Legal
Privacy Policy
Last updated: 14 May 2026
1. Who we are
fjordGTM (formerly Revenueflows.io) is a B2B GTM automation agency based in Oslo, Norway. We provide signal-based lead generation, Clay enrichment, and outbound execution services to B2B companies in Norway and the Nordics.
Controller contact: endre@fjordgtm.com
2. Data we collect
When you interact with fjordgtm.com, we may collect:
— Contact information (name, email, company) submitted through our lead request form
— Website usage data via Google Analytics 4 (anonymised IP, pages visited, session duration)
— Technical data (browser type, device type, referring URL) collected automatically
We do not sell personal data to third parties. We do not use cookies for advertising targeting.
3. Lawful basis for processing
We process personal data under the following lawful bases (GDPR Article 6):
— Contractual necessity (Art. 6(1)(b)): processing necessary to deliver our services
— Legitimate interests (Art. 6(1)(f)): analytics to improve the site, B2B outreach to organisations with a professional interest in GTM services
— Consent (Art. 6(1)(a)): where you have explicitly opted in (e.g., newsletter)
For B2B prospecting activities, we rely on legitimate interests and conduct a Legitimate Interests Assessment (LIA) for each client engagement, consistent with Datatilsynet guidance.
4. Third-party services
We use the following third-party processors:
— Google Analytics 4 (Google LLC): website analytics under a Data Processing Agreement. Data may be transferred to the US under Standard Contractual Clauses.
— HubSpot / Pipedrive (where applicable): CRM for managing client and prospect data
— Instantly.ai: email sequence execution for client outreach campaigns
— Clay Technologies: data enrichment for B2B prospecting workflows
All processors are bound by Data Processing Agreements and are required to maintain appropriate technical and organisational measures.
5. Data retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected:
— Website enquiries: 24 months from last contact
— Client data: for the duration of the engagement plus 36 months
— Analytics data: 14 months (Google Analytics default)
You may request deletion at any time by contacting endre@fjordgtm.com.
6. Your rights
Under GDPR, you have the right to:
— Access the personal data we hold about you
— Rectify inaccurate data
— Request erasure ("right to be forgotten")
— Restrict or object to processing
— Data portability
— Withdraw consent at any time (where processing is based on consent)
— Lodge a complaint with Datatilsynet (datatilsynet.no)
To exercise any right, contact: endre@fjordgtm.com. We will respond within 30 days.
7. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Access to personal data is restricted to personnel who need it to perform their role.
8. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of the site following a material change constitutes acceptance of the updated policy.