Privacy and security

Last updated October 5, 2026

Working with GTM Desk means giving me access to some of your business systems. Here's exactly how that access works, how you stay in control, and how I handle the information you share.

How access works

You'll know exactly what's needed up front. Every written scope lists the systems I need, the permission level for each, and why.
You create a user for me. I work under my own named login, set up with my GTM Desk email (kelly@thegtmdesk.com). I never use your login or anyone else's.
You stay in control. You decide what I can see and change, and you can pause or remove my access at any time.
Access ends when the work ends. When a project wraps up, I'll ask you to remove my user and confirm in writing that I've kept no copies of your data. For ongoing support, access lasts only as long as we're working together.

How to protect your business

These are good habits with any outside consultant or contractor, not just me.

Never share your own login. Create a separate user for each outside person, so every change is traceable to who made it.
Grant the least access that gets the job done. If you're unsure what a permission level allows, ask me, and I'll explain it in plain terms.
Require two-factor login for my user and everyone else's.
Check your activity logs. Most CRMs and sales tools record what each user changes; it's a quick way to see exactly what was done.
Remove outside users promptly when work ends, and review your user list every few months.
Ask for an NDA before sharing anything sensitive. I'm happy to sign one.

My security practices

Unique passwords, stored in a password manager.
Two-factor login on all of my accounts.
My own named login for every client, never shared and never anyone else's.
Only the access the work requires, listed in writing before work starts.
Your data stays in your tools. I work inside your systems and don't export or download your customer records to my own computer or other services. Reports I send you contain summary numbers, not your customer records.
Access removed when the work ends, confirmed in writing.
An NDA on request, signed before you share anything.

Health Check privacy

The free GTM Health Check asks for a little information so I can send you a personalized review. Here's what happens to it.

What I collect

Your name, email address, business name, team size, your answer about your biggest sales or marketing headache, and your Health Check answers and scores. You choose what to share; only your email is required to send results.

How I use it

To record and send your video review.
To follow up once if I don't hear back, and then to reply if you get in touch.

I don't sell or rent your information, share it with other businesses for marketing, or add you to a mailing list.

Where it goes

Formspree receives your submission and emails it to me. It keeps a copy for a limited time under its own policies.
My business email, hosted by Apple's iCloud Mail, is where I read and reply to it.
Your own browser remembers your Health Check answers so you can come back to them. Tapping Start over clears them.

The website

This site doesn't use tracking cookies, analytics or ads. It's hosted by Netlify, which keeps standard server logs, such as IP addresses, to run and protect the site. Fonts are loaded from Google Fonts.

Your choices

To see, correct or delete the information you've sent me, email kelly@thegtmdesk.com. I'll delete it from my email and from Formspree and confirm when it's done.

Questions

If anything here is unclear, or you'd like an NDA before we start, email kelly@thegtmdesk.com.