Privacy Policy

Effective Date: September 2, 2026

This Privacy Policy explains how OnPath LLC d/b/a One Constraint ("One Constraint," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit oneconstraint.com, submit forms, book calls, purchase services, subscribe to communications, opt in to text messaging, or otherwise interact with us.

This Policy is intended to provide a global baseline. Additional rights may apply depending on where you live, including in California, Nevada, Texas and other U.S. states, Canada, the European Economic Area (EEA), Switzerland, and the United Kingdom.

1. Who We Are

One Constraint is a business consulting and AI-enabled operational transformation practice operated by OnPath LLC d/b/a One Constraint.

Business name: OnPath LLC d/b/a One Constraint
Website: https://oneconstraint.com
Email: [email protected]
Phone: 725-330-9088
Mailing address: 3175 E Warm Springs Rd. #130, Las Vegas, NV 89120, USA

2. Scope

This Policy applies to our public website, online forms, X-Ray assessment experiences, booking tools, chat widget, newsletters, payment pages, text messaging, marketing activities, and related services. It does not apply to third-party sites or services that publish their own privacy notices.

3. Personal Information We Collect

Depending on how you interact with us, we may collect:

Identifiers and contact information, such as name, business email, telephone number, mailing address, company, title, and professional profile information.
Business and assessment information, such as company size, revenue, margins, staffing, operational metrics, business challenges, goals, documents, and answers submitted through an X-Ray or other assessment.
Transaction information, such as services purchased, amount, date, billing status, and limited payment-related information. Payment card data is processed by Stripe or another payment processor and is generally not stored by us.
Communications, such as emails, text-message preferences, call notes, form submissions, newsletter preferences, support requests, and feedback.
Internet and device information, such as IP address, browser, device type, operating system, referring page, pages viewed, links clicked, approximate location, timestamps, and cookie or advertising identifiers.
Visitor-identification and enrichment information, such as company identity, professional contact details, and information associated with a business website visit that may be supplied by RB2B/Retention.com or other data providers.
Marketing and advertising information, such as campaign engagement, ad interactions, lead source, and inferred interest in our services.
Testimonials and media, such as approved statements, names, titles, company names, logos, photographs, or case-study information.
Other information you choose to provide.

4. Sources of Personal Information

We collect information:

Directly from you through forms, assessments, bookings, purchases, email, text-message opt-ins, calls, chat, and other communications.
Automatically through cookies, pixels, analytics tools, server logs, and similar technologies.
From service providers such as booking platforms, payment processors, CRM systems, communications platforms, analytics providers, and AI providers.
From visitor-identification, enrichment, and business-data providers, including RB2B/Retention.com.
From public sources, professional networks, referrals, and business directories.

5. How We Use Personal Information

We may use personal information to:

Provide, administer, personalize, and improve our website, assessments, reports, consulting services, and customer experience.
Generate and deliver AI-assisted X-Ray reports, research, analysis, recommendations, and other work product.
Respond to inquiries, schedule calls, prepare proposals, process transactions, and manage client relationships.
Send customer-care, support, appointment, service-related, and follow-up text messages when you have separately consented to receive them.
Send marketing text messages only where you have separately opted in to marketing SMS.
Send newsletters, business updates, invitations, and email marketing communications, subject to applicable consent and opt-out requirements.
Measure website performance, understand visitor interest, identify prospective business customers, and improve marketing effectiveness.
Display authorized testimonials, client logos, and case studies.
Protect the security and integrity of our systems, prevent fraud and misuse, enforce our terms, and comply with law.
Create aggregated or de-identified information that does not reasonably identify an individual.
Carry out other purposes disclosed at the time of collection or with your consent.

6. SMS/Text Messaging and Mobile Information

If you provide your mobile telephone number and separately opt in to receive text messages from OnPath LLC d/b/a One Constraint, we may send the categories of messages described at the point where you gave consent.

