Privacy policy

GME Solutions operates in both the United Kingdom and Australia. This policy explains what data we collect, why, and how we handle it — in compliance with the UK General Data Protection Regulation (UK GDPR), the UK Data Use and Access Act 2025, and the Australian Privacy Act 1988 (including the Australian Privacy Principles).

What we collect

We collect only what you submit via the contact form: your name, email address, optional company name, and message. This information is used solely to respond to your enquiry.

Analytics

We use a lightweight, first-party analytics system to understand how visitors interact with this site. This system is hosted on our own domain and does not share data with any third party.

What we collect: page views, scroll depth, time on page, button clicks, and whether the contact form was started or completed. We also record screen size, referrer URL, and UTM campaign parameters from the URL.

Cookies: We set one first-party cookie (_gme_vid) that contains a random visitor identifier. It expires after 12 months. A session identifier is stored in your browser's sessionStorage and is cleared when you close the tab.

IP addresses: Your IP address is hashed (one-way) on our server for session grouping. Raw IP addresses are automatically purged after 30 days. We do not perform browser fingerprinting or cross-site tracking.

Company identification: We may use your hashed IP address to identify the company or organisation associated with your visit (e.g. via reverse-IP lookup). This is used solely to understand which businesses visit our site.

Google Analytics: We also use Google Analytics 4 (GA4) to measure visits and traffic sources. GA4 sets its own cookies and processes data on Google's infrastructure. Because it is a third-party service, we treat it as requiring consent where the law does: visitors in the EU, EEA, UK and Switzerland are asked to accept analytics cookies before GA4 (or our first-party analytics) loads — nothing is set until you choose “Accept”. Visitors elsewhere (including Australia) have analytics enabled by default on a notice-and-opt-out basis, and can switch it off at any time via the “Cookie preferences” link in the footer.

Legal basis

UK: Legitimate interest in understanding website usage to improve our services, consistent with Article 6(1)(f) of the UK GDPR and the UK Data Use and Access Act 2025 analytics exemption. Where analytics cookies require prior consent (EU/EEA, UK and Switzerland), we rely on the consent you give via our cookie banner. No personal data is sold or shared with advertisers.

Australia: We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Personal information is collected only for the primary purpose of responding to your enquiry. Analytics data is collected and used in accordance with APP 3 (collection) and APP 6 (use and disclosure). We do not disclose personal information to overseas recipients except where necessary for the services you have requested.

Your rights

UK residents: You have the right to access, correct, or delete your personal data under the UK GDPR. You may also object to processing based on legitimate interest.

Australian residents: Under the Privacy Act 1988, you have the right to access and correct personal information we hold about you (APPs 12 and 13). If you believe we have breached the APPs, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, contact us via the contact form.

Data retention

Contact form submissions are retained for as long as necessary to respond to your enquiry and for a reasonable period afterwards for record-keeping. Analytics data is retained in aggregate form. Raw IP addresses are purged after 30 days.

Opt out

You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page. You can also decline the cookie banner, disable JavaScript, use your browser's “Do Not Track” setting, or delete the _gme_vid cookie.

Connected Google services (client reporting)

If you are a client and connect your Google account through one of our secure reporting links, we access your Google Search Console and Google Analytics data on a read-only basis to prepare performance reports and analysis for your business. We request only the minimum scopes needed for this.

What we store: the connection tokens Google issues (stored encrypted), the email address of the Google account you connected, and the search and analytics data needed to build your reports.

What we never do with it: we do not sell this data, share it with third parties beyond the service providers that host our systems, use it for advertising, or use it to train AI models. Access within GME Solutions is limited to the people working on your account.

Limited Use: our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: you can revoke our access at any time from your Google account permissions or by asking us to disconnect you. On request we will delete the stored tokens and associated data, subject to anything we must keep for legal or record-keeping reasons.

Third-party services

We do not sell your data. We use Google Analytics 4 (provided by Google) for website analytics, subject to the consent rules above. For hosting, standard provider policies may apply (e.g. Vercel). A third-party visitor identification service (Leadsy) may also be active on this site.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

Last updated: July 2026