Privacy Policy
Effective Date: August 10, 2026 | Last Updated: October 26, 2026
B2B Catalyst ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at b2bcatalyst.com (the "Site") or engage with our services.
What changed on October 26, 2026: visitors in the United States no longer see a cookie banner. For them, analytics and advertising are on from the first visit and can be switched off at any time from the footer. A Global Privacy Control signal now switches advertising off automatically, wherever you are. Visitors everywhere else are still asked before any analytics or advertising tool runs. We also added PostHog, an analytics tool, to the list in Section 5.
What changed on August 19, 2026: we now name the identifiers each tool stores on your device and how long they last (Section 5), and we corrected what this page says Cloudflare receives before you make a cookie choice — it is more than we previously described.
What changed on August 17, 2026: we now explain that consenting to advertising may count as a “sale” or “sharing” of personal information under California law (Section 2), added a matching opt-out right (Section 8), and added a Do Not Sell or Share My Personal Information control to the footer of every page.
What changed on August 14, 2026: we now use analytics and advertising technologies on the Site, including a LinkedIn retargeting pixel. A previous version of this policy said we did not. Section 5 describes exactly what runs and how to turn it off.
1. Information We Collect
Information you provide directly: contact information (name, email, phone, company, job title) when you book a diagnostic call through Calendly, email us, or otherwise communicate with us — the Site itself carries no forms. Engagement data you share during consulting engagements, including call recordings, CRM exports, email data, and pipeline information.
Information collected automatically: pages visited, time on page, referring URL, approximate location derived from IP address, browser type, operating system, and device type. This is collected through the technologies listed in Section 5. If you are in the United States, they run from the first page you view, and you can switch them off at any time (Section 5). Everywhere else, none of them run until you have made a cookie choice, apart from the strictly necessary one that serves the Site and stores the choice itself — it is marked “Always on” in that table.
Outside the United States, before you choose, no analytics or advertising provider is contacted and none of their cookies are set. The only thing stored is the tag manager’s own cf_zaraz_client cookie, listed in Section 5.
Cloudflare itself receives more than the request. Before you choose, the tag manager reports to Cloudflare the address and title of the page, the page you came from, your screen and window size, your colour depth and time zone, and any cookies already set for this Site — alongside your IP address and what your browser tells every web server it connects to. That is Cloudflare acting for us as the Site’s infrastructure, not a third-party tool being loaded.
Advertising identifiers. While the Advertising purpose is on, information about your visit is shared with the advertising platforms listed in Section 5, so that we can measure our advertising and show follow-up ads to people who have visited the Site. That is retargeting — an ad you see elsewhere because of what you did here. What each platform then does with that information is governed by its own privacy policy, linked in Section 6.
2. How We Use Your Information
We use collected information to deliver our services (GTM diagnostics, constraint analysis, consulting), communicate with you, understand which marketing works, improve the Site, and comply with legal obligations.
We do not exchange your personal information for monetary consideration, use engagement data for any purpose other than delivering services to you, or share confidential business data with other clients.
Advertising and state privacy law. While the Advertising purpose is on — by default in the United States, or because you agreed to it elsewhere — the technologies listed in Section 5 share your browsing activity with the advertising platforms named there. Under California's CPRA and several other state privacy laws, that may constitute a “sale” or “sharing” of personal information even though no money changes hands. If your browser sends a Global Privacy Control signal, we switch it off for you before any page loads its tools. Otherwise, to stop it, use the Do Not Sell or Share My Personal Information control in the footer of any page: it switches the Advertising purpose off immediately, then shows you the banner so you can see the setting and change it back if you want to. Check the banner shows Advertising switched off; if it does not, switch it off there, and tell us at privacy@b2bcatalyst.com. The Cookie preferences control opens the same banner without changing anything, if you would rather set it yourself.
3. How We Share Your Information
We share information with the service providers named in Section 5 and Section 6, each acting under its own terms; where required by law; in a business transfer such as a merger or acquisition; and otherwise only with your consent or, in the United States, under the defaults described in Section 5, which you can switch off at any time.
While the Advertising purpose is on, we also share browsing activity with the advertising platforms in Section 5 for the purpose described in Section 2, which may constitute a “sale” or “sharing” under some state privacy laws. Section 8 explains how to opt out.
These are US-based companies that run infrastructure in many countries, so your information may be processed in the United States and elsewhere. What each of them does with it is governed by its own privacy policy, linked in Section 6. We do not share engagement data with anyone outside our team without your explicit written consent.
4. Data Security
We serve the Site over HTTPS, restrict access to the systems that hold client data, and are bound by confidentiality obligations covering engagement data. No method of transmission or storage is completely secure, but we work to protect your information.
