Privacy Policy

1. Introduction

Grow Socially Ltd, trading as Roadmapped (“Roadmapped”, “we”, “us” or “our”), is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, contact us, submit an enquiry, subscribe to our communications or engage with our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018 and applicable Irish electronic privacy legislation.

2. Who We Are

Roadmapped provides revenue operations consultancy, CRM implementation, business process improvement, systems integration and automation services.

• Legal entity: Grow Socially Ltd
• Trading name: Roadmapped
• Business address: 20 Seville Lawns, Margaretsfield, Kilkenny, Ireland
• Website: https://roadmapped.ie
• Email: gary@roadmapped.ie

Grow Socially Ltd is the data controller for personal information collected and used for its own business purposes.

Where we process personal data on behalf of clients through our consultancy, CRM and automation services, we generally act as a data processor, with the relevant client acting as data controller.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following information.

Information you provide

• Name, job title and company name
• Email address and telephone number
• Information submitted through website enquiry forms
• Messages, correspondence and consultation details
• Information relating to our business relationship

Website and technical information

When you visit our website, certain technical information may be processed, including:

• IP address
• Browser and device information
• Website interactions and pages visited
• Approximate geographical location
• Referral sources
• Cookie identifiers and related technical information

Some information is processed to operate and secure our website. Optional analytics information is collected only where the required consent has been provided.

Newsletter information

If you subscribe to marketing communications, we may collect your email address, subscription preferences and consent records.

Client service information

When providing services, we may access personal information contained within our clients’ systems, including customer contact details, sales records and communications.

Such information is generally processed on behalf of the relevant client.

4. How We Use Personal Data

We process personal information for the following purposes and lawful bases.

Our legitimate interests include responding to business enquiries, maintaining customer relationships, improving our services and protecting our systems.

We consider these interests against individuals’ rights and freedoms.

Providing information through an enquiry form is voluntary, although we may be unable to respond without the necessary contact details.

5. Website Hosting and Enquiry Forms

Our website is built and hosted using Emergent, with Cloudflare providing content delivery, network infrastructure and security services.

When you submit an enquiry through our website, the information you provide is processed through our website’s contact form.

Enquiry information is stored in a MongoDB database hosted through Emergent’s infrastructure and may be transmitted through Emergent’s managed email services.

We use this information to:

• Respond to enquiries
• Discuss business requirements
• Arrange consultations
• Provide information about requested services
• Maintain appropriate records of our interactions

We generally retain unsuccessful enquiries for up to 24 months after the last meaningful interaction, unless an ongoing relationship or another lawful reason justifies longer retention.

Submitting an enquiry does not automatically subscribe you to marketing communications.

6. Google Analytics

We use Google Analytics 4 (GA4), a website analytics service provided by Google, to understand how visitors interact with our website.

Google Analytics may process information including:

• Pages visited and website interactions
• Approximate geographical location
• Device and browser information
• Referral sources
• Analytics identifiers

We use this information to measure website performance and improve our website and services.

Google Analytics is integrated with our cookie consent system. Analytics tracking is activated only after visitors provide the required consent.

Visitors who reject analytics cookies are not tracked through Google Analytics.

You can change or withdraw consent at any time using the Cookie Settings link in our website footer.

Google may process information outside the European Economic Area, subject to applicable data protection safeguards.

For further information about Google’s privacy practices, visit: https://policies.google.com/privacy

7. Cookies and Similar Technologies

Our website uses cookies and browser storage technologies to support essential functionality, remember consent preferences and, where permitted, analyse website usage.

Strictly necessary technologies

These support website operation, session management, security and storage of cookie preferences.

Analytics technologies

These help us understand website traffic and visitor interactions through Google Analytics.

Analytics technologies are activated only after the required consent has been provided.

Cookie and storage information

Google Analytics cookies are set only after analytics consent has been provided.

Our website also uses local browser storage for an administrative access function restricted to its administration interface. This is not intended for general visitor analytics.

The purpose and consent classification of Emergent’s __emg_vid cookie are currently being verified with the provider.

Managing cookie preferences

When you first visit our website, you can accept, reject or manage optional cookies.

Your consent preferences are retained for up to 12 months, after which you may be asked to make a new choice.

You can change or withdraw consent at any time through the Cookie Settings link in our website footer.

You can also manage cookies through your browser settings.

Strictly necessary cookies do not require consent where an applicable legal exemption applies.

8. Marketing Communications

We may send newsletters, business insights, service updates and promotional communications to individuals who have subscribed or where otherwise permitted by applicable law.

Where consent is required, we obtain it through an affirmative action, such as selecting an optional newsletter subscription checkbox.

We may retain records of consent, including the date and source of subscription.

You can unsubscribe at any time using the link provided in marketing emails or by contacting gary@roadmapped.ie.

We may retain limited information necessary to ensure unsubscribe requests and marketing objections continue to be respected.

