Home / Legal

Privacy Policy

Last updated: 19 October 2026 Prosperato Ltd, trading as Rogue GTM privacy@roguegtm.com

This Privacy Policy explains how Prosperato Ltd, a company incorporated in Mauritius and trading as “Rogue GTM” (“Rogue GTM”, “we”, “us”, “our”), collects, uses and protects your personal data when you visit roguegtm.com (the “Site”), contact us, book a call, or otherwise engage with us.

01Who we are

Prosperato Ltd is the data controller responsible for your personal data.

Registered office
Prosperato Ltd, Flacq, Mauritius
Privacy contact

02Scope of this policy

This policy covers personal data we process as a controller: visitors to the Site, people who contact us or book a call, and business contacts we may approach about our services. It does not cover personal data we process on behalf of a client under a separate services agreement — in that case the client is the controller and that processing is governed by our agreement and data processing terms with them.

03The personal data we collect

Data you give us

  • Contact form (via HubSpot): your name, business email, company, and the content of your message.
  • Booking a call (via Calendly): your name, email, selected time, and anything you add in the booking.
  • Correspondence: any information you include when you email or otherwise communicate with us.

Data collected automatically when you use the Site

  • Technical and usage data: IP address (truncated where supported), device and browser type, pages viewed, referring source, and approximate location — collected through cookies and similar technologies, including Google Analytics.
  • Advertising data: identifiers and engagement data used for advertising and retargeting, collected through the LinkedIn Insight Tag.

Business contact data we collect for marketing

As a B2B account-based marketing agency, we may collect business contact details (name, role, company, business email, and professional profile such as LinkedIn) from public sources and professional networks in order to offer relevant services. You can object to this at any time (see Your rights).

05Cookies and similar technologies

We use cookies and similar technologies in the categories below. Non-essential cookies (analytics and advertising) are set only after you consent through our cookie banner, and you can change or withdraw your choice at any time via the “Cookie settings” link in the footer or your browser settings. We honour recognised opt-out signals such as Global Privacy Control (GPC) where applicable.

Category Purpose Examples / providers
Strictly necessary Make the Site work (security, load balancing, your cookie choices). Always on. Site/AWS, consent tool
Analytics Understand how the Site is used so we can improve it. Google Analytics
Advertising Measure and deliver relevant advertising, including retargeting. LinkedIn Insight Tag
Functional (forms/booking) Enable the contact form and call booking. HubSpot, Calendly

06Who we share your data with

We share personal data with service providers who process it on our behalf, under contract and only as needed:

Provider Purpose Location
Amazon Web Services Site hosting (AWS Amplify) EU
HubSpot Contact form, CRM, communications US / EU
Calendly Call scheduling US
Google Website analytics US / global
LinkedIn (Microsoft) Advertising and retargeting US / global

We may also disclose data to professional advisers, to authorities where required by law, and to a buyer in connection with a business sale or reorganisation.

We do not sell your personal data for money. Because we use the LinkedIn Insight Tag for advertising, we may “share” personal information for cross-context behavioural advertising as those terms are defined under California law. You can opt out at any time — see Your rights.

07International data transfers

We are based in Mauritius and use service providers located outside Mauritius, the EEA and the UK, including in the United States. Where personal data is transferred across borders, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or a provider’s certification under the EU–US Data Privacy Framework — and we transfer data in accordance with the cross-border transfer conditions of the Mauritius Data Protection Act 2017. You can request details of the safeguards used.

08How long we keep your data

We keep personal data only as long as necessary for the purposes above, then delete or anonymise it. Enquiry and booking data is kept for the duration of our discussions and a reasonable period afterwards; customer records are kept for the life of the relationship and as required for legal and accounting purposes; analytics and advertising data is kept for the retention period configured in the relevant tool.

09How we protect your data

We use appropriate technical and organisational measures to protect personal data, including reputable hosting and tooling, access controls, and encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10Your rights

If you are in the EU, the UK, or Mauritius

You have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. You can also lodge a complaint with a supervisory authority — in Mauritius, the Data Protection Office; in the UK, the Information Commissioner’s Office (ICO); or your local EU data protection authority.

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, use, disclose and share; to delete it; to correct it; to opt out of the “sale” or “sharing” of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. We do not sell personal information for money, but our use of the LinkedIn Insight Tag may constitute “sharing” for cross-context behavioural advertising. To opt out, use the “Do Not Sell or Share My Personal Information” link in the footer or email us; we also honour the Global Privacy Control signal.

Other US states

If you live in a US state with its own privacy law (such as Virginia, Colorado, Connecticut, Utah or Texas), you may have similar rights, which you can exercise using the contact details below.

How to exercise your rights

Email us at privacy@roguegtm.com. We may need to verify your identity. We respond within the timeframes required by law (for example, one month under the GDPR and 45 days under the CCPA) and we do not charge for most requests.

11Children

The Site is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 16 (or under 13 in the United States). If you believe a child has provided us data, contact us and we will delete it.

12Other sites

The Site may link to third-party sites we do not control. This policy does not apply to them; please read their privacy policies.

13Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. Material changes will be made clear.

14Contact us

For any privacy question or to exercise your rights, contact Prosperato Ltd (trading as Rogue GTM), Flacq, Mauritius, at privacy@roguegtm.com.

↑ Back to top