Privacy Policy

Effective on June 29, 2025 (last updated on September 21, 2026)

Overview

At Good Source Consulting LLC (“we,” “our,” or “us”), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website [www.goodsourceconsulting.com] (“Site”).

We comply with relevant data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable.

Who we are

Data Controller: Good Source Consulting LLC
Email: info[at]goodsourceconsulting[dot]com
Address available upon request.

We are responsible for the processing of your personal data collected through this Site.

Information we collect

We collect personal and non-personal data when you use our Site.

Information You Voluntarily Provide:

• Contact Forms: Name, email, and message content
• Newsletter Signups: Email address and preferences
• Brand Nomination: Brand referred, email address, and message content
• Direct Communication: Any data you send via email or forms

Automatically Collected Information:

• IP address, browser type, device type
• Pages visited, time spent on pages, click-throughs
• Referring websites or links

Brand nominations:

Our Site includes a form that lets you nominate a beauty or personal care brand you think could use our help. When you do, we collect the brand name, your reason for nominating it, and your email address. We do not collect contact details for anyone at the nominated brand through this form.

We use nominations to decide which brands to research, write about, or approach. A nomination is not shared publicly with your name attached, and we do not tell a brand who nominated it unless you have given us permission to do so. If you provide permission to do so, the brand will only be notified that a customer referred us to them and your personal contact information is never shared.

We do not add people who submit a nomination to our marketing email list. You are added only if you separately opt in.

Legal Bases for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: When you opt in to communications or non-essential cookies
• Legitimate Interests: For analytics, improving the Site, and responding to inquiries
• Contractual Necessity: When you request services or contact us
• Legal Obligation: To comply with legal requirements

Cookies and Tracking Technologies

We use cookies to enhance your experience, analyze traffic, and personalize content.

Cookie Consent with YesCookies: When you first visit, a banner (powered by YesCookies) allows you to accept or reject specific cookie categories. Essential cookies are always active. You may adjust or withdraw consent at any time by clicking “Customise” in the Cookie Settings.

Third-party cookies include Google Analytics and Mailer Lite. We use Google Tag Manager (GTM) to manage and deploy tracking scripts on our Site. GTM itself does not collect personal data, but the tags it fires (such as Google Analytics) may.

You can manage your browser’s cookie settings or learn more at allaboutcookies.org.

How we use your information

We use your data to:

• Respond to inquiries
• Deliver requested services or information
• Improve our website performance and content
• Analyze traffic via analytics tools
• Manage marketing campaigns (only with your consent)
• Ensure security and detect misuse

Who we share your data with

We use a small number of third-party providers to run our business. Each processes data only as needed to provide their service to us, under contractual confidentiality obligations. We do not sell or rent your data.

Analytics and tag management — we use Google Analytics to understand how visitors use our Site, and Google Tag Manager to deploy tracking scripts. No personally identifiable data is shared with these tools. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout. Privacy: https://policies.google.com/privacy

Email marketing — we use MailerLite to send our newsletter and to store subscriber names and email addresses. You can unsubscribe at any time using the link in any email we send. Privacy: https://www.mailerlite.com/legal/privacy-policy

Customer relationship management — we use HubSpot to store contact details and correspondence for prospective and current clients. Privacy:
https://legal.hubspot.com/privacy-policy

Cloud storage — we use Google Drive and Google Sheets to store business records, including brand nominations submitted through our site. Privacy:
https://policies.google.com/privacy

Cookie consent — we use YesCookies to manage cookie consent and store your preferences.

Website hosting and email delivery — our site and our email are hosted by Hostinger. Messages you send us, and our replies, pass through their mail servers. Privacy: https://www.hostinger.com/privacy-policy

We may also disclose data to professional advisers, or to legal authorities where required by law.

How we share your information

We do not sell or rent your data. We may share data only with:

• Service providers who support our operations (e.g., email, hosting, analytics)
• Legal authorities if required by law
• Third-party tools listed above, under strict confidentiality agreements

International data transfers

Some of our service providers (e.g., Google) may transfer and store your data outside the European Economic Area (EEA), including in the United States. When this occurs, we ensure safeguards such as:

• Standard Contractual Clauses (SCCs)
• Service provider certifications or Data Processing Agreements (DPAs)

Data retention

We retain your data only as long as necessary:

• Contact form submissions: retained while we are in contact with you or your inquiry remains open, and reviewed periodically for deletion
• CRM data: 3-7 years after the end of our engagement, to meet tax, accounting, and contractual record-keeping obligations
• Website analytics data: 14 months
• Newsletter subscriptions: until you unsubscribe
• Brand nominations: retained while they remain useful for research, and reviewed periodically for deletion
• Business communications: as long as required to fulfill the purpose of communications, or as required by law

Your rights

If you are in the EU/UK, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion (right to be forgotten)
• Restrict or object to processing
• Port your data to another provider
• Withdraw consent at any time (without affecting prior processing)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion of your personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To exercise these rights, email info[at]goodsourceconsulting[dot]com.

Children’s privacy

Our Site is not intended for children under 16. We do not knowingly collect personal data from anyone under this age. If you believe we have done so, please contact us immediately.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, tools, or legal requirements. The “Last Updated” date will reflect any revisions. We recommend reviewing this page periodically.

Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact info[at]goodsourceconsulting[dot]com.