9. Sharing Personal Data

We may share personal information with trusted service providers where necessary to operate our business and deliver our services.

These include:

• Emergent: Website hosting, application infrastructure, database services and website enquiry processing.
• Cloudflare: Website content delivery, network infrastructure, performance and security.
• Google: Website analytics through Google Analytics 4, where consent has been provided.
• Other service providers: We may use providers of business email, cloud storage, accounting software, customer relationship management and other operational services.

We may also share relevant information with authorised employees, contractors, professional advisers or regulatory authorities where appropriate or legally required.

We seek to ensure appropriate contractual, confidentiality and security arrangements are in place where service providers process personal information on our behalf.

We do not sell personal information.

10. International Data Transfers

Some technology providers used by Roadmapped, including Emergent, Cloudflare and Google, may process personal data outside the European Economic Area (EEA).

Where international transfers occur, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection legislation.

Depending on the recipient and destination, these safeguards may include:

• European Commission adequacy decisions
• The EU-US Data Privacy Framework, where applicable to a certified recipient
• European Commission Standard Contractual Clauses
• Supplementary safeguards where necessary

You may contact us for further information about international transfers and the safeguards applicable to your information.

11. Processing Personal Data on Behalf of Clients

Roadmapped provides CRM implementation, revenue operations, systems integration and automation services to business clients.

As part of these services, we may access or process personal data held within clients’ CRM systems, marketing platforms, communications tools and other business applications.

This may include customer contact details, sales records, communications and related business information.

Where we act as a data processor:

• We process personal information on documented instructions from the client.
• We use information only for authorised service delivery purposes.
• We apply appropriate technical and organisational security measures.
• We restrict access to authorised personnel and service providers.
• We assist clients with applicable data protection obligations as required by law and contract.
• We handle the return or deletion of information in accordance with applicable contractual arrangements.

The relevant client generally remains responsible for determining the purposes and lawful bases for processing personal information within its systems.

Our responsibilities may be governed by separate Data Processing Agreements.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking account of applicable legal, contractual and regulatory requirements.

Our general retention periods are:

• Website enquiries and prospective customers: Up to 24 months after the last meaningful interaction, unless an ongoing relationship or another lawful reason justifies longer retention.
• Client relationship records: For the duration of the relationship and generally up to six years afterwards where necessary for contractual records, legal claims or other justified purposes.
• Financial and accounting records: Generally at least six years, or longer where required by law.
• Newsletter subscribers: Until consent is withdrawn, an individual unsubscribes or the information is no longer required, subject to periodic review and any necessary suppression records.
• Google Analytics: Event-level analytics data is retained according to our configured Google Analytics settings, with a target retention period of 14 months where available.
• Information processed on behalf of clients: In accordance with the relevant client’s documented instructions, contractual arrangements and applicable legal obligations.

We periodically review retained information and delete or anonymise personal data when it is no longer required.

13. Data Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration or disclosure.

Depending on the systems involved, these measures may include:

• Access controls and restricted permissions
• Authentication and account security measures
• Secure website connections
• Secure cloud-based infrastructure
• Confidentiality arrangements
• Appropriate data access and retention procedures

We limit access to personal information to authorised individuals who require it for legitimate business purposes.

No method of electronic transmission or storage can be guaranteed to be completely secure.

14. Your Data Protection Rights

Under the GDPR, you may have the right to:

• Access: Request a copy of personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure: Request deletion of personal information in certain circumstances.
• Restriction: Request that we limit certain processing activities.
• Data portability: Request certain information in a structured, commonly used and machine-readable format.
• Objection: Object to processing based on legitimate interests or to direct marketing.
• Withdrawal of consent: Withdraw consent at any time where processing relies on consent.
• Automated decision-making: Exercise applicable rights concerning qualifying solely automated decisions.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, contact gary@roadmapped.ie.

We will respond within the timeframes required by applicable data protection legislation, generally within one month of receiving a valid request.

Where we process personal data solely on behalf of a client, we may refer the request to that client or assist them in responding.

15. Automated Processing

We use software and automation technologies to support business processes, enquiry management, communications and service delivery.

These may include automated notifications, appointment communications and CRM workflows.

We do not currently use personal information collected through our website to make solely automated decisions that produce legal or similarly significant effects on individuals.

16. Complaints

If you have concerns about how we handle your personal information, please contact us at gary@roadmapped.ie.

You also have the right to lodge a complaint with the Irish Data Protection Commission.

Data Protection Commission
Website: https://www.dataprotection.ie

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business, services, technology or legal obligations.

The latest version will be published on our website with an updated revision date.

18. Contact Us

For questions about this Privacy Policy or how we process personal information, contact:

Grow Socially Ltd trading as Roadmapped
20 Seville Lawns, Margaretsfield, Kilkenny, Ireland
Email: gary@roadmapped.ie
Website: https://roadmapped.ie