Privacy Policy

Effective Date: August 1, 2025

1. Introduction

GNL Research Inc. (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of our clients, research participants, partners, and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect your information when you interact with our services, in compliance with applicable data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR) – European Union
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) – United States
• Lei Geral de Proteção de Dados (LGPD) – Brazil
• Other applicable international privacy and data protection regulations

By accessing our services or submitting information to us, you agree to the practices described in this Privacy Policy.

2. Scope of Application

This Privacy Policy applies to all personal data processed by GNL Research Inc., including:

• Information collected through our website, platforms, and online surveys
• Information provided by clients, research participants, and business partners
• Information obtained through third-party service providers and affiliates

This Policy does not apply to information collected by unrelated third-party websites or services that may be linked to our platforms.

3. Information We Collect

We may collect the following categories of personal information, depending on the context of your engagement with us:

1. Contact Information: Name, email address, phone number, postal address.
2. Demographic Data: Age, gender, occupation, household information, region.
3. Professional Data: Job title, industry, organizational affiliation.
4. Survey and Research Data: Responses, opinions, feedback, and preferences provided during research activities.
5. Technical Data: IP address, device identifiers, browser type, operating system, cookies, and browsing activity.
6. Compliance Data: Consent records, opt-in/opt-out preferences, and communication logs.

We do not intentionally collect sensitive categories of personal data (e.g., health, biometric, religious, or political data) unless explicitly required for research purposes and only with your explicit consent.

4. How We Use Personal Information

We process personal data solely for legitimate business and research purposes, including:

• Delivering and improving market research services
• Analyzing trends, consumer behavior, and survey results
• Managing client relationships and communications
• Verifying participant eligibility and preventing fraud
• Meeting legal and regulatory requirements
• Ensuring the security and integrity of our systems
• Obtaining necessary consents and honoring user preferences

We will not sell your personal data to third parties.

5. Legal Basis for Processing (GDPR)

When required by GDPR, we rely on the following legal bases for processing personal data:

• Consent: When you voluntarily provide data for surveys, marketing, or newsletters.
• Contractual Necessity: To deliver services you request or to fulfill agreements with clients.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interest: To conduct research, improve services, and ensure system security, provided such interests do not override your rights.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

Under GDPR (EU/EEA):

• Right of access, rectification, erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time

Under CCPA/CPRA (California):

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt out of the “sale” or “sharing” of personal information
• Right to non-discrimination for exercising privacy rights

Under LGPD (Brazil):

• Right to confirm processing, access, correction, and portability
• Right to anonymization, blocking, or deletion of unnecessary/excessive data
• Right to revoke consent at any time

To exercise your rights, contact us at info@gnlresearchgroup.com. We will verify your identity before processing requests.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law, regulation, or contractual obligation. Once data is no longer needed, it will be securely deleted, anonymized, or aggregated.

8. Data Sharing and International Transfers

We may share personal data with:

• Clients: For aggregated, anonymized research insights
• Vendors and Service Providers: For IT hosting, data processing, fraud detection, and operational support
• Legal Authorities: When required by applicable law or to protect our rights

If data is transferred outside your country (e.g., from the EU/EEA to the U.S.), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent measures.

9. Data Security

We implement administrative, technical, and organizational measures to safeguard personal data, including:

• Encryption of sensitive data during transfer and storage
• Access control and authentication mechanisms
• Continuous monitoring for fraud and unauthorized activity
• Employee confidentiality agreements and training

Despite these safeguards, no system is 100% secure. You acknowledge that you share data at your own risk.

10. Cookies and Tracking Technologies

Our website uses cookies, tracking pixels, and similar technologies to:

• Improve user experience and navigation
• Measure traffic, engagement, and campaign effectiveness
• Detect fraud and prevent abuse

You can manage cookie preferences through your browser settings. For EU users, we provide cookie consent banners in compliance with ePrivacy Directive and GDPR.

11. Children’s Privacy

Our services are not directed to children under the age of 16 (or the applicable local age of digital consent). We do not knowingly collect personal data from minors. If we become aware of such collection, we will promptly delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or applicable laws. Updates will be posted on this page with a revised Effective Date. We encourage you to review this Policy regularly.

13. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact: