Privacy Policy

1. Who this policy applies to

This Privacy Policy explains how Global Web Technologies handles personal data when you visit our website, contact us, purchase a Growth Investigation, submit an Investigation Brief, or otherwise communicate with us.

2. Information we collect

Depending on how you use the service, we may collect your name, email address, business name, website address, country or market, information you provide in an Investigation Brief, correspondence with us, order and transaction references, and information you voluntarily provide for an investigation.

We may also research publicly available information about a business, its market, competitors and professional representatives where that information is relevant to the investigation.

3. Payment information

Payments are processed by Stripe. We do not ask you to send us your full card number, card security code or online-banking credentials. Stripe processes payment information under its own privacy terms. We receive transaction information needed to confirm and administer your purchase, such as payment status, currency, amount and Stripe transaction/session references.

4. Why we use personal data

We use personal data to process and verify purchases; provide the Growth Investigation and related support; communicate about an order; investigate the business and market described in the brief; maintain business, accounting and security records; respond to enquiries; prevent misuse or duplicate use of paid sessions; and establish, exercise or defend legal claims where necessary.

5. Business contact details and direct marketing

We sometimes contact businesses directly to introduce the Growth Investigation. Where we do, we collect a limited amount of business contact information — typically a business name, a business email address, a website address and, where published, the name and role of a relevant contact — from sources the business itself has made publicly available, such as its own website or a public business directory.

We use that information to send a small number of individually researched business messages about a service relevant to the recipient’s role. We do not buy contact lists, we do not use automated address harvesting, and we do not send bulk or untargeted mailings.

Our legal basis for this processing is legitimate interests: the proportionate promotion of a business service to other businesses. We balance that interest against the rights of the people concerned by limiting ourselves to business contact details, keeping volumes low, identifying ourselves clearly in every message, and acting immediately on any objection.

Every message we send identifies us, states where we obtained the contact details, and explains how to stop further contact. If you would prefer not to hear from us, reply to any message with “unsubscribe”, or email investigations@globalwebtec.com. We will remove the address from our records and add it to a suppression list so that it is not contacted again. There is no charge for this and you do not need to give a reason.

Where a recipient is an individual subscriber rather than a corporate body — which in some jurisdictions includes sole traders and certain partnerships — we contact them only where we have the consent required by the electronic marketing rules that apply in their country.

6. Our legal bases

Where the GDPR applies, our principal legal bases are contract, where processing is necessary to take steps at your request or provide a service you purchased; legal obligation, where records must be retained or disclosed by law; and legitimate interests, where necessary for proportionate business administration, service security, fraud prevention, research using relevant public business information, and the establishment or defence of legal claims. Where consent is specifically required, we will ask for it separately.

7. Service providers and recipients

We use service providers where necessary to operate the service. These currently include Stripe for payment processing and Hostinger/Titan for website hosting and business email. Information may also be disclosed to professional advisers, regulators, courts or public authorities where reasonably necessary or legally required.

We do not sell customer personal data to advertisers.

8. International transfers

Some service providers may process information outside Ireland or the European Economic Area. Where GDPR transfer rules apply, we expect the relevant provider to use an applicable lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.

9. Cookies and tracking

Global Web Technologies does not currently use advertising trackers, analytics trackers or tracking pixels on this website. Essential technical data may still be processed by our hosting and payment infrastructure to deliver pages securely, maintain sessions, prevent abuse and complete payments. If we introduce non-essential tracking in future, this policy and any required consent mechanism will be updated before that tracking is used.

10. Information you send for an investigation

Please do not send passwords or login credentials. If access to Search Console, advertising, analytics or another platform would materially improve an investigation, we will explain what information would help and seek a proportionate method of obtaining it. You remain responsible for ensuring that you are entitled to provide any information you send to us.

11. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, security and dispute-resolution requirements. Transaction and accounting records may need to be retained for at least six years under Irish record-keeping requirements. Investigation working material and correspondence may be deleted or anonymised earlier when no longer required. Retention may be extended where a dispute, legal claim or legal obligation requires it.

12. Your data-protection rights

Subject to the GDPR and applicable exceptions, you may have rights of access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise a data-protection right, email investigations@globalwebtec.com. We may need to verify your identity before acting on a request.

13. Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Irish Data Protection Commission or, where applicable, another competent supervisory authority.

14. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The current version and its update date will be published on this page.