Last updated and effective: November 4, 2026
This Privacy Policy explains how NBBN LLC, a North Carolina limited liability company, doing business as Golden Business Path (“Golden Business Path”, “we”, “us” or “our”), collects, uses and protects personal information when you visit goldenbusinesspath.com (the “Site”), book a call with us, or work with us on our fractional COO services for business owners and leadership teams (the “Services”). By using the Site, you agree to the practices described here.
1. Information We Collect
- Information you give us: when you book an Ops Stability Call or email us, you may give us your name, email address, phone number, company name, role, and anything you tell us about your business and what you need help with.
- Information from scheduling: bookings are made through Google Calendar appointment scheduling, which Google LLC provides to us through our Google Workspace account. The details you enter on the booking page go to our calendar so we can hold the call.
- Information collected automatically: when you visit the Site, we and our service providers may collect your IP address, browser and device type, pages visited, referring site, and the date and time of your visit, through server logs and security tools. If you agree to analytics cookies, Google Analytics also collects how you use the Site, as described in section 5.
- Information from client engagements: if you become a client, we may receive business information such as organizational charts, role descriptions, process documents, operating metrics and financial or job-level data, and information about your employees or contractors that you choose to share with us so we can deliver the Services.
The Site does not have a contact form, account login or online checkout.
2. How We Use Information
- To schedule, prepare for and hold your Ops Stability Call
- To respond to your messages and follow up about the Services you asked about
- To deliver the Services you engage us for, including assessments, planning sessions and ongoing operations support
- To operate, secure, maintain and improve the Site
- To understand, in aggregate, how visitors use the Site (only if you agree to analytics cookies)
- To comply with legal obligations and enforce our agreements
We do not send marketing emails unless you ask to receive them, and you can stop them at any time.
3. Booking Through Google Calendar
The “Book your Ops Stability Call” buttons on the Site take you to a Google Calendar appointment booking page (calendar.google.com) that we run through our Google Workspace account. Google LLC provides this scheduling service to us as a service provider. The details you enter there go to our calendar so we can hold the call. Google may send you confirmation and reminder messages and may use its own cookies on that page, as described in Google’s privacy policy (https://policies.google.com/privacy).
4. Client Information
Business information that clients share with us during an engagement, including information about their employees, contractors and customers, is used only to provide the Services, is handled under the confidentiality terms of our written engagement agreement, and is not sold. Questions about that information should first go to the business you work for or dealt with.
5. Analytics and Cookies
Essential cookie. The Site sets one essential cookie for visitors, wpconsent_preferences (a first-party cookie set by WPConsent, our consent tool), which remembers your cookie choice for 180 days. People who log in to manage the Site also get WordPress login, security and caching cookies. The Site doesn’t need any other cookies to work.
Analytics only with your consent. Google Analytics runs only after you consent. It doesn’t load and sets no cookies until you choose “Accept” in our cookie banner. If you choose “Reject”, or make no choice, it never runs. We use Google Consent Mode v2 in its basic setup, so Google Analytics doesn’t load and nothing is sent to Google until you choose “Accept”.
What Google Analytics measures. With your consent, we use Google Analytics 4, a service of Google LLC, to understand how visitors use the Site: pages viewed, time on page, links clicked, general location (country or region) derived from your IP address, and basic device and browser type. Google signals, advertising features, granular location and device data collection, and data sharing with other Google products and services are turned off, so Google processes this data only as our service provider. We don’t use Google Analytics to identify you personally.
Cookies used on the Site:
| Cookie | Set by | Purpose | How long | Needs your OK? |
|---|---|---|---|---|
wpconsent_preferences | WPConsent, our consent tool (first party) | Remembers your cookie choice | 180 days | No (essential) |
_ga | Google Analytics, first party | Tells visitors apart | Up to 2 years | Yes |
_ga_<ID> | Google Analytics, first party | Keeps the state of your visit | Up to 2 years | Yes |
WordPress, Wordfence and LiteSpeed Cache cookies (wordpress_*, wp-settings-*, wfwaf-authcookie-*, _lscache_vary) | the Site, first party | Login, security and caching for people who manage the Site | Varies | No (essential; site managers only) |
Your browser may delete cookies sooner if you don’t return; for example, Chrome after 400 days and Safari after 7 days.
How long Google keeps analytics data. Google Analytics deletes user-level and event-level data after 14 months. Summary reports that don’t identify individual visitors may be kept longer.
Withdrawing consent. You can withdraw your consent at any time through the “Cookie Preferences” link at the bottom of every page or the gear icon. After you withdraw, Google Analytics stops running for your browser. You can also delete its cookies in your browser settings, or install Google’s Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout). If your browser sends a Global Privacy Control signal, we treat it as a “Reject” (see section 9).
How Google uses this information. Google explains this on its page “How Google uses information from sites or apps that use our services”: https://policies.google.com/technologies/partner-sites.
We do not use advertising cookies. We don’t sell information collected through cookies or use it for advertising.
6. Security
The Site uses SSL/TLS encryption and is hosted by Hostinger. We use security tools, including the Wordfence security plugin, which logs IP addresses, login attempts and request details to protect the Site from attacks and may check IP addresses against its provider’s threat lists. We take reasonable administrative, technical and physical measures to protect personal information, but no method of transmission or storage is completely secure.
