Privacy policy
GME Solutions operates in both the United Kingdom and Australia. This policy explains what data we collect, why, and how we handle it — in compliance with the UK General Data Protection Regulation (UK GDPR), the UK Data Use and Access Act 2025, and the Australian Privacy Act 1988 (including the Australian Privacy Principles).
What we collect
We collect only what you submit via the contact form: your name, email address, optional company name, and message. This information is used solely to respond to your enquiry.
Analytics
We use a lightweight, first-party analytics system to understand how visitors interact with this site. This system is hosted on our own domain and does not share data with any third party.
What we collect: page views, scroll depth, time on page, button clicks, and whether the contact form was started or completed. We also record screen size, referrer URL, and UTM campaign parameters from the URL.
Cookies: We set one first-party cookie (_gme_vid) that contains a random visitor identifier. It expires after 12 months. A session identifier is stored in your browser's sessionStorage and is cleared when you close the tab.
IP addresses: Your IP address is hashed (one-way) on our server for session grouping. Raw IP addresses are automatically purged after 30 days. We do not perform browser fingerprinting or cross-site tracking.
Company identification: We may use your hashed IP address to identify the company or organisation associated with your visit (e.g. via reverse-IP lookup). This is used solely to understand which businesses visit our site.
Legal basis
UK: Legitimate interest in understanding website usage to improve our services, consistent with Article 6(1)(f) of the UK GDPR and the UK Data Use and Access Act 2025 analytics exemption. No personal data is sold or shared with advertisers.
Australia: We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Personal information is collected only for the primary purpose of responding to your enquiry. Analytics data is collected and used in accordance with APP 3 (collection) and APP 6 (use and disclosure). We do not disclose personal information to overseas recipients except where necessary for the services you have requested.
Your rights
UK residents: You have the right to access, correct, or delete your personal data under the UK GDPR. You may also object to processing based on legitimate interest.
Australian residents: Under the Privacy Act 1988, you have the right to access and correct personal information we hold about you (APPs 12 and 13). If you believe we have breached the APPs, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC).
To exercise any of these rights, contact us via the contact form or email at greg@gme.solutions.
Data retention
Contact form submissions are retained for as long as necessary to respond to your enquiry and for a reasonable period afterwards for record-keeping. Analytics data is retained in aggregate form. Raw IP addresses are purged after 30 days.
Opt out
You can block analytics by disabling JavaScript, using your browser's “Do Not Track” setting, or deleting the _gme_vid cookie.
Third-party services
We do not sell your data. For hosting, standard provider policies may apply (e.g. Vercel). A third-party visitor identification service (Leadsy) may also be active on this site.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.
Last updated: March 2026
