Privacy Policy Updates: Ensure Data Security with Globe Boss

Globe Boss Digital Marketing Agency

Hampton Square, West Cabra, Dublin, Ireland

Email: google@globeboss.com | Phone: +353 1 868 2345

Last updated: 4 August 2026

This Privacy Policy explains how Globe Boss Digital Marketing Agency (“Globe Boss”, “we”, “us”) collects, uses, stores and shares personal data when you visit www.globeboss.com, contact us, download a resource, or engage us as a client.

We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Who we are

Globe Boss Digital Marketing Agency is the data controller for personal data collected through this website and through our direct dealings with prospects and clients.

Where we deliver SEO, PPC, analytics, email or web development work on a client’s systems, the client is normally the controller and we act as a processor on their documented instructions. Section 10 covers that arrangement.

Any privacy question can be sent to google@globeboss.com.

2. Personal data we collect

2.1 Data you give us

Contact and enquiry data — name, business name, email address, phone number, website URL, and anything you write in a form, live chat, audit request or quote request.
Client and account data — billing contact details, purchase order references, service agreements, and correspondence relating to your project.
Marketing data — your subscription status, content preferences, and whether you have downloaded a resource such as the Traffic Playbook.
Recruitment data — CVs and application details, if you apply to work with us.

2.2 Data collected automatically

Technical data — IP address, approximate location derived from it, browser and device type, operating system, and referring URL.
Usage data — pages viewed, time on page, scroll depth, clicks, forms started or submitted, and the path you take through the site.
Cookie data — identifiers set by us and by analytics or advertising providers, subject to your consent. See our Cookie Policy.

2.3 Data from other sources

Publicly available business information, such as company websites, business directories and LinkedIn profiles, used to research prospective clients.
Referrals from existing clients or partners, where the referrer has confirmed you are happy to be contacted.
Aggregated reporting data from platforms such as Google Analytics 4, Google Search Console, Google Ads and Meta.

We do not deliberately collect special category data (such as health, religious or political data) and ask that you do not send it to us through our forms.

3. Why we use your data and our legal basis

What we do	Data used	Legal basis
Reply to enquiries, prepare quotes and run free audits	Contact and enquiry data	Steps taken at your request prior to a contract; legitimate interests
Deliver and manage the services you have engaged us for	Client and account data, technical data	Performance of a contract
Invoicing, payment collection and credit control	Client and billing data	Performance of a contract; legal obligation
Send marketing emails, newsletters and offers	Contact and marketing data	Consent, or legitimate interests for existing clients marketing similar services (you can opt out at any time)
Measure site performance, test changes and improve content	Usage and cookie data	Consent (analytics cookies)
Show and measure advertising, including remarketing	Cookie and usage data	Consent
Secure the site, prevent fraud and abuse, and maintain backups	Technical data	Legitimate interests
Keep accounting records and respond to legal claims	Client and account data	Legal obligation; legitimate interests

Where we rely on legitimate interests, our interest is in running, securing and growing a digital marketing business. We balance that against your rights each time, and you can object using the details in section 14.

We do not carry out automated decision-making that produces legal or similarly significant effects on you.

4. Cookies and tracking

Non-essential cookies — analytics, personalisation and advertising — are only set after you give consent through our cookie banner. You can change or withdraw that consent at any time through the cookie preferences link on the site.

Full detail on every cookie category, provider and duration is set out in our Cookie Policy.

We do not sell personal data. We share it only where necessary, and with providers bound by written data processing terms:

Hosting and infrastructure — website hosting, CDN and backup providers.
Analytics — Google Analytics 4 and Google Search Console.
Advertising platforms — Google Ads, Meta, LinkedIn and similar, where you have consented to marketing cookies.
Email and CRM tools — used to send campaigns and manage enquiries.
Payment and accounting providers — to process invoices and maintain records.
Professional advisers — accountants, auditors and lawyers, where required.
Authorities — where we are legally obliged to disclose, or to establish or defend legal claims.
Successors — a buyer or successor entity if the business is sold or restructured.

6. International transfers

Some of our providers process data outside the European Economic Area, primarily in the United States. Where that happens we rely on an adequacy decision (such as the EU–US Data Privacy Framework where the provider is certified) or on the European Commission’s Standard Contractual Clauses, together with additional technical and organisational safeguards.

Email google@globeboss.com for details of the safeguards applied to a specific transfer.

7. How long we keep data

Type of data	Retention period
Website enquiries that do not become clients	24 months from last contact
Client project records and correspondence	Duration of the engagement plus 6 years
Invoices and accounting records	6 years, as required by Irish tax law
Marketing subscriber data	Until you unsubscribe, then a suppression record is kept to honour your opt-out
Analytics data	Up to 14 months in Google Analytics 4, then aggregated
Cookie consent records	12 months
Unsuccessful job applications	12 months, unless you ask us to delete sooner

8. Security

We use TLS encryption in transit, access controls and role-based permissions, multi-factor authentication on business-critical accounts, managed hosting with firewalls and malware scanning, and regular backups. Staff and contractors are bound by confidentiality obligations.

No system is completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the Data Protection Commission within 72 hours and inform you where the law requires it.

9. Your rights

Under GDPR you have the right to:

Be informed about how your data is used — this policy.
Request a copy of the personal data we hold about you.
Have inaccurate or incomplete data corrected.
Request erasure of your data where there is no overriding reason for us to keep it.
Restrict processing while a request or objection is being resolved.
Receive your data in a portable, machine-readable format.
Object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent at any time, without affecting processing carried out before withdrawal.

Send requests to google@globeboss.com. We respond within one month and may ask you to verify your identity. There is no charge unless a request is manifestly unfounded or excessive.

10. Data we process on behalf of clients

When we manage a client’s website, ad accounts, analytics or email lists, we act as a processor. In that role we:

Process personal data only on the client’s documented instructions.
Do not use client data for our own marketing purposes.
Enter a written data processing agreement covering scope, sub-processors, security and deletion.
Return or delete the data at the end of the engagement, unless retention is legally required.

If your data was collected by one of our clients, please contact that business directly. We will assist them in responding to you.

11. Children

Our services are aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe a child has provided data to us, email google@globeboss.com and we will delete it.

12. Third-party links

Our site and blog link to external websites. We are not responsible for their content or privacy practices, and this policy does not apply to them. Check the privacy policy of any site you visit.

13. Changes to this policy

We review this policy at least annually and update it when our processing changes. The current version is always published on this page, with the date shown at the top. Material changes affecting active clients will be notified by email.