Gabriel Sales Privacy Policy
Effective Sept 1 2026 • Last updated Sept 9 2026
The short version. We collect information you give us when you fill out a form, subscribe, buy training or contact us, plus information collected automatically when you browse this site. We use it to answer you, deliver what you asked for, run our advertising and marketing, and improve the site. We use advertising cookies and pixels, and we share information with advertising platforms so we can show you relevant ads — which counts as “sharing” and may count as a “sale” under some US state privacy laws. You can opt out of that at any time by emailing us at [email protected], and we will act on it. You can also ask us for a copy of your data, ask us to correct or delete it, and unsubscribe from our email whenever you like. Everything below explains this in detail.
What we collect, why, and what we share
Name, business email, phone, company and job title, from forms you complete. We use it to respond to your enquiry, deliver what you requested, and follow up about our services. Shared with advertising platforms in hashed form for matched audiences.
Email engagement, meaning opens, clicks, and which pages you visited before and after. We use it to understand what content is useful and to prioritize follow-up. Not shared for advertising.
Website activity, meaning pages viewed, referring source, time on page, device and browser. We use it to measure marketing and advertising performance and to improve the site. Shared with advertising platforms.
Advertising identifiers and cookie IDs. We use them to show you ads, to measure whether those ads worked, and to avoid showing you the same ad repeatedly. Shared with advertising platforms.
Approximate location, inferred from your IP address. We use it to measure performance by region and to decide which privacy notices to show you. Shared with advertising platforms.
Course and workshop registration details. We use them to enroll you, deliver the training and provide support. Not shared for advertising.
Correspondence, meaning emails, meeting notes and support requests. We use it to maintain our working relationship and our records. Not shared for advertising.
1. Who We Are and What This Policy Covers
Gabriel Systems Inc, doing business as Gabriel Sales (“Gabriel Sales,” “we,” “us,” “our”), is a B2B marketing operations and sales operations firm located in Boulder, Colorado 80303, United States.
This policy explains how we handle personal information when you visit gabrielsales.com and our Account Engagement landing pages at go.gabrielsales.com, when you see or click one of our ads, when you contact us or complete one of our forms, when you subscribe to our email, when you register for training or a workshop, and when you engage us as a client or prospective client.
It does not cover the personal information we handle inside a client’s own systems on that client’s instructions. When we work in a client’s Salesforce or Marketing Cloud Account Engagement instance, we handle their data on their behalf under a separate agreement. Section 14 explains that relationship. If you are trying to find out how a company you dealt with handles your data, their privacy policy governs, not this one.
For visitors in the European Economic Area and the United Kingdom, Gabriel Sales is the controller of the personal information described in this policy. Where we run advertising through LinkedIn, Google or Meta, those companies act as independent controllers or joint controllers for parts of that processing under their own terms, and their privacy policies also apply.
2. Information You Give Us
Forms and enquiries. Our forms are built in Salesforce Marketing Cloud Account Engagement and typically ask for your name, business email address, company, job title and phone number, together with whatever you choose to write in a free-text field. Some forms ask what systems you use or what problem you are trying to solve.
Email subscriptions. If you subscribe to our email, we keep your email address and your subscription preferences.
Training, workshops and events. If you register for a workshop, a webinar or a live training session, we collect the registration details needed to enroll you and deliver the session. Our self-paced course is sold through Udemy, which collects payment and account information under its own privacy policy, not ours.
Calls, meetings and correspondence. When you book or attend a Health Check, a scoping call or any other meeting, we keep the notes and correspondence from it, along with the calendar and contact details needed to arrange it.
Client engagements. If you become a client, we hold the contact and billing details of the individuals we work with, together with the records of the work itself. Payment card details are handled by our payment processor; we do not store full card numbers.
Job applicants. If you apply for a role, we collect the information in your application and use it only to assess your candidacy.
You do not have to give us any of this. If you choose not to, we may not be able to answer your question, enroll you, or provide the service you asked for.
3. Information Collected Automatically
Marketing automation tracking. We use Salesforce Marketing Cloud Account Engagement (Pardot) tracking on this site. It sets a first-party cookie and records the pages you view, how you arrived, and how long you stay. If you later complete one of our forms, that browsing history is associated with your record, so we can see which content you read before you got in touch.
Analytics. We use Google Analytics 4, deployed through Google Tag Manager, to understand how the site is used — which pages are visited, how people move through the site, which sources send traffic, and what device and browser you use.
