Privacy Policy

Last updated: October 2026

1. Data Controller

GEC Business Growth Services ("GEC", "we", "us") is the data controller for personal data processed through eu.gecbusiness.com. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.

2. Data We Collect

We collect and process the following categories of personal data:

  • Contact Information: Name, email address, company name when you submit our contact form or use the Digital Readiness Assessment tool.
  • Assessment Data: Company domain information and digital readiness analysis results, only after email verification.
  • Usage Data: Anonymous analytics data about how you interact with our website.
  • Advertising Measurement Data: If you accept advertising cookies and arrive via one of our Google ads, Google receives information that you submitted a contact form or completed an assessment (a "conversion"). Where this applies, Google also receives your email address in hashed (one-way encrypted) form, so that the conversion can be matched to your Google account.

3. Legal Basis for Processing

We process your personal data based on:

  • Consent: For marketing communications (explicit opt-in required) and for advertising measurement through Google Ads, which only starts after you choose "Accept All" in the cookie banner. You can withdraw this consent at any time via "Cookie Settings" in the footer.
  • Legitimate Interest: For providing requested services and improving our website.
  • Contract Performance: When processing data necessary to deliver our assessment service.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Assessment data is retained for 12 months. Contact form submissions are retained for 24 months. You may request deletion at any time.

5. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Third-Party Processors

We use the following third-party services that may process your data:

  • Resend.io: Email delivery service for OTP codes and reports.
  • Odoo: CRM system for managing sales leads generated through the contact form and completed assessments.
  • Google Ireland Limited (Google Ads): Measures the effectiveness of our advertising. With your consent, it receives conversion events, advertising cookie identifiers and a hashed email address, as described in section 2 and in our Cookie Policy. Google processes this data under its own terms and privacy policy and may process it outside the EEA.
  • Anthropic (Claude), Google (Gemini), and Perplexity AI: Used to research your company's public digital footprint and generate the assessment report. Each provider processes this data subject to its own privacy policy and data retention terms.

8. Contact

For any privacy-related inquiries or to exercise your rights, contact us at: digital@eu.gecbusiness.com