1. Introduction and scope
Third Stage Consulting Group LLC (“Third Stage,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit thirdstageconsulting.com (the “Site”), contact us, register for our webinars and events, download our guides and reports, take our free transformation assessments, join our Ground Control Community, or otherwise interact with us.
Third Stage is an independent ERP, CRM, AI, supply chain, and digital transformation advisory firm headquartered at 384 Inverness Parkway, Suite 200, Englewood, CO 80112, USA, with teams serving clients in the Americas, EMEA, and Asia-Pacific. For the purposes of applicable data protection laws, Third Stage Consulting Group LLC is the controller of the personal information described in this policy.
This policy does not cover personal information we process on behalf of our clients during consulting, project recovery, or expert witness engagements. That processing is governed by our client agreements and, where required, a data processing agreement. By using the Site, you acknowledge the practices described here.
2. Information we collect
We collect personal information you give us, information collected automatically when you use the Site, and information from third parties.
| Category | Examples | Source |
| Contact and identity details | Name, job title, company, business email, phone number, country | You, via contact forms, phone, or email |
| Business and project details | Industry, company size, systems in use, project goals, challenges you describe | You, via inquiries, assessments, and calls |
| Event and content registrations | Webinar and Stratosphere event registrations, report and guide downloads, newsletter and community sign-ups | You |
| Communications | Emails, chat messages, call notes, feedback, survey responses | You |
| Recruitment information | CV, work history, qualifications, references | You, when applying for a role |
| Device and usage data | IP address, browser and device type, pages viewed, referring URL, time on page, approximate location | Automatically, via cookies and similar technologies |
| Third-party data | Professional profile details, event attendee lists, lead and firmographic data | Social networks, event partners, business data providers |
We do not intentionally collect sensitive personal information, such as health data, racial or ethnic origin, or government ID numbers, through the Site. Please do not submit this type of information to us.
3. How we use information
We use personal information to run our business, serve you, and improve our Site. Specifically, we use it to:
- Respond to inquiries and requests for proposals, and schedule consultations.
- Deliver the content you request, such as guides, reports, assessments, webinars, podcasts, and event access.
- Provide, manage, and invoice our consulting services when you or your organization become a client.
- Send newsletters, event invitations, and thought leadership you have signed up for or that relate to your interests.
- Run and moderate the Ground Control Community and other interactive features.
- Evaluate job applicants and manage recruitment.
- Analyze Site traffic and engagement to improve our content, services, and user experience.
- Protect the Site, detect fraud and abuse, and keep our systems secure.
- Comply with legal obligations, enforce our terms, and establish or defend legal claims.
We do not use personal information for automated decision-making that produces legal or similarly significant effects on you.
4. Legal bases for processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:
| Legal basis | When we rely on it |
| Contract | To provide services you or your organization request, and to take steps before entering a contract |
| Legitimate interests | To respond to business inquiries, run B2B marketing, analyze and secure the Site, and improve our services, where your rights do not override these interests |
| Consent | For non-essential cookies, and for marketing emails where consent is legally required. You can withdraw consent at any time |
| Legal obligation | To keep records required by tax, accounting, and other laws, and to respond to lawful requests |
5. Cookies and tracking technologies
We use cookies, pixels, and similar technologies to operate the Site, understand how it is used, and measure our marketing. We manage these through Google Tag Manager.
| Type | Purpose |
| Strictly necessary | Enable core features such as page loading, security, and form submission. These cannot be switched off |
| Analytics | Measure visits, traffic sources, and page performance (for example, Google Analytics) |
| Functional | Remember your preferences and enable embedded videos, podcasts, and chat |
| Advertising and social | Measure campaign performance and show relevant ads on platforms such as LinkedIn, Google, and Facebook |
Where required by law, we ask for your consent before setting non-essential cookies. You can change your choices through our cookie banner or your browser settings. Blocking some cookies may affect how the Site works. You can opt out of Google Analytics using Google’s browser add-on. We honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing where required by law.