Advertising pixels and tags. We use the LinkedIn Insight Tag, the Google Ads remarketing tag and the Meta Pixel. These set cookies and collect information about your visit — the pages you viewed, the actions you took, your device, browser and approximate location — so that we can show you our ads on those platforms afterwards, measure whether our ads led to enquiries, and build audiences of people who resemble our existing prospects. Section 5 explains this in full.
Email tracking. Our marketing emails contain a small tracking pixel and encoded links that tell us whether a message was opened and which links were clicked. You can prevent most of this by setting your email client to block remote images.
Server logs and security. Our site is served through Cloudflare, which processes IP addresses and request data to deliver the site and protect it from abuse. Our hosting provider keeps standard server logs including IP address, browser type and the pages requested.
Embedded content. Some pages embed video from YouTube. When such a page loads or you play a video, YouTube may set its own cookies and collect data under Google’s privacy policy.
Approximate location. We infer your country, state or city from your IP address. We use this to measure performance by region and to determine which privacy notices and consent options to show you. We do not collect precise geolocation.
4. Cookies and Similar Technologies
Cookies are small files stored by your browser. Pixels and tags work similarly. We use them in four categories.
Strictly necessary. These keep the site working and secure — Cloudflare’s security cookies, the cookies WordPress uses to serve pages, and the cookie that records your own privacy choices. The site cannot function without these and they are always on.
Analytics. Google Analytics 4, described in Section 3. This tells us how the site is used.
Marketing automation. Account Engagement tracking, described in Section 3. This connects your browsing to your record once you identify yourself through a form.
Advertising. The LinkedIn Insight Tag, the Google Ads remarketing tag and the Meta Pixel. These are what let us advertise to you after you leave, and they are the category most people want control over.
Your choices. If you are visiting from the European Economic Area or the United Kingdom, we show a consent banner when you arrive, and analytics, marketing automation and advertising cookies are not set until you accept them. You can change your choice at any time through the “Cookie Settings” link in our footer.
If you are visiting from elsewhere, including the United States, these cookies are set when you arrive. To turn off advertising cookies and stop us sharing your information for targeted advertising, email us at [email protected] and say so — we will apply it to your record and remove you from our advertising audiences. You can also block or delete cookies in your browser settings, use private or incognito mode, or turn on Global Privacy Control, which we honor automatically.
Global Privacy Control. If your browser or an extension sends a Global Privacy Control signal, we treat it as a valid request to opt out of the sale and sharing of your personal information for targeted advertising, and we apply it automatically to that browser. We do not respond to the older Do Not Track signal, which has no agreed standard.
5. Advertising and How It Works
We advertise on LinkedIn, Google and Meta, and this section explains plainly what that involves, because it is the part of our data handling most likely to affect you.
Retargeting. When you visit this site, the advertising tags described in Section 3 record that visit. We can then ask LinkedIn, Google or Meta to show our ads to people who have visited particular pages — for example, someone who read our Marketing Cloud Next migration page might later see an ad about migration planning. The platform matches you using cookies and identifiers it already holds. We do not learn who you are from this process unless you contact us.
Matched and custom audiences. We may upload lists of business contacts from our marketing database to LinkedIn, Google or Meta so that we can advertise to those specific people, or ask the platform to find others who resemble them. Email addresses are hashed — converted into an irreversible string — before they are sent, and the platform matches those hashes against its own users. We instruct these platforms to use the list only to serve our campaigns and to delete it afterwards, in line with their terms.
This upload is the practice most likely to be treated as “sharing,” and in some US states as a “sale,” of personal information. We treat it that way and give you a straightforward route to opt out.
Measurement. We use conversion tracking to see which ads led to a form completion, so we can stop paying for the ones that do not work.
What we do not do. We do not use sensitive personal information for advertising. We do not advertise to children. We do not sell your personal information for money to anyone. We do not use advertising data to make decisions about you that have legal or similarly significant effects.
How to stop it. Email us at [email protected] and tell us you want to opt out of targeted advertising. We will remove you from our advertising audiences, suppress you from future uploads, and confirm when it is done. You do not need to give a reason and we will not ask for one. You can also turn on Global Privacy Control in your browser, which we honor automatically; control advertising at the platform level in your LinkedIn, Google and Meta account settings; and use the industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org.
6. How We Use Your Information, and Our Legal Basis
We use personal information to respond to enquiries and provide what you asked for; to deliver training, workshops and course materials; to provide and administer our services to clients; to send marketing email about our services, content and events; to advertise our services and measure whether that advertising works; to understand which content and campaigns perform; to operate, secure and improve this website; to maintain our business records; to assess job applications; and to comply with our legal and tax obligations.
