Privacy Policy
Last Updated: 30 September 2025
1. Introduction
GMJ Associates ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website at www.gmjassociates.com and use our professional consultancy services.
This policy complies with the General Data Protection Regulation (GDPR) and applicable data protection laws in Ireland and the European Union.
2. Data Controller
GMJ Associates
Email: values@gmjassociates.com
3. Information We Collect
3.1 Information You Provide
When you contact us or use our services, we may collect:
- Name and contact details (email address, phone number)
- Organisation name and job title
- Information you provide in enquiry forms or correspondence
- Any other information you choose to share with us
3.2 Information Collected Automatically
When you visit our website, we automatically collect certain information through:
- Google Analytics: We use Google Analytics to understand how visitors use our website. This includes information such as your IP address, browser type, device type, pages visited, time spent on pages, and referring website. This data is collected in an anonymised or pseudonymised form.
- Squarespace: Our website is hosted on Squarespace, which may collect technical information such as IP addresses, browser types, and device information as part of their hosting services.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: When you provide your information through our contact forms or subscribe to communications
- Legitimate Interests: To analyse website usage and improve our services
- Contractual Necessity: To provide consultancy services you have requested
5. How We Use Your Information
We use your personal data to:
- Respond to your enquiries and provide information about our services
- Deliver our professional consultancy services
- Improve our website and user experience
- Analyse website traffic and usage patterns
- Comply with legal obligations
6. Data Sharing and Third Parties
We do not sell or rent your personal data to third parties. We may share your information with:
- Squarespace: Our website hosting provider, which processes data on our behalf
- Google Analytics: For website analytics purposes. Google's use of your data is governed by Google's Privacy Policy
These third-party service providers are contractually required to protect your data and use it only for the purposes we specify.
7. Data Security
We take appropriate technical and organisational measures to protect your personal data. We rely on our third-party service providers (Squarespace and Google Analytics) to implement and maintain robust security protocols to safeguard your information against unauthorised access, alteration, disclosure, or destruction.
Whilst we strive to protect your personal data, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
When we no longer need your personal data, we will securely delete or anonymise it.
9. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you
- Right to Rectification: You can ask us to correct inaccurate or incomplete data
- Right to Erasure: You can request that we delete your personal data in certain circumstances
- Right to Restrict Processing: You can ask us to limit how we use your data
- Right to Data Portability: You can request your data in a structured, commonly used format
- Right to Object: You can object to our processing of your data based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at values@gmjassociates.com.
10. Cookies
Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us analyse website usage and improve your experience.
We use:
- Essential Cookies: Required for the website to function properly
- Analytics Cookies: Google Analytics cookies to understand how visitors use our site
You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.
11. International Data Transfers
Some of our third-party service providers (such as Google) may process data outside the European Economic Area (EEA). When this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR requirements.
12. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this policy.
We encourage you to review this policy periodically to stay informed about how we protect your personal data.
14. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority for data protection:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Telephone: +353 (0)761 104 800
Email: info@dataprotection.ie
Website: www.dataprotection.ie
15. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
GMJ Associates
Email: values@gmjassociates.com
Website: www.gmjassociates.com