller (or business), and Pivot acts as a processor (or service provider) on the client’s documented instructions. We do not use client data for our own purposes, do not sell it, and do not use it to market to the individuals it describes.

That processing is governed by our services agreement with the client and by a separate Data Processing Agreement, which sets out the subject matter and duration of processing, the categories of data and data subjects, security measures, the subprocessors we use, breach notification, assistance with data subject requests, and deletion or return of data at the end of the engagement.

Clients and prospective clients may request our current Data Processing Agreement and subprocessor list at info@pivotslc.com.

If you believe your personal information is held in a client’s system and you wish to exercise rights over it, please contact that organization directly. If you contact us, we will refer your request to the relevant client and assist them in responding.

SECTION 9How long we keep information

We retain personal information for as long as necessary to fulfil the purposes described in this policy, which in practice means:

• Prospect and marketing records — while the relationship is active, and for 36 months after your last engagement with us, unless you ask us to delete them sooner.
• SMS consent records — for the duration of the subscription and for 4 years after opt-out, to evidence consent as required by applicable telecommunications rules.
• Client and engagement records — for the term of the engagement and for the period required by our contractual, tax, accounting, and professional obligations.
• Website analytics — in aggregated or de-identified form thereafter.

SECTION 10Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls and least-privilege permissions, secrets management for API credentials, logging and monitoring, and periodic review of access.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

SECTION 11Your privacy rights

United States

Depending on where you live, you may have the right to:

• confirm whether we process your personal information and access it;
• obtain a copy of it in a portable format;
• correct inaccuracies;
• request deletion;
• opt out of targeted advertising, the sale of personal information, and certain profiling;
• not be discriminated against for exercising these rights.

We do not sell personal information and do not process it for targeted advertising as those terms are defined under applicable state law.

To exercise a right, contact us at info@pivotslc.com or through the form at pivotslc.com/contact-us. We will verify your request using the information we hold about you, and will respond within the time required by applicable law. An authorized agent may submit a request on your behalf with proof of authorization.

Appeals. If we decline your request, you may appeal by replying to our decision or writing to info@pivotslc.com with “Privacy Appeal” in the subject line. We will respond to appeals within the period required by your state’s law.

EEA, UK, and Switzerland

Where the GDPR or UK GDPR applies, you additionally have the right to object to processing based on legitimate interests, to request restriction of processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority.

Marketing opt-out

You may unsubscribe from marketing email using the link in any message, or reply STOP to any text message. You may continue to receive administrative and transactional messages relating to an active engagement.

SECTION 12International transfers

We are based in the United States and our service providers may process information in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where required.

SECTION 13Children

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact info@pivotslc.com and we will delete it.

SECTION 14Changes to this policy

We may update this policy from time to time. We will post the revised version here and update the “Last updated” date. Where changes are material, we will provide additional notice as required by law.

SECTION 15Contact us