1. Who We Are
GrantMatch.ie is operated by GrantMatch Ireland, based in the Republic of Ireland. We provide two services under this brand:
- Business GrantMatch Business — grant eligibility research and application support for Irish SMEs.
- Care GrantMatch Care — eligibility research and application support for individuals and families seeking healthcare supports, disability grants, and government benefits.
GrantMatch Ireland is the data controller for all personal data you provide through either service. For any privacy-related queries, contact us at hello@grantmatch.ie.
2. Information We Collect
The information we collect depends on which service you use:
- Both Contact details: name, email address, and phone number.
- Business Business information: company name, legal structure, sector, size, location, turnover range, trading history, and other details provided in the eligibility questionnaire.
- Care Personal circumstances: health conditions, disability status, household composition, income, current supports received, and other information relevant to your eligibility for government supports.
- Care Supporting documents: where relevant for Care Premium application submissions (e.g. medical evidence, proof of income). You will only be asked to provide these after purchasing the relevant tier.
- Both Payment information: processed securely by Stripe. We do not store your card details — Stripe handles all payment data in accordance with PCI-DSS standards.
- Both Website usage data: anonymised analytics via Google Analytics (pages visited, session duration, traffic source). No personally identifiable information is collected through analytics.
3. Purpose of Data Collection
Your information is collected and used only for the following purposes:
- To assess your eligibility for grants, benefits, or supports relevant to your circumstances.
- To prepare and deliver your personalised eligibility report.
- For GrantMatch Care Plus and Premium: to prepare draft applications or complete and submit applications on your behalf.
- To communicate with you about your order, report, or application status.
- To improve our service and databases based on aggregated, anonymised patterns.
- To comply with our legal and tax obligations.
We do not use your data for automated decision-making or profiling beyond eligibility matching.
4. Legal Basis for Processing (GDPR)
GrantMatch Ireland processes personal data in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. Our legal bases for processing are:
- Contract performance: processing your data to deliver the service you purchased.
- Legitimate interests: sending follow-up communications directly related to your report or application.
- Legal obligation: retaining financial records as required by Irish tax law.
- Consent: where you have explicitly opted in to receiving updates about new grants or supports (e.g. via our email sign-up). You may withdraw consent at any time.
Special category data (GrantMatch Care): Health conditions, disability status, and related personal circumstances submitted through GrantMatch Care are special category data under Article 9 GDPR. We process this data solely on the basis of your explicit consent (Article 9(2)(a)), given when you complete and submit the eligibility questionnaire. You may withdraw this consent at any time by contacting us at hello@grantmatch.ie, and we will delete your data subject to any legal retention requirements.
5. Data Sharing
We are committed to protecting your personal data. We do not sell your data to any third party.
We share your data only in the following limited circumstances:
- Service delivery: with trusted processors necessary to deliver our service (Stripe for payments, Microsoft for questionnaire collection and email, Google Analytics for anonymised website analytics). All processors are GDPR-compliant.
- Application submission (Care Premium only): with the relevant government department or agency solely for the purpose of submitting an application on your behalf. This is only done with your explicit instruction and as part of the service you have purchased.
- Legal requirement: where we are required by law, court order, or regulatory authority to disclose information.
We do not transfer your data outside the European Economic Area (EEA) except where covered by appropriate safeguards (e.g. EU–US Data Privacy Framework).
6. Reports Requested via a Partner Firm (Accountants & Advisors)
Some Irish accounting firms and business advisors subscribe to a GrantMatch Partner Plan in order to deliver co-branded grant eligibility reports to their own clients. Where this applies to you, the data flow is slightly different and you should read this section in conjunction with the rest of this policy.
- Who is the controller? The Partner Firm (your accountant or advisor) is the data controller for your business data submitted via our questionnaire. GrantMatch acts as a data processor on their instructions.
- What data we receive. Only the business profile information needed to run the eligibility match: company details, county, sector, headcount, turnover, project description, and the named contact's name, email, and phone. We do not collect special-category data via the Partner flow.
- What we do with it. We run the match engine, generate a co-branded PDF report, and email that report to the Partner Firm. The Partner Firm delivers the report to you. GrantMatch does not contact you directly except where you reply to a delivery email.
- Sub-processors. Stripe Payments Europe Ltd (handles the partner's subscription payment, not your data), Resend.com (transactional email delivery to the partner), Vercel Inc. (web hosting), and Supabase Inc. (database hosting). The current list is published in our Terms & Conditions, Section 9.5.
- Retention. Questionnaire responses and generated reports are retained for 24 months from delivery, then securely deleted. You or the Partner Firm may request earlier deletion at any time by emailing hello@grantmatch.ie; deletion is completed within 30 days.
- Your rights. All GDPR rights set out in Section 10 (Your Rights) below apply equally to data processed under the Partner flow. You may exercise these rights either through your Partner Firm or directly with GrantMatch.
7. Data Storage & Security
Your personal data is stored securely and is accessible only to authorised GrantMatch personnel. We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. Payment data is handled exclusively by Stripe and is never stored on our systems.
8. Data Retention
We retain your personal data only for as long as necessary to deliver your service and for up to 6 years thereafter to meet our Irish tax and legal obligations. Health-related and personal circumstance data collected for GrantMatch Care services will not be retained beyond 2 years after your service is completed unless you have an ongoing engagement with us. You may request earlier deletion at any time (see Your Rights below).
9. Intellectual Property
All content on this website — including our grant and supports databases, report formats, eligibility methodology, scoring systems, written descriptions, and visual design — is the intellectual property of GrantMatch Ireland and is protected by Irish and EU copyright law.
- Your eligibility report is produced for your personal use only. It may not be resold, redistributed, or published without our written consent.
- You may not reproduce, copy, or replicate our database, methodology, or report structure for commercial or personal purposes.
- Nothing in these terms transfers any intellectual property rights to you.
10. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate or incomplete data.
- Delete your data ("right to be forgotten"), subject to legal retention requirements.
- Restrict or object to certain types of processing.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time for processing based on consent (e.g. marketing emails).
- Lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie if you believe your rights have been infringed.
To exercise any of these rights, contact us at hello@grantmatch.ie. We will respond within 30 days.
11. Cookies
We use the following cookies on this website:
- Essential cookies: required for basic site functionality.
- Analytics cookies: Google Analytics collects anonymised data on how visitors use the site (pages visited, session duration, traffic source). No personally identifiable information is collected. You can opt out via your browser settings.
- Marketing cookies: we use Google Tag Manager and the LinkedIn Insight Tag to understand how visitors reach our site and to measure the effectiveness of any advertising. These tools may set cookies to track activity across sessions. You can opt out via your browser settings or a tool such as the Digital Advertising Alliance opt-out.
You can manage or disable cookies at any time through your browser settings. Disabling analytics or marketing cookies will not affect your ability to use the site.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be published on this page with an updated effective date. Continued use of our services after any changes constitutes acceptance of the revised policy.
13. Contact
For any privacy-related questions or to exercise your data rights, contact us at:
GrantMatch Ireland
Email: hello@grantmatch.ie