Last updated: 11 October 2026. This explains how Laura Quinn trading as Commercial Growth handles information through commercialgrowth.ie, the free Growth Check and the optional public Website Scanner.
1. Controller and contact
The data controller is Laura Quinn, sole trader trading as Commercial Growth (CRO registered business-name number 794953). Business address: Ballyea, Ballina, County Tipperary, Ireland. Website: commercialgrowth.ie. For privacy requests or enquiries, contact lauraqbusiness@gmail.com.
2. What we process
Scanner processing to provide a report: the public HTTPS website you enter is sent to the Cloudflare Worker to check scanning permissions and inspect accessible homepage HTML. The scanner may receive your connection information, and the target website may record an automated visit in its own logs. These steps do not, by themselves, create a Commercial Growth database record of the submitted domain. Technical security and hosting logs may be handled by the relevant providers.
Optional domain-history storage (only if separately activated): if you confirm your authority to share a website domain and affirmatively choose to save a scanner record, the private database may contain the domain, broad finding categories, the completed scan outcome, any partial-scan flag, timestamp, notice version, consent time and consent purpose, and a one-way hash of a randomly generated deletion code. We do not store unsuccessful scans in this optional table. It is not designed to hold the scanned HTML, IP address or browser analytics identifier. Domain-level history is off by default unless the storage service is enabled. It is separate from optional website analytics.
Growth Check and optional direct submissions: answers ordinarily remain in your browser session storage and are used to create your free snapshot. Completing the Check alone does not send your answers to Commercial Growth. If you choose to submit your findings through a direct form (when enabled), we receive your name, business name, email, business description, answers, optional business link and broad priority categories to respond to your enquiry. You can also open an email draft, or use the separate Tally enquiry form.
Sharing by email: you can choose to copy a summary into your own device clipboard, then paste it into an email you review and send. Opening an email compose link passes only the recipient and a generic subject, not your diagnostic answers, in the link. Your email provider processes anything you decide to send. Avoid including confidential information.
Deletion codes: if you deliberately save a scanner domain or submit a private Growth Check record, the system returns a one-time private code. A SHA-256 hash of that code, not the code itself, is stored with the record. Anyone holding the code can request deletion of the corresponding record. The browser does not automatically save the code; keep it securely if you want to delete the record later.
Enquiries and optional analytics: if you use a separate Tally form or email, we receive the details you decide to provide. Consent-based Google Analytics may receive limited website-use events and categorical journey steps; we do not intentionally send full URLs entered in the scanner, names, emails, free-text answers or lead IDs in custom analytics events.
Please do not include passwords, confidential customer or staff records, medical information, special-category personal data or information you are not authorised to share.
3. Why we process it and legal bases
- To deliver a scan or an on-device Growth Check at your request, and operate and secure these services: our legitimate interest in providing and protecting a useful preliminary commercial tool, Article 6(1)(f), with a balancing assessment where personal data is involved.
- To keep the optional website scan record described above: your affirmative consent, Article 6(1)(a). Declining does not prevent a scan.
- Optional Google Analytics: consent, Article 6(1)(a), and applicable ePrivacy consent requirements.
- Client invoicing, tax and other statutory records: legal obligations, Article 6(1)(c), where relevant.
- To handle a diagnostic you deliberately submit and respond to your requested business enquiry: steps at your request before a contract under Article 6(1)(b), where applicable, or legitimate interests in responding to enquiries under Article 6(1)(f), subject to a balancing assessment. Contact details are not needed to use the free tools but a name and email are required if you request a personal response through direct submission. This is not permission for marketing emails.
4. Retention and deletion
Where opt-in scanner storage is activated, each record is scheduled to expire after 30 days. Where the private Growth Check submission feature is activated, each database lead is scheduled to expire 365 days from submission; follow-up correspondence, invoices or active client records may be held separately under their applicable retention rules. Unsuccessful Tally enquiries and ordinary email enquiries are generally reviewed after 12 months from the last meaningful contact. Records needed for Irish accounting, tax or legal claims may be retained longer where justified or required by law. Active D1 records are eligible for immediate erasure using the deletion code. Expired D1 records are removed by a scheduled daily deletion trigger; the stated duration is a maximum expiry policy, not a promise that external backups or technical logs are erased at the same instant. Cloudflare/GitHub/Tally/Google technical logs and backups have their own retention arrangements. Your browser stores Check answers for the browser session or until the Check is reset. Analytics consent preference is renewed within 180 days; Google Analytics first-party cookies are configured for up to 90 days.
5. Recipients and international transfers
The website uses GitHub Pages for static hosting and Cloudflare for the scanner, security verification (Turnstile), and potentially private D1 storage. It may also use Tally BV (Belgium) for external enquiry forms, Google Analytics 4 only with analytics consent, and email providers when you contact us. We disclose information to service providers as required to deliver these functions, under applicable terms and data-processing arrangements. Processing may involve access from outside the EEA; where GDPR transfer rules apply, an appropriate transfer mechanism and safeguards are required. Relevant provider agreements, transfer arrangements and log-retention details can be requested using the contact information above. Using an EU database does not mean all associated processing is confined to the EU. We do not sell diagnostic information.
6. Automated findings
The free scanner and Growth Check use rules based on publicly readable homepage HTML or answers you choose. They may be incomplete, especially for JavaScript-rendered websites. They do not verify financial performance or make a solely automated decision with legal or similarly significant consequences. Any paid audit or consultancy proposal is assessed by Laura.
7. Your choices and rights
Where applicable, you may request access, correction, erasure, restriction, portability or object to certain processing. If processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing. Use the “Privacy choices” control for optional analytics. If you opted into scanner history, use the immediate “Withdraw consent and delete record” button after the scan or paste your private deletion code into the form below at any time. You can similarly delete a directly submitted Growth Check record using its private code. If the code is lost, contact us; we may need more information to locate and verify the relevant record. Deleting an original record does not automatically delete separately sent emails, invoices or processor security logs. To make a rights request or ask about a previously shared enquiry, contact lauraqbusiness@gmail.com; we may ask for sufficient information to locate the record and verify entitlement before disclosing personal data. You may lodge a complaint with the Irish Data Protection Commission.
Delete a voluntarily saved scanner or Growth Check record
This private deletion form is available only when the secure storage feature is activated. You do not need to give a reason. Your code is sent in the HTTPS request body, not in a web address. Keep deletion codes private: anyone holding the code can erase the corresponding record.
If you cannot access the code or need to exercise other rights, email lauraqbusiness@gmail.com. We will respond in accordance with applicable data-protection deadlines and may request proportionate verification before disclosing information.
8. Marketing and security
Sharing a report or providing contact details does not sign you up for marketing. Scanner records are not intended as an automatic sales prospecting list. We use HTTPS, input validation, abuse controls and server-side access restrictions, though no online service is risk-free. Do not submit sensitive materials to this public tool.
9. Updates
We review this notice when tools, processors or purposes change. Changes will be reflected here with an updated date. Contact lauraqbusiness@gmail.com for privacy questions.