6. How we share information
We do not sell your personal information for money. We share it only as described below:
- Service providers that host the Site, manage our CRM and email, run webinars and events, process payments, provide analytics, and support recruitment. They may use your data only to provide services to us.
- Event co-hosts and sponsors, when you register for a jointly hosted webinar or event and the registration form tells you so.
- Technology vendors, only with your or your organization’s direction, for example when we coordinate demonstrations during a software selection.
- Professional advisers, such as lawyers, auditors, and insurers.
- Authorities and legal parties, when required by law, court order, or to protect our rights, users, or the public.
- Business transfers, such as a merger, acquisition, or sale of assets, subject to this policy’s protections.
As an independent, technology-agnostic firm, we do not pass your details to software vendors for their own marketing.
7. International transfers
We are based in the United States and work with team members and service providers in other countries, including in EMEA and Asia-Pacific. Your information may therefore be transferred to and processed in countries with different data protection laws than yours.
When we transfer personal information out of the EEA, UK, or Switzerland, we use appropriate safeguards. These include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or reliance on the EU–U.S. Data Privacy Framework where a recipient is certified. Contact us to request a copy of the relevant safeguards.
8. Data retention
We keep personal information only as long as needed for the purposes in this policy, unless the law requires or permits a longer period.
| Data | Typical retention |
| Inquiry and marketing contacts | Until you unsubscribe or ask us to delete, or 3 years after your last interaction |
| Client and contract records | Duration of the engagement plus 7 years, for legal, tax, and audit purposes |
| Job applications | 2 years after the recruitment decision, unless you are hired |
| Analytics data | Up to 26 months |
When data is no longer needed, we delete or anonymize it securely.
9. Data security
We use administrative, technical, and physical safeguards to protect personal information. These include encryption in transit (HTTPS), access controls based on job need, vendor security reviews, and staff confidentiality obligations.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects you, we will notify you and the relevant authorities as required by law.
10. Your privacy rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy.
- Correct inaccurate or incomplete information.
- Delete your personal information.
- Restrict or object to certain processing, including processing based on legitimate interests and direct marketing.
- Data portability, receiving your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting earlier processing.
- Opt out of the sale or sharing of personal information for targeted advertising, and of profiling.
- Not be discriminated against for exercising your rights.
EEA, UK, and Swiss residents may also lodge a complaint with their local data protection authority or, in the UK, the Information Commissioner’s Office.
California and other U.S. state residents. Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in states such as Colorado, Virginia, Connecticut, and Texas, you have the rights above. In the past 12 months we collected the categories listed in Section 2 from the sources listed there, for the purposes in Section 3. We do not sell personal information for money. Our use of advertising cookies may count as “sharing” for cross-context behavioral advertising, and you may opt out through our cookie settings or a GPC signal. We do not knowingly sell or share the data of anyone under 16.
How to exercise your rights. Email info@thirdstage-consulting.com or call 866-760-2698. We will verify your identity before acting and respond within the time required by law, usually 30 to 45 days. You may use an authorized agent, who must provide proof of authority. If we decline your request, you may appeal by replying to our decision.
11. Marketing communications
We send marketing emails, such as newsletters, event invitations, and new reports, in line with applicable laws, including CAN-SPAM, GDPR, PECR, and CASL. You can unsubscribe at any time using the link in any marketing email or by contacting us. We will still send non-marketing messages related to services you have requested or contracts you hold with us.
12. Children’s privacy
The Site and our services are intended for business professionals. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
13. Third-party links and platforms
The Site links to and embeds content from third parties, including YouTube, podcast platforms, and social networks such as LinkedIn and Facebook. Their privacy practices are governed by their own policies, and we are not responsible for them. Please review their policies before sharing information.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. If changes are material, we will give additional notice, such as a Site banner or email.
15. Contact us
For questions, requests, or complaints about this policy or our privacy practices, contact:
Third Stage Consulting Group LLC Attn: Privacy 384 Inverness Parkway, Suite 200 Englewood, CO 80112, USA Email: info@thirdstage-consulting.com Phone: 866-760-2698
Last updated: October 2, 2026