Privacy Policy
Last updated: May 2026
1. Data Controller
The Data Controller for the personal data processed via PartnerReady.ie is GetSettled, Galway, Ireland. For any privacy question, contact us at info@getsettled.ie.
2. What we collect
- Identification & contact: business or working name, your name, your co-founder's name (provided by you), your email address.
- Assessment data: your answers to up to 20 questions about your proposed partnership and, where applicable, your co-founder's answers (collected via a session invite link you share with them).
- Action checklist state: the status (To do / Doing / Done) of items in your personal action checklist.
- Payment data: processed by Stripe — we never see or store your card details. We retain only the Stripe transaction reference.
- Technical data: minimal local browser storage to keep you signed in to your assessment session. We do not use third-party analytics or advertising cookies.
3. Purposes and legal basis (GDPR Art. 6)
- Providing the assessment and the report — legal basis: performance of a contract (Art. 6(1)(b)).
- Sending the report by email and the optional follow-up sequence — performance of contract for the report itself; consent (Art. 6(1)(a)) for the optional follow-up sequence, which you may withdraw at any time via the unsubscribe link in every email.
- Processing payment and meeting tax/accounting obligations — legal obligation (Art. 6(1)(c)) and legitimate interest in keeping accurate records (Art. 6(1)(f)).
- Securing and improving the service — legitimate interest (Art. 6(1)(f)) in protecting our users and the service from misuse.
4. Automated processing and the report (Art. 13(2)(f) / Art. 22)
The risk score and report are produced by a deterministic rules engine that maps your stated answers to pre-written guidance — there is no machine-learning profiling, and no decision is made about you that produces a legal or similarly significant effect within the meaning of GDPR Article 22. The output is informational only, intended to surface conversations to have with a qualified Irish solicitor, and you retain full responsibility for any decision you make about your partnership.
Logic involved: each answer maps to a fixed risk weight; weights are aggregated per category and explained in plain English in the report. Significance and consequences: none beyond the information you receive. You can ask us for a human review of any output that you feel is inaccurate by emailing info@getsettled.ie.
5. If your co-founder receives an invite link
If you invite a co-founder to answer separately, their answers are processed under the same controller (us) so that we can produce the joint comparison report you requested. We will show your co-founder this Privacy Policy and ask for their consent before they submit any answer. If your co-founder asks us to delete their answers, we will do so even if that means the joint report can no longer be produced.
6. Sharing and processors
We do not sell your personal data and do not share it for advertising. We share data only with the processors needed to operate the service:
- Stripe Payments Europe, Ltd. (Ireland, with onward transfer to Stripe, Inc. in the United States) — payment processing. Stripe acts as an independent controller for fraud-prevention purposes.
- Resend, Inc. (United States) — email delivery for your report and any optional follow-up emails.
- Supabase, Inc. via our hosting partner — database and file storage. Data is stored in the European Union.
Transfers to the United States rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses together with appropriate supplementary measures. You can ask us for a copy of the safeguards by emailing info@getsettled.ie.
7. Retention and deletion mechanism
Assessment data and action checklist state are retained for 12 months from your most recent activity. Deletion is enforced by a scheduled job in our backend that runs at least weekly, queries records whose last_active_at is older than 12 months and removes them, including any associated partner-comparison answers. Payment records are retained for 6 years to meet Irish tax law obligations (Taxes Consolidation Act 1997 s.886). Email-marketing consent records are kept for as long as you remain subscribed plus 2 years to evidence consent under Art. 7(1) GDPR. You can ask us to delete your data sooner — see your rights below.
8. Your rights
Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing; receive a portable copy; and, where processing is based on consent, withdraw that consent at any time. To exercise any of these, email info@getsettled.ie. We respond within 30 days.
You also have the right to lodge a complaint with the Irish Data Protection Commission — dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
9. Security and session links
Your assessment is identified by an unguessable session ID embedded in the URL you keep. Anyone who has that link can view the answers in the session — treat it like a password. We use TLS in transit and EU-region storage at rest. Sessions become inactive after 12 months and are then purged.
10. Changes to this policy
If we change this policy materially we will email anyone with an active assessment and update the "Last updated" date above.