If you are in the EEA or the UK, the law requires a legal basis for each use. Ours are as follows.
Performance of a contract, or steps taken at your request before entering one, covers responding to your enquiry, delivering training you registered for, and providing services to clients.
Consent covers analytics, marketing automation tracking and all advertising cookies and pixels, which is why we ask before setting them. It also covers uploading your details to an advertising platform for matched audiences where consent is required. You can withdraw consent at any time through our Cookie Settings link or by contacting us, and withdrawing it does not affect anything we did beforehand.
Legitimate interests covers our B2B marketing email to business contacts, improving our services, and securing our systems. Our legitimate interest is in operating and growing a business by reaching people whose professional role makes our services relevant. We market only to business contacts in a professional capacity, we do not use sensitive data, and every message includes an unsubscribe link. You can object at any time.
Legal obligation covers our tax, accounting and record-keeping duties.
We do not make decisions producing legal or similarly significant effects using automated processing alone. We do use lead scoring in our marketing platform to prioritize follow-up; a person always decides what happens next.
7. When We Share Information
We do not sell your personal information for money. We do share it in the following situations, and we want to be exact about the advertising one because US state law defines these terms broadly.
Advertising platforms. We share online identifiers, cookie IDs, website activity, device and browser information and approximate location with LinkedIn, Google and Meta so they can serve and measure our ads, as described in Section 5. We also upload hashed email addresses and limited business contact details for matched audiences. Under the California Consumer Privacy Act this is “sharing” for cross-context behavioral advertising, and under several other state laws it may be treated as a “sale” even though no money changes hands. You can opt out at any time — see Sections 5 and 12.
Service providers. We use vendors to run our business, and they process personal information on our instructions only. These include Salesforce (CRM and marketing automation), Google (analytics and tag management), Cloudflare (site delivery and security), our website host, our email and productivity provider, our payment processor, our accounting provider, and Udemy for our self-paced course.
Professional advisers. Our lawyers, accountants and insurers, where they need it to advise us.
Legal and safety. Where required by law, court order or valid request from a public authority, or where we need to establish, exercise or defend legal claims, or protect the rights, property or safety of Gabriel Sales, our clients or others.
Business transfer. If Gabriel Sales is involved in a merger, acquisition, financing or sale of assets, personal information may transfer as part of that transaction. We will notify you and this policy continues to apply until replaced.
With your direction. If you ask us to share something with a third party, we will.
We do not rent or trade our contact database for anyone else’s marketing.
8. International Transfers
We are based in the United States and our service providers and advertising platforms are primarily in the United States, so if you are in the EEA or the UK your personal information will be transferred to and processed in the United States.
Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with any additional safeguards required, or on another lawful transfer mechanism. Several of our advertising and analytics providers also participate in the EU-US Data Privacy Framework. You can request a copy of the relevant safeguards using the contact details in Section 16.
9. How Long We Keep Information
We keep personal information only as long as we need it, then delete or anonymize it.
Enquiry and prospect records are kept while there is an active or reasonably foreseeable business relationship, and reviewed periodically. Marketing subscribers are kept until they unsubscribe or become inactive, after which we suppress or delete the record. Client records are kept for the engagement and for seven years afterwards to meet contractual, tax and professional obligations. Website analytics data is kept in identifiable form for 26 months. Advertising audiences and cookie-based identifiers are kept for 24 months and refreshed, and uploaded matched-audience lists are deleted or refreshed at least every 90 days. Job applications are kept for 12 months unless you ask us to keep them longer.
If you unsubscribe, opt out of advertising or ask us to delete your data, we keep a minimal suppression record — usually a hashed email address — so we can honor your request and avoid contacting or targeting you again.
10. How We Protect Information
We take reasonable and appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls limiting data to those who need it, multi-factor authentication on our core systems, vendor review, and internal policies governing how our team handles data. Email addresses sent to advertising platforms are hashed before transmission.
No method of transmission or storage is completely secure and we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authorities as the law requires.
11. Your Rights if You Are in the EEA or the UK
You have the right to be told what personal information we hold about you and to receive a copy; to have inaccurate information corrected; to have your information deleted in certain circumstances; to restrict how we use it in certain circumstances; to receive information you gave us in a portable, machine-readable format; to object to processing based on our legitimate interests, and to object to direct marketing at any time, which we will always honor; and to withdraw consent where we rely on it, including consent to advertising and analytics cookies.
You also have the right to lodge a complaint with your local supervisory authority. In the UK that is the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to address your concern first.