Depending on your selection, these may include customer-care, inquiry follow-up, appointment coordination, service updates, support messages, and, only if you separately choose it, marketing or promotional messages.

Message frequency may vary. Message and data rates may apply. Consent to receive SMS messages is not a condition of purchasing any product or service.

You may reply STOP to opt out of text messages. You may reply HELP for assistance. You may also contact us at [email protected] or 725-330-9088.

Carriers are not liable for delayed or undelivered messages.

Mobile-information non-sharing rule: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may use service providers to deliver, route, host, or support text messaging on our behalf. Those providers may process mobile information only as needed to provide services to us and subject to their contractual obligations.

7. AI-Assisted Services and Automated Processing

We use artificial intelligence technologies to help generate X-Ray reports, conduct research, analyze information, draft content, summarize materials, and support consulting delivery. AI outputs may contain errors, omissions, or limitations and are intended to support, not replace, professional judgment.

We use human oversight where appropriate, particularly for material client-facing recommendations. We do not intend to make decisions that produce legal or similarly significant effects about individuals solely through automated processing.

Information submitted to an AI-enabled workflow may be processed by third-party AI providers acting as service providers. We seek to use appropriate contractual, security, and data-handling settings. Unless separately agreed, do not submit highly sensitive personal information, regulated health information, government identification numbers, account passwords, or confidential third-party information that you are not authorized to share.

8. Cookies, Analytics, Pixels, and Similar Technologies

We and our vendors may use cookies, pixels, tags, local storage, analytics tools, and similar technologies to operate the website, remember preferences, understand traffic, measure campaigns, and support advertising or visitor identification.

Where required by law, non-essential cookies and similar technologies will be used only after consent. You can use our cookie controls, browser settings, or applicable opt-out mechanisms to manage preferences. Blocking technologies may affect website functionality.

We may use Google Analytics, advertising pixels, conversion tags, and similar tools. These providers may process information under their own terms and privacy notices.

9. RB2B / Retention.com Visitor Identification

When you visit or log in to our website, cookies and similar technologies may be used by our online data providers or vendors to associate these activities with other information they or others have about you, including by association with your email. We, or service providers on our behalf, may then send communications and marketing to these email addresses where permitted.

You may opt out of this advertising by visiting https://app.retention.com/optout. You may also opt out of collection associated with RB2B for GDPR purposes at https://www.rb2b.com/rb2b-gdpr-opt-out.

We do not exchange personal information for money. Certain advertising, analytics, visitor-identification, or data-provider disclosures may nevertheless be treated as regulated targeted-advertising or data-sharing activity under some privacy laws. Where applicable, you may opt out as described below.

The SMS/mobile-data protections in Section 6 apply separately and are not changed by this section.

10. How We Disclose Personal Information

We may disclose personal information to:

Hosting, cloud, security, IT, website, analytics, and data-storage providers.
CRM, scheduling, communications, newsletter, and marketing service providers.
Payment processors, including Stripe.
AI, research, document-processing, and workflow-automation providers.
Visitor-identification, enrichment, analytics, and advertising service providers.
Professional advisers, insurers, auditors, financing sources, and transaction participants subject to appropriate obligations.
Government authorities, regulators, courts, or other parties when required by law or reasonably necessary to protect rights, safety, and security.
A buyer, investor, lender, successor, or other participant in a merger, acquisition, financing, restructuring, or sale of assets.

We may also disclose information at your direction or with your consent.

Text-messaging opt-in data and consent are governed by the stricter mobile-information rule in Section 6.

11. Legal Bases for EEA and UK Processing

Where the GDPR or UK GDPR applies, our legal bases may include:

Contract: processing necessary to respond to your request, enter into an agreement, or provide services.
Legitimate interests: operating and improving our business, securing systems, communicating with business contacts, conducting proportionate B2B marketing, and understanding website use, balanced against your rights.
Consent: non-essential cookies, certain marketing communications, SMS where consent is required, and other processing where consent is required. You may withdraw consent at any time without affecting prior lawful processing.
Legal obligation: complying with tax, accounting, regulatory, legal, and law-enforcement requirements.

