Privacy Policy
This policy explains what data GrantMetric collects, why, and how you can control it. We are based in Greece and operate under the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal data is:
Kerasountos 94, Aigaleo 12242, Greece
GEMI: 181077901000
Email: legal@grantmetric.com
2. What Data We Collect
a) Email address — if you subscribe to our free weekly grant alerts. This is collected via Google Forms and stored in a private Google Sheet accessible only to GrantMetric. We use it solely to send you the weekly digest. You can unsubscribe at any time (see Section 6).
b) Usage data via Google Analytics 4 — pages visited, session duration, device type, country. This data is pseudonymised and collected only after you give cookie consent. We use it to understand which content is useful and improve the platform. We do not use it to identify individuals.
c) Advertising data via Google AdSense — if you accept cookies, Google may serve personalised ads based on your browsing history. Google acts as an independent data controller for this. See Google's own Privacy Policy.
d) Contact form data — name and email when you contact us. Used only to respond to your inquiry. Sent via Brevo and not retained beyond 12 months.
3. Legal Basis for Processing
| Processing Activity | Legal Basis (GDPR Art. 6) |
|---|---|
| Email newsletter subscription | Consent (Art. 6(1)(a)) |
| Google Analytics (with cookie consent) | Consent (Art. 6(1)(a)) |
| Google AdSense (with cookie consent) | Consent (Art. 6(1)(a)) |
| Contact form response | Legitimate Interest (Art. 6(1)(f)) |
| Server logs (error monitoring, security) | Legitimate Interest (Art. 6(1)(f)) |
4. Cookies
We show a cookie consent banner on your first visit. Until you accept, Google Analytics and AdSense cookies are blocked.
| Cookie | Purpose | Duration |
|---|---|---|
| gm_cookie_consent | Stores your cookie consent choice | localStorage (persistent) |
| _ga, _ga_* | Google Analytics — distinguish users | 2 years |
| Google AdSense | Personalised advertising (if accepted) | Varies (Google-controlled) |
To withdraw cookie consent, clear your browser's localStorage and cookies, then refresh the page — the banner will reappear. You can also opt out of personalized advertising at Google Ads Settings.
5. Third Parties & Data Sharing
We do not sell your personal data. We share data only with:
- Google LLC — Analytics and AdSense. Data may be transferred outside the EU under Standard Contractual Clauses.
- Brevo (Sendinblue) — Contact form email delivery only. Your email is not added to any marketing list via Brevo.
- Cloudflare — Infrastructure provider. Processes request metadata (IP, headers) for security and performance.
- Affiliate partners (Instrumentl, Fiverr) — If you click an affiliate link, the destination site may set its own cookies. We receive no personal data from these clicks.
6. Email Alerts — Subscription & Unsubscribe
When you subscribe to our free weekly grant alerts, your email is stored in a private Google Sheet. We use it only to send the weekly digest.
To unsubscribe: reply to any alert email with "unsubscribe" in the subject line, or email legal@grantmetric.com and we will remove your address within 5 business days. We do not use third-party email marketing platforms for this list — there is no automated unsubscribe link, and we process removals manually.
7. Data Retention
- Email newsletter subscribers: until you unsubscribe or request deletion
- Contact form messages: up to 12 months after last correspondence
- Google Analytics data: 14 months (configured in our GA4 settings)
- Server access logs: up to 30 days (Cloudflare default)
8. Your Rights Under GDPR
As an EU resident, you have the right to:
- Access — request a copy of the personal data we hold about you
- Erasure — request deletion of your personal data ("right to be forgotten")
- Rectification — ask us to correct inaccurate data
- Restriction — ask us to limit processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, email legal@grantmetric.com. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at dpa.gr.
9. Children's Privacy
GrantMetric is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has submitted their email, please contact us at legal@grantmetric.com and we will delete it.
10. Affiliate Disclosure
Some grant detail pages on GrantMetric contain affiliate links (primarily to Instrumentl and Fiverr). If you click an affiliate link and make a purchase, GrantMetric may receive a commission at no extra cost to you. Affiliate relationships do not influence which grants we display, the order we show them, or the content of our editorial articles.
11. Changes to This Policy
We may update this Privacy Policy when our data practices change. Material changes will be noted with an updated "Last Updated" date at the top of the page. We encourage you to review this page periodically.
Contact & Data Requests
For any privacy-related question, data access request, or unsubscribe request:
legal@grantmetric.com
Response time: up to 5 business days for unsubscribes, up to 30 days for GDPR rights requests.