5. Cookies and Tracking Technologies
We use advertising and retargeting technology on this Site. The table below lists everything that sets a cookie or identifier. If it is not in this table, it is not running on the Site.
| Provider | What it does | Consent purpose | Consent |
|---|---|---|---|
| Cloudflare | Serves and protects the Site. Stores your cookie choice in a first-party cookie named zaraz-consent, and sets a first-party cookie named cf_zaraz_client that the tag manager itself uses; both last up to 365 days. cf_zaraz_client is set on your first page view, before any choice. zaraz-consent is set when you choose or, in the United States, on your first visit, when it records the defaults. | None — strictly necessary | Always on |
| Google Analytics 4 | Counts visits and records which pages you view, how long you spend on them, and how you arrived at the Site. Stores an identifier on your device for up to 365 days so it can recognise a return visit. | Analytics | On by default in the US; elsewhere requires consent |
| HubSpot | Records the pages you view and stores a visitor identifier on your device for up to 365 days, so HubSpot can recognise a return visit. | Analytics | On by default in the US; elsewhere requires consent |
| PostHog | Records the pages you view and how you interact with them, such as clicks and scrolling. Stores an identifier in a first-party cookie for up to 365 days, and a copy in your browser’s local storage that stays until you clear it, so it can recognise a return visit. It does not record your screen. | Analytics | On by default in the US; elsewhere requires consent |
| LinkedIn Insight Tag | Tells LinkedIn that you visited, so we can show our ads on LinkedIn to people who have been to the Site and to report how our ads perform. | Advertising | On by default in the US; elsewhere requires consent |
Zaraz runs some of this work on Cloudflare's servers, but not all of it. With Advertising on, your browser connects directly to LinkedIn, and with Analytics on it connects directly to HubSpot and PostHog. Those requests carry the address of the page you are on, an identifier for our account, and any cookies that platform has already set in your browser — which is how a retargeting platform recognises you. HubSpot's request also carries a visitor identifier and the timestamps of your previous visits in the address itself. Assume that any tool that is switched on learns that you visited.
How to control this. Outside the United States, analytics and advertising tools load only after you consent: the first time you visit, a banner asks you to choose. In the United States there is no banner — both are on from your first visit (Advertising stays off if your browser sends Global Privacy Control), and you can switch either off at any time with the controls below. “In the United States” means your connection appears to come from one of the 50 states or the District of Columbia, as Cloudflare reads it from your IP address; US territories are shown the banner, and so is anyone whose location cannot be determined. The defaults are stored on your device like any other choice, so if your first visit came through a US connection (a VPN, for example) and you are elsewhere, use Cookie preferences below to choose.
You can change or withdraw your choice at any time from the footer of any page. Cookie preferences reopens the banner without changing anything. Do Not Sell or Share My Personal Information switches the Advertising purpose off first, then shows you the banner so you can see that it happened. Check that it shows Advertising switched off; if it does not, switch it off there and tell us at privacy@b2bcatalyst.com. You can also block or delete cookies through your browser settings, but in the United States deleting them also deletes your choice, so the defaults apply again on your next visit; use the controls above again, or Global Privacy Control, to keep Advertising off. Withdrawing consent stops those tools running on the pages you visit afterwards; it does not undo data already collected, which you can ask us about under Section 8.
We do not respond to browser “Do Not Track” signals. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale or sharing: the Advertising purpose is switched off before any page loads its tools, and kept off on every page you load while the signal is on, even if you switched it on in the banner. It does not switch Analytics off.
6. Third-Party Services
Booking a call takes you to Calendly, a separate site with its own privacy policy. Calendly does not run any code on this Site — the button is an ordinary link, and nothing is shared with Calendly unless you follow it.
The providers in Section 5 each handle data under their own policies: Cloudflare, Google, HubSpot, PostHog, and LinkedIn.
7. Data Retention
Contact information is retained for the duration of an active business relationship. Engagement data is retained for the engagement plus twelve months unless otherwise agreed, and you may request earlier deletion.
Analytics and advertising data are held by the providers listed in Section 5, under each provider's own retention rules.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your information, opt out of marketing, request data portability, and object to processing. Contact us at privacy@b2bcatalyst.com to exercise any of these. We will not discriminate against you for doing so.
If you are in California. You have the right to opt out of the “sale” or “sharing” of your personal information described in Section 2. To exercise it, use the Do Not Sell or Share My Personal Information control in the footer of any page. It switches the Advertising purpose off immediately and then shows you the banner so you can confirm the setting. If your browser sends a Global Privacy Control signal, this happens automatically. Confirming matters: if the banner still shows Advertising on, switch it off there and let us know. The Cookie preferences control opens the same banner if you would rather change it yourself.
Because your choice is stored only in your own browser, we cannot change it for you from our side — the control above is the mechanism. If it does not work for you, contact us at privacy@b2bcatalyst.com and we will help. We will not discriminate against you for opting out.
9. Children's Privacy
The Site and our services are not directed to individuals under 18, and we do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Policy from time to time. Changes are posted on this page with an updated date. Where a change materially expands how we collect or use information — as this version does — we describe it in plain language at the top of the page rather than only changing the date.
11. Contact Us
For questions about this Policy or to exercise your data rights: B2B Catalyst, email privacy@b2bcatalyst.com