Privacy Policy
Last updated: 20.05.2026
Introduction
Welcome to Attain. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or participate in our research activities. We are committed to handling your information responsibly and transparently, in line with the General Data Protection Regulation (GDPR) and all applicable Irish and EU data protection laws.
Who We Are (Data Controller)
Attain is the Data Controller for all personal data processed through this website.
If you have any questions about this policy or your data, you can contact us at: compliance@attain.ie
Our website is hosted in Ireland, and all processing activities occur within the EU. However, some of our service providers (such as Google Workspace) may process data outside the EEA. Where this occurs, they apply GDPR‑compliant safeguards, including Standard Contractual Clauses (SCCs).
3. What Information We Collect
3.1. Business Enquiries (Contact Form)
If you contact us through our website, we collect the following information:
Required:
- Name
- Company email address
- Company name
- Reason for contact
- Opt‑in/out for future research communication
Optional:
- Company size
- Operating timezone
- Preferred mode of engagement (online/in-person)
- Whether you are a decision‑maker
- Details about your organisation’s internal decision‑making process
- Any additional information you choose to provide
We do not collect sensitive personal data.
3.2. Research Participation (Research Sign‑Up Form)
If you join our research panel, we collect:
Required:
- Name
- Email address
Optional:
- Job role
- Industry
You will also be asked to provide explicit consent to be contacted about research opportunities.
4. How We Use Your Information
4.1. Business Enquiries
We use your information to:
- Respond to your enquiry
- Communicate with you about your request
- Provide any services you have asked for
We do not use this information for marketing.
4.2. Research Participation
If you join our research panel, we use your information to:
- Contact you about relevant research opportunities
- Manage participation in research studies
- Maintain accurate research records
- Support the development and validation of Attain’s assessment tools and related products
Participation is voluntary, and you may withdraw at any time by emailing research@attain.ie or compliance@attain.ie.
We do not share research participant data with third parties.
5. Legal Basis for Processing
We process your personal data under the following lawful bases:
- Consent — when you voluntarily submit a form or join the research panel
- Legitimate interest — for managing research activities and responding to business enquiries
You may withdraw consent at any time by emailing research@attain.ie or compliance@attain.ie.
6. Data Minimisation
We only collect the minimum amount of personal data required for the purposes described in this policy. We do not collect sensitive personal data.
7. Data Storage and Security
Your data may be stored or processed using the following services:
7.1 Google Workspace (Google Forms, Google Sheets, Gmail)
We use Google Workspace to manage contact forms, research sign‑ups, and email communication. Google acts as a data processor on our behalf and provides GDPR‑compliant data protection measures, including encryption in transit and at rest.
Google’s Privacy Policy: https://policies.google.com/privacy
Attain regularly reviews Google’s terms and Data Processing Agreements to ensure ongoing compliance.
7.2 Hosting Ireland (Website Hosting)
Our website is hosted by Hosting Ireland Limited. Personal data submitted through our website may be stored on servers located in Ireland.
Hosting Ireland does not access or share your data except:
- as required by law, or
- as necessary to maintain hosting services.
7.3 WordPress Plugins
Our website uses a small number of plugins. We ensure that each plugin is configured to minimise data collection and comply with GDPR.
- GDPR Cookie Compliance (Moove Agency) — used only for essential cookies
- Antispam Bee — protects forms from spam; does not store personal data
- BackWPup — backups only; does not process user data
- Classic Editor — no data collection
- Disable Comments — no data collection
- Shared Counts — no tracking
- SeedProd — used for maintenance mode; no data collection unless forms are enabled
We do not use analytics, tracking cookies, or marketing cookies.
8. International Data Transfers
Google Workspace may process data outside the EEA. Where this occurs, Google applies appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure GDPR‑compliant protection.
9. Data Retention
9.1 Business Enquiries
We retain business enquiry data only for as long as necessary to respond to your request or provide services.
9.2 Research Participation
We retain research sign‑up data until the relevant research project is complete, unless you withdraw earlier.
You may request deletion at any time by emailing research@attain.ie or compliance@attain.ie.
10. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent at any time
To exercise any of these rights, contact: compliance@attain.ie
11. Cookies
Our website uses essential cookies only. We do not use analytics, tracking, or advertising cookies.
12. Data Breach Notification
If a data breach occurs that may affect your rights or freedoms, we will notify you and the relevant supervisory authority without undue delay.
13. Children’s Privacy
Our services are not intended for individuals under 16. We do not knowingly collect data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated via email and posted on this page.
15. Contact Us
For any questions about this Privacy Policy or your personal data, contact:
Attain: compliance@attain.ie