Back to Home

GDPR Information

Last updated: 15 May 2026

1. Purpose of This Page

This page gives a practical GDPR overview for people who use the R&D-Pal website or workspace, or whose information is shared with us in connection with a ProfitPal engagement.

It should be read alongside our Privacy Policy. It is intended as a public information page, not as a substitute for any separate engagement letter, data processing terms, or tailored legal advice.

2. Controller Details

The controller for the personal data described on this page is Denis Breen & Co Limited, trading as ProfitPal, Company Number 499506.

  • Registered office: No. 1 Maritana Gate, Canada Street, Waterford, Ireland
  • Dublin office: 24 Main St, Blackrock, Dublin, Ireland
  • Email: [email protected]
  • Phone: (01) 524 2918 or (051) 876 366

ProfitPal's GDPR owner is Denis Breen. We are not currently stating that we are required to appoint a formal Data Protection Officer.

3. How R&D-Pal Fits Into the Service

R&D-Pal is an invite-only workspace used to support ProfitPal's R&D tax credit advisory process. It helps gather information, organise documents, manage working materials, and support review workflows between our team and authorised client contacts.

Where a client organisation provides personal data about its own personnel or stakeholders through the workspace, that organisation remains responsible for ensuring it has an appropriate lawful basis to share that data with us.

4. Categories of Data

We may process:

  • contact and identity information for client users and prospective clients;
  • communications and correspondence with our team;
  • project, document, and workspace materials relevant to R&D claim preparation;
  • basic technical and security information such as IP address, session data, and device or browser details; and
  • marketing preferences where you choose to receive updates.

5. Why We Process Data

Our processing activities may include:

  • responding to enquiries and onboarding prospective clients;
  • setting up and administering workspace access;
  • reviewing and organising information relevant to client work;
  • supporting document preparation, collaboration, and internal quality review;
  • using third-party technology tools, including AI-assisted tools where appropriate, to help deliver the service;
  • maintaining platform security and service reliability; and
  • keeping records required for operational, regulatory, legal, or professional reasons.

6. Lawful Bases

Depending on context, we rely on:

  • Article 6(1)(b) contract;
  • Article 6(1)(f) legitimate interests;
  • Article 6(1)(c) legal obligation; and
  • Article 6(1)(a) consent, where consent is the appropriate basis.

7. Service Providers and Transfers

We may use third-party providers for hosting, communications, security, document handling, and technology support. Some of those providers may process data outside the EEA. Where that happens, we use an appropriate transfer mechanism under applicable data protection law.

We can provide additional information about relevant provider categories on request where appropriate.

8. Automated Decision-Making

R&D-Pal may use automation or AI-assisted tools as part of drafting or workflow support, but we do not present this public workspace as making decisions based solely on automated processing that produce legal or similarly significant effects on individuals without human involvement.

9. Data Subject Rights

Under GDPR, you may have rights of access, rectification, erasure, restriction, objection, and portability, together with the right to withdraw consent where consent applies.

To exercise a right, email [email protected] and include enough detail for us to identify your request. We may need to confirm identity before acting on it.

10. Retention and Security

We retain data for as long as reasonably necessary for the relevant purpose and for any legal, tax, regulatory, insurance, or professional retention requirements that apply to us. We also use reasonable technical and organisational safeguards to protect data in our systems and with our service providers.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Irish Data Protection Commission at www.dataprotection.ie.

12. Contact

For GDPR-related queries, contact:

  • Email: [email protected]
  • Attention: Denis Breen
  • Post: Denis Breen & Co Limited, No. 1 Maritana Gate, Canada Street, Waterford, Ireland