Privacy Policy

1. Who we are

The website at gtm.rayneops.dev (the “GTM website”) is operated by RayneOps. RayneOps GTM is the go-to-market systems and services practice of RayneOps. In this policy, “RayneOps”, “we”, “us” and “our” refer to RayneOps as the operator of the GTM website and the party that decides how and why the personal information described here is used.

You can contact us about privacy at rayneops.hq@gmail.com.

2. What this policy covers

This policy covers personal information processed when you:

• visit and browse the GTM website;
• submit a project enquiry through the form on the contact page; and
• receive the acknowledgement email that follows a successful enquiry, or correspond with us about your enquiry.

It does not cover the RayneOps corporate website at rayneops.dev or other RayneOps websites, which have their own policies. If you later engage RayneOps for paid services, the written agreement for that engagement may include additional data-protection terms.

3. Information we collect

Information you provide in the enquiry form

Please do not include sensitive personal information (for example, health, financial account or government identification details) or personal information about other people that we do not need to answer your enquiry.

Information created when you submit

• Submission time. The date and time your enquiry was received, recorded in the notification email.
• Policy acknowledgement record. The notification records that the privacy acknowledgement was given and which version of this policy applied (currently version 2026-11).
• Website source. The notification records that the enquiry came from gtm.rayneops.dev.

Technical and security information

• IP address. Used to limit repeated submissions and to protect the form from abuse. Before it is used as a rate-limiting key, it is converted into a one-way hash, so the raw address is not stored by our rate limiter. A hashed identifier can still be personal information, and we treat it as such.
• Submission fingerprint. A one-way hash of your email address and project description, used to recognize an identical submission sent twice in quick succession.
• Time spent on the form. Measured in your browser and sent with the enquiry. Submissions completed in under 2.5 seconds are treated as automated. It is used only for this check and is not included in any email.
• Spam-trap field. The form contains a hidden field that people do not see. Submissions that fill it in are treated as automated and are not delivered.
• Request information processed by our hosting provider. As with any website, our hosting provider processes information such as IP address, browser and device information, the page requested and the time of the request, in order to deliver pages and keep the service secure.

What we do not collect

The GTM website has no user accounts, payments or database. It does not use analytics, advertising trackers or social media pixels, and it does not set cookies. See the Cookie Policy.

4. How we use information

We use the information described above to:

• receive, read and respond to your project enquiry, and follow up on it;
• send you a single acknowledgement email confirming that your enquiry was received;
• assess whether and how RayneOps GTM could help, and prepare for a discovery conversation if you want one;
• protect the website and the enquiry form from spam, abuse and security threats;
• keep a reasonable record of business correspondence; and
• comply with legal obligations and establish, exercise or defend legal claims, where necessary.

We do not sell your personal information, use it for advertising, or add you to marketing lists. Automated spam checks (the spam-trap field, the minimum completion time and rate limits) can stop a submission from being delivered. They do not make any other decision about you. If you think a genuine enquiry was blocked, email rayneops.hq@gmail.com.

5. Legal bases for processing

Where the law requires a legal basis for processing personal information, we rely on the following, as applicable:

• Steps you ask us to take before a possible contract. Responding to your enquiry and discussing a potential engagement.
• Legitimate interests. Answering business enquiries, keeping records of correspondence, and protecting the website and form from abuse. We balance these interests against your rights and keep the information we use to a minimum.
• Legal obligations. Where we must keep or disclose information to comply with the law.
• Consent. Where applicable law requires your consent for a particular use, the acknowledgement on the form also records that consent. You can withdraw it at any time by emailing rayneops.hq@gmail.com. Withdrawal does not affect processing that has already taken place.

6. Acknowledgement emails

After our system confirms that your enquiry has been accepted for delivery to our inbox, we send one automatic acknowledgement email to the address you entered. If the enquiry cannot be delivered, no acknowledgement is sent.

The acknowledgement is a transactional message, not marketing. It does not repeat the content of your enquiry, and it may address you by first name. Because anyone can type an email address into a form, it is deliberately written so that it cannot be used to send someone else's text to a third party. If you receive one without having submitted an enquiry, you can ignore it or tell us at rayneops.hq@gmail.com.

