Businesses.ie
Find Irish company information

Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how Configurix Ltd. (Company No. 808025), trading as Businesses.ie ("we", "us", "our"), collects, uses, stores, and protects your personal data when you use our website and services at businesses.ie (the "Service").

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Data Protection Acts 1988 to 2018, and all other applicable Irish and EU data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

  • Configurix Ltd.
  • Company No. 808025
  • Ireland
  • Email: info@businesses.ie

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Account Information: email address, name, and password hash when you register for an account.
  • Billing Information: payment card details (processed and stored securely by our payment processor, Stripe — we do not store full card numbers), billing address, and transaction history.
  • Usage Data: pages visited, search queries, features used, IP address, browser type, device information, and timestamps.
  • Communications: any information you provide when contacting us via email or support channels.
  • Cookies & Analytics: data collected through cookies, local storage, and similar technologies (see Section 8).

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Contract Performance (Art. 6(1)(b) GDPR): to provide our Service, manage your account, process payments, and deliver purchased reports.
  • Legitimate Interests (Art. 6(1)(f) GDPR): to improve our Service, prevent fraud, ensure security, and conduct analytics.
  • Consent (Art. 6(1)(a) GDPR): for optional marketing communications. You may withdraw consent at any time.
  • Legal Obligation (Art. 6(1)(c) GDPR): to comply with applicable laws, tax obligations, and regulatory requirements.

4. How We Use Your Data

We use your personal data to:

  • Create and manage your account
  • Process payments and deliver company reports
  • Manage subscriptions and watchlist alerts
  • Send transactional emails (receipts, alerts, account updates)
  • Improve the Service through usage analytics
  • Respond to support requests and communications
  • Comply with legal and regulatory obligations
  • Detect and prevent fraud or misuse

4a. CRO-Sourced Data & Restrictions on Use

Company information displayed on Businesses.ie originates from the Companies Registration Office (CRO) under the terms of the CRO Webservice agreement. In accordance with that agreement and applicable data protection law:

  • We do not use, distribute, publish, supply or apply any CRO-sourced personal data (including director or officer names and addresses) for direct marketing purposes to home or residential addresses, and we do not permit our users to do so either (see our Terms of Service).
  • CRO-sourced data is provided as supplied to the CRO and has not been independently verified by the CRO or by us.
  • The CRO may publish a Fair Processing Notice listing Configurix Ltd. as a customer of the CRO Webservice, with a link to this website.

5. Data Sharing & Third Parties

We do not sell your personal data. We may share data with the following third-party processors who act on our behalf:

  • Stripe — payment processing and subscription management (Stripe Privacy Policy)
  • Supabase — database hosting, authentication, and backend infrastructure (Supabase Privacy Policy)
  • Vercel — website hosting and deployment

All third-party processors are contractually bound to process data only on our instructions and in accordance with GDPR. We may also disclose data where required by law, regulation, or court order.

6. International Data Transfers

Some of our third-party processors may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary:

  • Account data: for the duration of your account plus 30 days after deletion request.
  • Transaction records: up to 7 years to comply with tax and accounting obligations.
  • Usage/analytics data: up to 26 months in anonymised or aggregated form.
  • Support communications: up to 2 years after resolution.

8. Cookies & Tracking

We use the following types of cookies and similar technologies:

  • Essential cookies: required for authentication, security, and core functionality. These cannot be disabled.
  • First-party conversion measurement: we record a small set of report and subscription funnel events without storing email, search text, IP address, browser fingerprint or advertising identifiers. Each checkout attempt uses a random event ID so we can identify where checkout errors or abandonment occur.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using the Service.

9. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — restrict processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests or direct marketing
  • Withdraw Consent — where processing is based on consent

To exercise any of these rights, contact us at info@businesses.ie. We will respond within 30 days as required by GDPR.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication via Supabase Auth
  • PCI-DSS compliant payment processing via Stripe (we never handle raw card data)
  • Regular security reviews and access controls

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The "Last updated" date at the top reflects the most recent revision.

13. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission:

14. Contact Us

For any questions about this Privacy Policy or your personal data, contact: