Privacy Policy

Last updated: October 2026

Tamas Nagy and Monika Bondar, trading in partnership as Insygneum, respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit www.insygneum.ie, contact us, request a Growth Insight or other analysis, download our free resources, or engage our services.

1. Who We Are

Insygneum is an Irish business partnership providing business analytics, digital marketing, website/design, process improvement and automation services. For data protection purposes, Insygneum acts as a data controller where it determines the purposes and means of processing personal data.

Registered business name: Insygneum. Irish Companies Registration Office (CRO) business name registration number: 793157. Contact: tom@insygneum.ie.

2. Personal Data We May Collect

  • Identity and contact data: name, email address, telephone number and business contact details.

  • Business information: business name, website, sector, location and information voluntarily supplied for an enquiry, Growth Insight, Google Business Profile analysis or other service.

  • Enquiry and communications data: messages, meeting notes, requests, feedback and correspondence.

  • Client/service data: information needed to scope, deliver, administer and report on services.

  • Technical and usage data: IP address, browser/device information, pages visited, timestamps and similar information collected through website technologies where applicable.

  • Marketing preferences: consent, objections, unsubscribe status and communication preferences.

  • Free-resource registration data: details you submit to request a checklist or other free download, the resource requested, submission date, and any separately recorded permission for one marketing follow-up email.

  • Transaction and administrative data: invoices, payment status and records necessary for accounting, compliance and dispute handling.

3. How We Collect Personal Data

  • Directly from you through forms, email, calls, meetings, consultations or service delivery.

  • When you submit a HubSpot registration form for a free checklist, we collect the fields shown on the form. First name and email address are required to process the request; optional business details and optional marketing consent are identified separately. Without the required information, we cannot process the form-based request.

  • From your organisation where you act on behalf of a business.

  • Automatically through website technologies, subject to applicable cookie/tracking rules.

  • From publicly available business sources where relevant to a requested analysis or legitimate business activity.

4. Purposes for Which We Use Personal Data

  • Responding to enquiries and requests.

  • Processing requests for free resources, recording submissions and providing the requested download link.

  • Taking steps at the request of a prospective client before entering a contract.

  • Delivering Growth Insights, analyses, proposals and contracted services.

  • Managing client relationships, billing, administration and service communications.

  • Improving our website, services, systems and business processes.

  • Sending direct marketing where legally permitted and where any required consent has been obtained.

  • Preventing misuse, protecting systems and establishing, exercising or defending legal claims.

  • Complying with legal, regulatory, accounting and tax obligations.

5. Lawful Bases for Processing

In practice, the main purposes and bases are: responding to enquiries and providing requested free resources — legitimate interests in handling voluntary requests (or pre-contractual steps where the request is specifically about entering a contract); supplying contracted services — contract; accounting and mandatory recordkeeping — legal obligation; website security and proportionate administration — legitimate interests; and optional one-time promotional follow-up or any consent-based non-essential tracking — consent. We assess the relevant basis for each activity and do not treat a checklist request itself as marketing consent.

Depending on the processing activity, we may rely on:

  • Contract: processing necessary to perform a contract or take requested steps before entering one.

  • Legal obligation: processing necessary to comply with applicable legal or regulatory requirements.

  • Legitimate interests: for example, responding to genuine business enquiries, administering and improving the business, maintaining business relationships, protecting systems and exercising or defending legal rights, provided those interests are not overridden by the individual’s rights and interests.

  • Consent: where consent is legally required or is the basis chosen for a particular processing activity.

6. Direct Marketing and Communications

Service and transactional communications are distinguished from direct marketing. We may contact an existing or prospective client about an enquiry, proposal, appointment, report or contracted service where appropriate. Marketing communications will be sent only where permitted by applicable law and, where required, with consent. Recipients may opt out of marketing communications at any time.

Free checklist downloads: if you request a downloadable resource, we use your registration information to process the request and make the resource available. A separate, unticked and optional choice may allow Insygneum to send one follow-up email about relevant automation or other business services. Declining that choice does not prevent access to the resource. We keep a record of the choice and honour withdrawal or objection. We do not automatically add checklist registrants to a newsletter. Any marketing message will include an effective opt-out method.

7. Sharing and Disclosure

Our current or planned service providers include Squarespace (website hosting and file delivery), HubSpot (CRM and checklist form submissions when enabled), and Calendly (appointments). Business email and other operational providers may also process relevant personal data where used. The precise data shared depends on which service you use. We do not sell personal data.

8. International Transfers

Where personal data is transferred outside the European Economic Area, Insygneum will use an appropriate lawful transfer mechanism and applicable safeguards, as required by data-protection law.

Providers may use infrastructure or subprocessors outside the EEA. Where a transfer requires a GDPR Chapter V mechanism, we assess the provider’s applicable adequacy decision or safeguards, such as the EU Standard Contractual Clauses, and any necessary supplementary measures. You can request further information about relevant safeguards at tom@insygneum.ie.

9. Cookies and Tracking Technologies

Our website may use technologies essential for website operation and security. As of October 2026, Insygneum has not installed Google Analytics 4 or the HubSpot website tracking code and does not currently operate a cookie-consent banner. This does not establish that Squarespace or embedded third-party services set no cookies: actual cookies and third-party embeds must be audited. Any non-essential analytics, advertising or similar storage/access technology requiring consent must remain disabled until appropriate prior consent and an effective preference/withdrawal mechanism are implemented. We will update this notice and provide more specific cookie details once that audit is completed.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, taking account of legal, accounting, tax, contractual, dispute and limitation-period requirements. Different categories may have different retention periods. We will securely delete, anonymise or otherwise dispose of data when it is no longer required.

For free-resource and prospective-customer contact records, we will apply and document a defined retention and review schedule, including deletion or anonymisation when no longer necessary and suppression of records required to honour opt-outs. Records of consent or withdrawal may need to be retained for a proportionate period to demonstrate compliance. Client, invoice and statutory records are retained as required by the applicable obligations.

11. Your Data Protection Rights

  • Right of access.

  • Right to rectification.

  • Right to erasure, where applicable.

  • Right to restriction of processing, where applicable.

  • Right to object to processing, including certain direct marketing.

  • Right to data portability, where applicable.

  • Right to withdraw consent where processing is based on consent.

Requests should be sent to tom@insygneum.ie. We will normally respond without undue delay and, in accordance with GDPR requirements, within one month of receiving a valid request. Where legally permitted, that period may be extended by up to a further two months because of complexity or number of requests; where applicable, we will explain the reason for the extension within the first month.

12. Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, destruction or disclosure. These measures may include access controls, authentication, appropriate permissions, secure configuration, backups and provider security controls.

13. Personal Data Breaches

We maintain procedures for identifying, assessing, documenting and responding to personal-data breaches. Where legally required, we will notify the Data Protection Commission and/or affected individuals within the applicable statutory time frame.

14. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices. Users should review the privacy information provided by those third parties.

15. Automated Decision-Making and Profiling

We do not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will be published on our website. Where a change materially affects individuals or where additional notice is legally required, we will provide appropriate notice.

17. Complaints and Contact

Questions or concerns should first be sent to tom@insygneum.ie. Individuals also have the right to lodge a complaint with the Irish Data Protection Commission where they believe their data-protection rights have been infringed.

Data Protection Commission: www.dataprotection.ie