Privacy Policy
Last updated: April 2026
That Works Co ("That Works", "we", "us", or "our") is committed to protecting your personal information. This policy explains what we collect, how we use it, and your rights in relation to it.
1. Who we are
That Works Co is a GTM consultancy operating in Australia. We design and implement go-to-market systems for B2B companies. You can reach us at LinkedIn or via the contact form on this website.
2. What we collect
We collect personal information only when you voluntarily provide it to us. This includes:
- Contact and enquiry data — name, email address, and phone number submitted through our booking or contact forms
- Newsletter subscriptions — email address when you subscribe to our newsletter
- Usage data — anonymised analytics about how you interact with our website, collected via Google Analytics 4 (including pages visited, session duration, and general location data)
We do not collect payment information directly. If payment processing is required, it is handled by third-party providers subject to their own privacy policies.
3. How we use it
We use your information to:
- Respond to enquiries and book diagnostic calls
- Send you the newsletter you subscribed to
- Send you resources or guides you requested
- Understand how our website is used so we can improve it
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use it for automated decision-making that produces legal or similarly significant effects.
4. Third-party services
We use the following third-party services that may process your data on our behalf:
- n8n — our automation platform that processes form submissions and manages internal workflows
- Calendly — used for booking diagnostic calls; subject to Calendly's privacy policy
- Sanity — our content management system; subject to Sanity's privacy policy
- Google Analytics 4 — anonymised website analytics; subject to Google's privacy policy
5. Cookies
We use cookies primarily through Google Analytics to understand how visitors use our site. These are analytics cookies only — we do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.
6. Data retention
We retain your personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. If you ask us to delete your data, we will do so within 30 days unless we are required to retain it.
7. Your rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Withdraw consent for marketing communications at any time (unsubscribe links are included in every email)
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information
To exercise any of these rights, contact us via LinkedIn or the contact form on this website.
8. Security
We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. Our website is served over HTTPS and form data is transmitted securely.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.
10. Governing law
This policy is governed by the laws of Australia, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.