7. How We Share Information
We don’t sell your personal information or share it for advertising. We share it only:
- with the service providers who help us run the Site and our business, who may use it only to provide their services to us:
- Hostinger, which hosts the Site and its backups;
- Google Workspace (Google LLC), which provides our business email and call scheduling through Google Calendar appointment scheduling;
- Wordfence (Defiant, Inc.), which provides Site security;
- Google LLC (Google Analytics), which provides Site usage statistics as our service provider, only if you agree to analytics cookies;
- with your consent or at your direction;
- when required by law, legal process, or to protect the rights, property or safety of our clients, us or others; and
- as part of a merger, acquisition, financing or sale of business assets, subject to this Policy.
8. Data Retention
- Booking details and related correspondence: up to 24 months after our last contact with you, unless you become a client.
- Client engagement information: for the length of the engagement plus up to 3 years, or longer if required by law or our agreement.
- Security and server logs: up to 90 days.
- Site backups: on a rolling basis, normally up to 6 weeks; our hosting provider follows its own schedule.
- Google Analytics user-level and event-level data: 14 months, then deleted by Google; summary reports that don’t identify individual visitors may be kept longer (cookie lifetimes are in section 5).
When information is no longer needed, we delete or de-identify it.
9. Your Choices and Rights
You may ask us to access, correct or delete the personal information we hold about you, or to stop contacting you, by emailing us at the email address below. Depending on where you live, you may have additional rights under state privacy laws, such as the right to know what we collect, to obtain a copy, to correct or delete it, and to opt out of sale, sharing or targeted advertising. We don’t sell your personal information or share it for advertising. We will respond to verified requests as required by applicable law and will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision.
Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of any sale or sharing of personal information for that browser and as a “Reject” of analytics cookies: we don’t show the cookie banner, Google Analytics stays off, and you’ll see a note that your signal is honored. You can still turn analytics on yourself in Cookie settings. Do Not Track: there is no common standard for Do Not Track signals, so the Site does not respond to them; you can use your browser’s cookie controls described in section 5.
10. Notice to California Residents
This section explains our practices for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). It adds to the rest of this Policy.
Personal information we collect, and why. Analytics data is collected only after Google Analytics is switched on for the Site, and only with your consent.
| Category (CCPA) | Examples | Source | Business purpose | Disclosed to (service providers) | How long we keep it |
|---|---|---|---|---|---|
| Identifiers | name, email address, phone number, IP address, and online identifiers such as analytics cookie IDs (with your consent) | you; Google Workspace (Google LLC); your browser | scheduling and holding calls, replying to you, delivering the Services, Site security | Hostinger; Google Workspace (Google LLC); Wordfence (Defiant, Inc.); Google LLC (Google Analytics, with your consent) | booking and correspondence: up to 24 months after last contact; client records: the engagement plus up to 3 years; security logs: up to 90 days; Google Analytics user- and event-level data: 14 months |
| Professional or employment-related information | company name, role, and business information you share | you; client engagements | preparing for calls and delivering the Services | Hostinger; Google Workspace (Google LLC) | booking and correspondence: up to 24 months after last contact; client records: the engagement plus up to 3 years |
| Internet or other electronic network activity | pages viewed, referring site, browser and device, security logs; analytics data only with your consent | your browser | Site operation and security; aggregate analytics (with your consent) | Hostinger; Wordfence (Defiant, Inc.); Google LLC (Google Analytics, with your consent) | security logs: up to 90 days; backups: normally up to 6 weeks (our hosting provider follows its own schedule); Google Analytics user- and event-level data: 14 months |
| Approximate geolocation | country or region derived from your IP address | your browser | aggregate analytics (with your consent) | Google LLC (Google Analytics, with your consent) | Google Analytics user- and event-level data: 14 months |
| Inferences | none | — | We do not create profiles about you | — | — |
- Sensitive personal information: we don’t ask for sensitive personal information. If a client shares some during an engagement, we use it only to deliver the Services.
- Sale and sharing: We don’t sell your personal information or share it for advertising. We have not sold personal information or shared it for cross-context behavioral advertising (ads based on your activity across other sites) in the last 12 months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. Because we don’t sell or share, there is nothing to opt out of, but you can still use our “Do Not Sell or Share My Personal Information” page, and we honor Global Privacy Control as described in section 9.
- Your rights: you can ask us to tell you what personal information we have collected, used and disclosed about you (right to know); to give you a copy; to delete it; and to correct it. You also have the right not to be discriminated against for using these rights. The right to limit the use of sensitive personal information doesn’t apply, because we don’t use it for purposes that trigger that right.
- How to make a request: email us at admin@gbponly.com. We will confirm receipt within 10 business days and respond within 45 days (we may extend once by another 45 days and will tell you if we do). To protect you, we verify requests by matching information you give us with information we already hold, such as the email address used to book a call. An authorized agent may make a request for you with your signed permission, and we may ask you to confirm your identity directly.
- Contact: questions about this section go to the email address in section 14 (Contact Us).
11. Links to Other Sites
The Site links to third-party sites and services, including Google Calendar and LinkedIn. We are not responsible for their content or privacy practices. Please review their policies.
12. Children
The Site and Services are intended for businesses and adults and are not directed to children under 13 (or under 16 where state law sets a higher age). We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top shows when it was last changed. If we make material changes, we will post the updated Policy on this page.
14. Contact Us
NBBN LLC, doing business as Golden Business Path
Email: admin@gbponly.com