Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how IncomeStat Analytics, 14 South Mall, Cork, T12 CXW3, Ireland, collects, uses, discloses and safeguards your personal data when you visit our website, request a sample report or engage our statistical research and analytics services. IncomeStat Analytics is the data controller for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Irish Data Protection Act 2018.

1. Data We Collect

1.1 Information you provide directly

• Contact details — your name, email address, telephone number and organisation when you submit our contact form, request a free sample report or otherwise correspond with us.
• Project and enquiry information — details of your request, target geographies, business questions and any documents you send us.
• Contractual and billing information — billing contact details, purchase order references and invoicing records where you become a client.

1.2 Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system and referring URL.
• Usage data — pages visited, time spent on pages, and interactions with our website, collected through cookies and similar technologies subject to your consent preferences.

1.3 Statistical and research data

Our published reports and analytics products are derived exclusively from aggregated, anonymised or statistical data sources, including national census records, government labour statistics and administrative datasets. This research data does not identify individuals and is processed in accordance with the Irish Statistics Act 1993 and applicable national statistics legislation. It falls outside the scope of personal data under GDPR.

2. Legal Bases for Processing

We process your personal data only where a lawful basis under Article 6 GDPR applies:

• Consent (Art. 6(1)(a)) — for non-essential cookies, marketing communications and optional contact preferences. You may withdraw consent at any time.
• Contract (Art. 6(1)(b)) — to respond to your enquiries, prepare quotes, deliver reports and perform our contractual obligations.
• Legal obligation (Art. 6(1)(c)) — to comply with tax, accounting, corporate and regulatory requirements in Ireland.
• Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve our website, protect against fraud and misuse, and maintain business records, provided these interests are not overridden by your rights and freedoms.

3. Purposes of Processing

We use your personal data to:

• Respond to enquiries and provide requested sample reports and quotes;
• Deliver, manage and support our analytics services and client relationships;
• Issue invoices and maintain accounting records;
• Improve our website, services and user experience through analytics (with consent);
• Send service-related notices and, with consent, occasional updates about our research and reports;
• Ensure the security and integrity of our systems and comply with legal obligations.

4. Cookies and Similar Technologies

Our website uses cookies stored on your device. Essential cookies, which are necessary for the website to function and to record your consent choices, do not require consent. Analytics and marketing cookies are only set where you have given consent through our cookie banner. You may change or withdraw your preferences at any time via the cookie banner or by clearing cookies in your browser. For further details, please refer to our Cookies Policy.

5. Data Sharing and Recipients

IncomeStat Analytics does not sell or rent personal data. We share personal data only with:

• Service providers (processors) — hosting, email, analytics and accounting providers bound by data processing agreements under Article 28 GDPR;
• Professional advisers — auditors, accountants and legal counsel, where reasonably required;
• Public authorities — where disclosure is required by law, court order or to protect vital interests.

6. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure an adequate level of protection by relying on an adequacy decision of the European Commission or, where none exists, on Standard Contractual Clauses together with supplementary safeguards and, where required, transfer impact assessments.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Enquiry and correspondence records — up to 24 months from last contact;
• Client contracts, invoices and accounting records — 6 years, in line with Irish statutory requirements;
• Marketing consent records — until consent is withdrawn, plus a short period to evidence compliance;
• Server logs and technical data — up to 12 months for security purposes.

Data that is aggregated or anonymised so that individuals can no longer be identified may be retained indefinitely for research and statistical purposes.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — to obtain confirmation and a copy of the personal data we hold about you;
• Right to rectification (Art. 16) — to correct inaccurate or incomplete data;
• Right to erasure (Art. 17) — to have your data deleted where legally permissible;
• Right to restriction of processing (Art. 18);
• Right to data portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format;
• Right to object (Art. 21) — to processing based on legitimate interests or for direct marketing;
• Right to withdraw consent (Art. 7(3)) at any time, without affecting the lawfulness of prior processing;
• Rights related to automated decision-making (Art. 22). We do not make decisions based solely on automated processing that produce legal effects concerning you.

To exercise any of these rights, contact us at [email protected] or write to IncomeStat Analytics, 14 South Mall, Cork, T12 CXW3, Ireland. We will respond within one month of receiving a verifiable request and may extend this period by two further months where necessary, informing you of the reason.

9. Right to Lodge a Complaint

If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with the Irish Data Protection Commission, the competent supervisory authority for IncomeStat Analytics, or with the supervisory authority in your country of habitual residence, place of work or place of the alleged infringement.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or destruction, including encryption in transit, access controls, least-privilege policies, staff confidentiality obligations and secure disposal procedures. Despite our efforts, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also inform you directly.

12. Children’s Privacy

Our services are directed at businesses, researchers and policy professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Automated Decision-Making and Profiling

We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects individuals. Our statistical models operate exclusively on aggregated, anonymised data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology or our practices. The version published on this page, including the last-updated date, is the version in force. Material changes will be highlighted on our website or communicated to affected clients directly.

15. Contact Us

For any questions about this Privacy Policy or our data protection practices, please contact: