Legal
Privacy Policy
This Privacy Policy explains how DeGoyle (“DeGoyle”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit degoyle.com, contact us, submit a pilot discovery enquiry, or otherwise interact with our public website.
This Privacy Policy is intended to provide transparent information under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Acts 1988 to 2018, and applicable ePrivacy rules.
This Privacy Policy applies to the DeGoyle public website and related pre-launch/pilot discovery activity. It does not govern any future DeGoyle customer platform, production application, paid service, pilot workspace or customer environment. Those services, when available, may be governed by separate customer agreements, pilot terms, data processing terms, security documentation and/or product-specific privacy notices.
1. Who we are
| Item | Details |
|---|---|
| Controller | DeGoyle |
| Website | https://degoyle.com |
| Primary contact | support@degoyle.com |
| Location | Dublin, Ireland |
| Registered address | Dublin, Ireland |
| Company registration number | 815997 (registered in Ireland) |
For privacy-related questions or requests, contact us at support@degoyle.com.
If DeGoyle appoints a Data Protection Officer or formal EU representative in the future, this Privacy Policy will be updated with the relevant details. At this pre-launch stage, privacy queries should be sent to the contact address above.
2. Scope of this Privacy Policy
This Privacy Policy covers personal data processed in connection with:
- Visiting the DeGoyle public website.
- Submitting a contact form or pilot discovery enquiry.
- Communicating with us by email or similar business channels.
- Website security, abuse prevention, hosting, analytics and operational monitoring.
- Early-stage pilot qualification and business development activity.
This Privacy Policy does not cover:
- Personal data processed inside a future DeGoyle customer platform.
- Customer evidence, regulatory artefacts, internal security documents or operational data uploaded to a future product environment.
- Services or websites operated by third parties.
- Employment, recruitment or supplier onboarding data, unless expressly stated otherwise.
3. Personal data we collect
We collect only the personal data needed for the purposes described in this Privacy Policy.
3.1 Information you provide directly
When you submit a contact form, pilot discovery form, or otherwise contact us, we may collect:
- Name.
- Organisation name.
- Work email address.
- Job title, function or role, if provided.
- Sector, organisation type or regulatory-interest information, if provided.
- Message content, enquiry details and any information you choose to include.
- Communication records and follow-up correspondence.
You should not submit confidential security documentation, credentials, incident reports, vulnerability data, network diagrams, regulated operational data, special-category personal data, criminal-offence data or other sensitive customer information through the public website or general contact form.
3.2 Information collected automatically
When you visit the website, we and our service providers may process limited technical and operational data, including:
- IP address or information derived from request data.
- Approximate location, such as country or region.
- Browser type and version.
- Device type and operating system.
- Pages visited and referring source.
- Date and time of request.
- Server logs, security logs and diagnostic data.
- Cookie preference or local storage preference data.
3.3 Analytics information
Where you consent, we use Cloudflare Web Analytics to understand aggregate website usage and performance. Cloudflare Web Analytics is cookieless: it does not use cookies or store any other information on your device, does not fingerprint visitors, and does not track visitors across different websites.
Because analytics still involves measuring website usage and transmitting analytics events to Cloudflare, we request consent before activating non-essential analytics where required.
See our Cookie Policy for more information.
3.4 Information from third parties
At this stage, we generally collect website enquiry information directly from you. If we receive relevant business contact information from another person in your organisation, a public professional source, an event, or an introduction, we may use it only for appropriate business communication and pilot discovery purposes, subject to applicable law.
Where we receive personal data about you from a third party and are required to do so under applicable data protection law, we will provide you with the information required under Article 14 of the GDPR within a reasonable period. In many cases this will occur at the time of our first direct communication with you.
4. Purposes and lawful bases
We process personal data only where we have a lawful basis to do so.
| Purpose | Examples | Categories of data | Lawful basis |
|---|---|---|---|
| Responding to enquiries | Replying to a contact or pilot discovery request | Name, organisation, work email, message content | Legitimate interests; steps prior to entering into a contract |
| Pilot qualification | Assessing whether an organisation may be a suitable pilot participant | Business contact data, role, sector, enquiry details | Legitimate interests; steps prior to entering into a contract |
| Business communications | Relevant follow-up about DeGoyle, pilot availability or related services | Business contact details, communication history | Legitimate interests, or consent where required |
| Website operation | Hosting, routing, debugging, maintaining availability | Technical logs, request data, device/browser data | Legitimate interests |
| Website security and abuse prevention | Preventing spam, misuse, unauthorised access or malicious activity | IP address, logs, form metadata, security events | Legitimate interests; legal obligation where applicable |
| Analytics | Understanding aggregate website usage and performance | Analytics events, pages viewed, device/browser data | Consent where required |
| Legal and compliance | Record keeping, responding to lawful requests, enforcing rights | Relevant records and communications | Legal obligation; legitimate interests |
| Establishing or defending claims | Preserving evidence and enforcing legal rights | Relevant logs, communications and records | Legitimate interests; legal obligation where applicable |
5. Legitimate interests
Where we rely on legitimate interests, those interests include:
- Operating, maintaining and securing the website.
- Responding to legitimate business enquiries.
- Assessing potential pilot participants.
- Preventing fraud, spam, misuse and security incidents.
- Keeping proportionate business records.
- Developing and improving DeGoyle's pre-launch business and product strategy.
We balance these interests against the rights and freedoms of individuals and limit processing to what is necessary and proportionate.
We maintain internal legitimate interests assessments (LIAs) for the key purposes identified above. These are not published but are available to the Data Protection Commission on request. If you have questions about how we balance legitimate interests against your rights, contact support@degoyle.com.
6. Marketing and business communications
If you submit an enquiry, we may contact you about that enquiry, related DeGoyle services, pilot availability or relevant follow-up topics.
We will not sell your personal data. We will not send unrelated mass marketing communications without an appropriate lawful basis. You can object to non-essential business or marketing communications at any time by contacting support@degoyle.com or using any unsubscribe mechanism provided.
7. Cookies, local storage and analytics
We use strictly necessary technologies to operate the website, protect the website and remember privacy choices.
Where required, we activate non-essential analytics only after you have given consent. You can change your cookie or analytics preferences through the cookie settings mechanism on the website.
For more detail, see our Cookie Policy.
8. Who we share personal data with
We share personal data only where necessary for the purposes described in this Privacy Policy.
8.1 Current service providers
| Provider | Role / purpose | Personal data involved | Notes |
|---|---|---|---|
| Render | Website hosting, deployment and delivery | Request data, technical logs | Render hosts the website (service located in the EU, Frankfurt region) |
| Cloudflare | Cookieless web analytics | Aggregate page-view/visit metrics | Cloudflare provides cookieless, privacy-focused web analytics; it stores no information on visitors' devices |
| Neon | PostgreSQL database for storing pilot discovery enquiries | Form submission data and related metadata | Neon publishes security and compliance documentation, including encryption and GDPR materials |
| Make (Make.com) | Routing form submission notifications and workflow automation | Form submission data required to route notifications | Used to notify the DeGoyle team of enquiries |
8.2 Future or planned providers
The DeGoyle platform is in development. If future pilot or platform services use providers such as Render, Auth0/Okta, AI service providers or other infrastructure processors, they will be documented in the relevant pilot agreement, data processing documentation, sub-processor list or product-specific privacy/security materials before customer data is processed.
8.3 Other recipients
We may also share personal data with:
- Professional advisers, such as legal, accounting, security or compliance advisers.
- Regulators, public authorities, law enforcement bodies or courts, where required by law or where necessary to protect rights.
- Prospective acquirers, investors or business partners, where necessary for corporate transactions and subject to appropriate confidentiality protections.
9. International transfers
Some service providers may process personal data outside Ireland and the European Economic Area (EEA).
Where personal data is transferred internationally, we rely on appropriate safeguards where required, which may include:
- European Commission adequacy decisions.
- The EU Standard Contractual Clauses.
- Data Processing Addenda and contractual commitments with service providers.
- Supplementary technical and organisational measures where appropriate.
We do not authorise providers to use personal data for their own unrelated purposes unless clearly stated or legally permitted.
10. Retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
| Data type | Typical retention period |
|---|---|
| Website security and server logs | Up to 12 months, unless needed for investigation, security, legal or operational reasons |
| Contact form enquiries | Up to 24 months after the last meaningful interaction |
| Pilot discovery enquiries | Up to 36 months after the last meaningful interaction, unless a relationship proceeds or deletion is requested and no lawful reason requires retention |
| Business communications | For as long as relevant to the business relationship or prospective relationship, then archived or deleted according to business need |
| Cookie consent preference | Stored in your browser until cleared, reset or overwritten |
| Analytics data | Aggregate only; retained according to Cloudflare Web Analytics configuration |
| Legal, contractual, tax or compliance records | As required by applicable law or for the establishment, exercise or defence of legal claims |
If a pilot or customer relationship begins, separate retention terms may apply under the relevant agreement or data processing terms.
11. Security
We use reasonable technical and organisational measures to protect personal data. Current and expected measures include:
- HTTPS/TLS for website traffic.
- Secure hosting and managed infrastructure providers.
- Database encryption at rest where supported by the database provider.
- Access limited to authorised personnel.
- Rate limiting and abuse-prevention controls for form submissions.
- Security logging and operational monitoring.
- Separation of website enquiry data from any future customer platform data.
- Review of provider security and compliance materials where appropriate.
No method of transmission or storage is completely secure. If you believe information you sent to DeGoyle may have been compromised, contact support@degoyle.com promptly.
12. Your data protection rights
Subject to applicable law, you may have the right to:
- Access your personal data.
- Correct inaccurate or incomplete personal data.
- Request erasure of your personal data.
- Restrict processing of your personal data.
- Object to processing based on legitimate interests.
- Object to direct marketing.
- Request data portability, where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority.
Withdrawing consent does not affect processing carried out before consent was withdrawn.
To exercise your rights, contact support@degoyle.com. We may need to verify your identity before responding. We aim to respond within one month, subject to applicable extensions under data protection law.
In Ireland, the supervisory authority is the Data Protection Commission: https://www.dataprotection.ie.
13. Requirement to provide personal data
You are not legally required to submit a website enquiry or pilot discovery form. However, if you do not provide the information requested in the form, we may be unable to respond to your enquiry or assess pilot suitability.
14. Automated decision-making and profiling
We do not use website enquiry data for automated decision-making that produces legal or similarly significant effects.
We may use limited business judgement and internal review to decide whether an organisation appears suitable for pilot discovery. This is not an automated decision-making process with legal or similarly significant effects.
15. Children
The DeGoyle website is intended for business and professional users. It is not directed at children, and we do not knowingly collect personal data from children.
16. Third-party websites
The website may link to third-party websites, documents or resources. We are not responsible for the privacy practices, security or content of those third-party resources.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Material changes may be highlighted on the website where appropriate.
18. Contact
For privacy questions, requests or concerns, contact:
support@degoyle.com
Dublin, Ireland