12. International Transfers

We are based in the United States, and information may be processed in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized transfer mechanisms, such as contractual safeguards, and take steps designed to protect transferred information.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business records, document consent and opt-outs, resolve disputes, enforce agreements, comply with legal obligations, and protect security.

We may retain aggregated or de-identified information for longer. When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to backup and legal-retention constraints.

14. Security

We use administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Marketing Communications

You may unsubscribe from marketing emails by using the link in the message or contacting us.

For SMS, reply STOP to opt out. If you later want to receive SMS again, you may opt in again through an approved consent method.

We may continue to send non-promotional communications where permitted and where they do not conflict with an opt-out choice or applicable law.

16. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

Know or access personal information we process about you.
Correct inaccurate personal information.
Delete personal information, subject to exceptions.
Receive a portable copy of certain information.
Object to or restrict certain processing.
Withdraw consent.
Opt out of targeted advertising or regulated data disclosures where applicable.
Limit certain uses of sensitive personal information, where applicable.
Appeal a denial of a privacy request, where required.
Not be discriminated against for exercising privacy rights.
Complain to an applicable privacy or data-protection authority.

To exercise rights, see our Contact & Privacy Requests page or email [email protected]. We may verify your identity and authority before completing a request. Rights are subject to legal exceptions.

17. California Privacy Notice

This section supplements the rest of this Policy for California residents. The categories described in Section 3 correspond generally to identifiers, customer records, commercial information, internet or electronic activity, geolocation, professional information, audio or visual information, and inferences.

We do not exchange personal information for monetary consideration. Some advertising, analytics, pixels, enrichment, or visitor-identification activity may fall within California statutory definitions that create an opt-out right. Where applicable, California residents may opt out through our cookie controls, by sending a request to us, through the RB2B opt-out links above, or by using a qualifying browser-based opt-out preference signal such as Global Privacy Control.

California residents may have rights to know, access, correct, delete, obtain portability, opt out of certain regulated disclosures or targeted advertising, limit certain uses of sensitive personal information, and receive equal service and pricing.

The SMS/mobile-information protections in Section 6 apply regardless of these website advertising provisions.

18. Nevada and Other U.S. State Rights

Nevada residents and residents of other states may have rights to access, correct, delete, obtain a copy, and opt out of certain targeted-advertising, profiling, or regulated data-disclosure activities. Some states provide an appeal right if a request is denied.

Submit requests to [email protected]. We will respond within the time required by applicable law and provide appeal instructions where required.

19. Canada

Where Canadian privacy law applies, we seek to follow principles of accountability, identified purposes, meaningful consent, limited collection, limited use and retention, accuracy, safeguards, openness, access, and challenge. You may request access to or correction of personal information and may withdraw consent, subject to legal and contractual limits.

20. EEA, Switzerland, and United Kingdom Rights

Individuals in these jurisdictions may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. You may object at any time to processing for direct marketing.

Because we are established in the United States, additional representative obligations may apply if our activities become subject to Article 27 of the EU GDPR or UK GDPR. We will update this Policy if a representative is appointed.

21. Children

Our website and services are intended for business users and are not directed to children under 18. We do not knowingly collect personal information from children under 13.

22. Third-Party Links and Services

Our website may link to third-party services. Their privacy practices are governed by their own notices, and we are not responsible for their practices.

23. Changes to This Policy

We may update this Policy to reflect changes in law, technology, vendors, messaging programs, or business practices. We will post the revised version with an updated effective date and provide additional notice when required.

24. Contact Us

OnPath LLC d/b/a One Constraint
3175 E Warm Springs Rd. #130, Las Vegas, NV 89120, USA
Email: [email protected]
Phone: 725-330-9088

Drafting notice: This document is a business template and is not legal advice. Counsel should review it before publication and after material changes to vendors, data practices, messaging programs, target markets, or services.