7. No automatic marketing enrollment

Submitting an enquiry does not subscribe you to anything. Specifically, we do not:

• create or update a marketing contact for you in our email platform;
• add you to the RayneOps Insights newsletter or any other mailing list; or
• change the subscription or unsubscribe status of any existing contact.

RayneOps Insights is a separate publication on the corporate website, with its own sign-up and confirmation process and its own privacy terms.

8. Service providers and recipients

We use the service providers below to run the GTM website and handle enquiries. They process personal information on our behalf and under their own terms and security practices. They may keep operational, security and delivery logs in line with their own retention practices.

We may also share personal information:

• with RayneOps personnel who need it to respond to and manage your enquiry;
• with professional advisers, such as lawyers or accountants, where necessary;
• where required by law, regulation or valid legal process, or to protect rights, safety and security; and
• in connection with a reorganization, merger or transfer of all or part of the RayneOps business, in which case the information would remain subject to protections consistent with this policy.

9. International processing

Our service providers operate internationally, and personal information may be processed in countries other than the one you live in, including countries whose data-protection laws differ from yours. Where the law requires it, we rely on the safeguards our providers offer for international transfers, such as contractual protections in their data-processing terms.

10. How we protect information

Measures in place on the GTM website include:

• encrypted connections (HTTPS) for all pages and form submissions;
• validation of every submitted field on our server, and a 16 KB limit on the size of a submission;
• rejection of form submissions sent from other websites;
• rate limiting (at most 5 enquiries per 10 minutes from one connection), duplicate detection and spam traps;
• safe handling of submitted text in emails, so it cannot alter the email's content or structure;
• API keys held only on the server, never in the browser; and
• no website database, so enquiries are not stored on the website itself.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your information has been compromised, contact rayneops.hq@gmail.com.

11. How long we keep information

We keep personal information only for as long as we need it for the purposes in this policy. In practice:

• Enquiry emails and correspondence are kept in our inbox while we respond to and manage your enquiry, and afterwards for as long as reasonably needed for business records, any resulting engagement, and legal or accounting purposes. They are then deleted or anonymized as part of periodic review.
• Rate-limiting and duplicate records in Upstash expire automatically, after about 21 minutes and 2 minutes respectively. If this protection is unavailable, the form temporarily stops accepting enquiries and asks you to email us instead.
• Provider logs held by Brevo, Google and Vercel are kept in line with each provider's retention practices and our account settings.

A submitted enquiry is not deleted the moment it is sent. Copies exist in our inbox and may exist in provider logs until they are deleted or expire. If you ask us to delete your information, we will delete what we control, subject to any legal obligation to keep it.

12. Your rights and how to make a request

Depending on where you live and the law that applies, you may have the right to:

• ask whether we hold personal information about you, and request a copy;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information;
• object to, or ask us to restrict, certain processing;
• ask for your information in a portable format;
• withdraw consent where we rely on it; and
• complain to a data-protection or privacy regulator.

Making a request

1. Email rayneops.hq@gmail.com with the subject line “Privacy request”.
2. Tell us which right you want to exercise, and the email address you used on the enquiry form.
3. We may ask for information to confirm your identity before acting, so that we do not disclose or delete someone else's information.
4. We will respond within the period required by applicable law.

We do not charge for reasonable requests. We will not treat you differently for exercising your rights.

13. Children

The GTM website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has submitted information, contact rayneops.hq@gmail.com and we will delete it.

14. Links to other websites

The GTM website links to the RayneOps corporate website and may link to other sites. Those sites are governed by their own privacy policies, and we are not responsible for their practices.

15. Changes to this policy

We may update this policy when our practices, providers or legal requirements change. The “Last updated” date at the top shows when it last changed in a material way. If a change significantly affects how we use information you have already given us, we will take reasonable steps to tell you.

16. Contact

Questions, concerns and requests about this policy or your personal information can be sent to rayneops.hq@gmail.com.