Groundbreaking is Obsolete

Privacy Policy

Last updated: 3 July 2026

1. Who we are

This website (the “Site”) is operated by CMB2B Ltd (“we”, “us”, “our”) to promote the book Groundbreaking is Obsolete, published by 10-10-10 Publishing (Markham, ON, Canada). For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we are the data controller of the personal data described below.

To contact us about privacy, email privacy@groundbreakingisobsolete.com.

2. Personal data we collect

  • Lead / contact details you submit via our “Unlock bonuses” form: first name, last name, email address, and (optionally) a short description of your situation.
  • Session data: a strictly necessary cookie that remembers you have unlocked the reader-bonuses area on this device.
  • Analytics data (only with your consent): device, browser, approximate location (country/region), pages viewed, and interactions with call-to-action buttons, collected via Google Analytics 4 and Google Tag Manager. IP addresses are anonymised.

3. Why we use it and our legal basis

  • To respond to your request (send pre-launch updates, deliver bonuses) — legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit a form.
  • To operate the Site securely and remember your bonus access — legal basis: our legitimate interests in running the Site (Art. 6(1)(f) GDPR) and, where required, strictly necessary functionality.
  • To measure how the Site is used and improve it — legal basis: your consent (Art. 6(1)(a) GDPR). Analytics cookies do not load until you accept them.

4. Who we share it with (processors)

  • RocketFuel (a white-labelled instance of HighLevel / LeadConnector) — receives your lead details to manage the mailing list and deliver bonuses. Data may be processed in the United States under appropriate safeguards (e.g. Standard Contractual Clauses).
  • Google Ireland Ltd. (Google Analytics 4, Google Tag Manager) — processes analytics data on our behalf when you grant consent.
  • Our hosting provider — serves the Site and processes server logs necessary to deliver it.

We do not sell your personal data and we do not use it for automated decision-making that has legal or similarly significant effects.

5. International transfers

Some of the processors above are located outside the UK / EEA. Where that is the case, transfers are protected by an adequacy decision or by Standard Contractual Clauses together with appropriate supplementary measures.

6. How long we keep it

  • Lead details are kept until you unsubscribe or ask us to delete them, plus a short administrative period.
  • Analytics data is retained for up to 14 months.
  • The bonus-access session cookie expires after 30 days or when you clear cookies.

7. Your rights

If you are in the UK, EEA or a jurisdiction with equivalent rights, you can ask us to: access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw a previously given consent at any time (without affecting the lawfulness of processing before withdrawal). Every email we send includes an unsubscribe link. You can also at any time.

You have the right to lodge a complaint with your local data protection authority, e.g. the UK Information Commissioner’s Office (ICO) or the data protection authority in your EU member state.

8. Security

We use industry-standard measures (HTTPS in transit, access controls, reputable processors) to protect your data. No method of transmission over the internet is 100% secure.

9. Children

The Site is not directed at children under 16 and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new “Last updated” date.