We respond within one month, and will tell you if we need longer because a request is complex. We may need to verify your identity first.
12. Your Rights if You Are in California
The California Consumer Privacy Act, as amended by the CPRA, gives California residents specific rights.
You have the right to know what categories of personal information we collect, the sources, the purposes, and who we disclose it to; the right to a copy of the specific pieces we hold; the right to correct inaccurate information; the right to deletion, subject to legal exceptions; the right to opt out of the sale or sharing of your personal information; the right to limit our use of sensitive personal information; and the right not to be discriminated against for exercising any of these rights.
Categories we collect. In the twelve months before the date of this policy we have collected identifiers including name, business email, phone number, IP address and cookie identifiers; commercial information such as services enquired about or purchased; internet and network activity including pages viewed, ad interactions and email engagement; professional and employment information such as employer and job title; approximate geolocation inferred from IP address; and audio, electronic or written records of correspondence and meetings. We collect these from you directly, automatically as you use our site, from advertising and analytics platforms, and occasionally from public business sources and referrals.
Sharing for cross-context behavioral advertising. We share identifiers, internet activity and approximate location with LinkedIn, Google and Meta for cross-context behavioral advertising, as described in Sections 5 and 7. We also disclose these categories to the service providers listed in Section 7 for the business purposes in Section 6.
We do not sell personal information for monetary consideration. Because “sale” and “sharing” are defined broadly, we treat our advertising activity as sharing and honor opt-out requests for all of it.
We do not use or disclose sensitive personal information for purposes that would trigger the right to limit. We do not knowingly sell or share the personal information of anyone under 16.
How to opt out of sale and sharing. Email us at [email protected] and tell us you are opting out. We will confirm when it is done. You can also enable Global Privacy Control in your browser, which we treat as a valid opt-out request and apply automatically. You may use an authorized agent. We do not require an account to make a request, and we will verify a request against the information we hold before acting on it. We will respond within 45 days, and will tell you if we need the permitted extension.
13. Your Rights in Other US States
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey and other states with comprehensive privacy laws have rights that generally include access, correction, deletion, portability, and the right to opt out of targeted advertising, the sale of personal information, and certain profiling. Several of these states also give you a right to appeal if we decline a request; if we do, we will tell you how to appeal and respond within the time the law allows.
Where required, we recognize universal opt-out mechanisms including Global Privacy Control.
We extend the rights described in Sections 11 and 12 to all US residents regardless of state. Use the contact details in Section 16 and tell us where you live.
14. Client Data — Our Role as a Service Provider
This section matters if you dealt with one of our clients rather than with us.
Much of our work involves implementing, optimizing and managing Salesforce, Marketing Cloud Account Engagement and related systems inside a client’s own environment. That client’s customer and prospect data lives in their systems, under their control, and we access it only to do the work they engage us to do.
In that work Gabriel Sales acts as a processor under the GDPR and a service provider under the CCPA. Our client is the controller or business. We process personal information only on their documented instructions. We do not use it for our own purposes, we never add it to our own marketing database, we never include it in our own advertising audiences, we do not sell or share it, we do not combine it with data from other clients, and we require the same of any subprocessor. Our engagements are governed by a written agreement covering confidentiality, security and data protection, and we will enter a Data Processing Addendum where one is required.
If you want to know how a specific company handles your personal information, or to exercise rights over data held in their systems, contact that company directly. If you contact us about data we hold on a client’s behalf, we will refer you to them and assist them in responding as our agreement requires.
15. Other Things You Should Know
Children. Our services are sold to businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16, and we do not target advertising to children. If you believe a child has given us information, contact us and we will delete it.
Third-party sites and platforms. Our site and content link to other websites including LinkedIn, YouTube, Udemy and our clients’ sites. When you interact with our ads on LinkedIn, Google or Meta, those platforms process your data under their own privacy policies, which we do not control. Read their policies and use their ad settings to control what they show you.
Changes to this policy. We may update this policy from time to time. We will change the “Last updated” date at the top, and if the change is significant — for example if we add a new advertising platform or change how we share information — we will tell you by email or a notice on the site.
16. How to Contact Us
For any privacy question, or to exercise any right in this policy, contact us at:
7449 Crannell Drive, Boulder, CO 80303, United States
(720) 279-7511
Email [email protected] for anything on this list: to opt out of targeted advertising, to request a copy of your data, to have it corrected or deleted, or to ask a question about this policy. To change cookie preferences in the EEA or UK, use the “Cookie Settings” link in our footer. To unsubscribe from marketing email, use the link at the bottom of any message or email us. We act on these promptly.