PRIVACY NOTICE

Guide Me Financial Solutions Limited

Effective date: 1 September 2026 | Version 1.0

1. Who we are

Guide Me Financial Solutions Limited ("we", "us", "our") is the data controller for the personal data described in this notice. We are regulated by the Central Bank of Ireland as an insurance intermediary.

Data controller	Guide Me Financial Solutions Limited
Registered office	Unit 8, 1st Floor, The GRID, Charlesland, Greystones, Co. Wicklow, A63 T9K1
Company registration number	814651 (registered in Ireland)
Central Bank reference number	C583534
Contact for data protection queries	trevor@guidemefinancial.ie

This notice explains how we collect, use, share and protect your personal data when you deal with us, whether as a client, a prospective client, or a visitor to our website. It should be read alongside our Terms of Business, which summarises some of this information.

2. The personal data we collect

We collect personal data directly from you, and in some cases from product producers, previous advisers (with your consent), and publicly available sources for identity verification purposes. The data we collect includes:

• Identity data — your name, date of birth, PPS number, nationality, and identification documents such as your passport or driving licence.

• Contact data — your address, telephone number and email address.

• Financial data — your income, expenditure, existing policies, pension arrangements, savings, assets and liabilities, and bank account details for the purpose of arranging premium payments.

• Family and dependant data — details of your spouse, partner, children or other dependants, where relevant to the products you are seeking (for example, life cover or income protection).

• Employment data — your occupation, employer, and income, where relevant to underwriting or needs assessment.

• Health data — medical history, current health status and lifestyle information (such as smoking status), where this is relevant to a product you are applying for. This is a special category of personal data under GDPR and is subject to extra protection — see section 4.

• Enquiry data — if you use the appointment or enquiry form on our website, the details you provide there — see section 8.

We ask you to provide only the information that is genuinely necessary. Where we ask for information about another person (for example, a spouse or dependant named on a policy), it is your responsibility to make sure that person is aware of this notice.

3. Why we process your data, and our legal basis

We rely on the following legal bases, depending on the purpose:

• To provide advice and arrange products — necessary to take steps at your request before entering into a contract, and to perform that contract (Article 6(1)(b) GDPR).

• To meet our regulatory and legal obligations — including "know your customer" and anti-money laundering checks, Central Bank record-keeping requirements, and reporting to Revenue where required by law (Article 6(1)(c)).

• To process health data — on the basis of your explicit consent, which we obtain separately and specifically before collecting this information (Article 9(2)(a)). You may withdraw this consent at any time, though this may mean we are unable to continue advising you on the relevant product.

• To improve our service and for limited internal administration — on the basis of our legitimate interests, for example keeping a record of our dealings with you, or using AI-assisted tools to help draft correspondence or summarise file notes (Article 6(1)(f)). We only rely on legitimate interests where this does not override your own rights and interests — see section 6 on AI-assisted processing.

• To send you marketing communications — on the basis of your consent (Article 6(1)(a)), which you can withdraw at any time — see section 7.

4. Special category data — health information

Where a product you are seeking requires medical underwriting (for example, life assurance, specified illness cover or income protection), we will ask you to disclose relevant health information, either directly to us or directly to the insurer.

We collect and hold health data only for as long as is necessary to arrange and, where relevant, service the product in question, and we limit access to this data internally to those who need it to do their job. We do not use health data for marketing purposes, and we do not sell or share health data other than with the insurer(s) to whom you are applying, and any medical practitioner or third party the insurer instructs as part of underwriting your application, with your consent.

5. Who we share your data with

We share your personal data with:

• Product producers — the insurance companies and life offices to whom you apply for cover, so that they can provide a quotation, underwrite the risk, issue the policy and administer claims.

• Our IT and case-management service providers — including Microsoft (for email, document storage and collaboration tools under Microsoft 365) and Zoho, whose CRM system we use to manage client records, each of whom processes data on our instructions under a written data processing agreement and is not permitted to use your data for their own purposes.

• Brokers Ireland — where relevant to our membership obligations or the operation of the Brokers Ireland Compensation Fund.

• Regulators and public bodies — the Central Bank of Ireland, the Revenue Commissioners, the Financial Services and Pensions Ombudsman, the Data Protection Commission, and any other body where we are required by law to disclose information.

• Professional advisers — our accountants, auditors, solicitors and professional indemnity insurers, where necessary.

• A successor firm — in the event that our business, or part of it, is sold or transferred, in which case your data may be transferred to the new owner on the same basis as set out in this notice.

We do not sell your personal data to any third party, and we do not share it for the marketing purposes of any other organisation without your separate consent.

6. Use of AI-assisted tools

We use AI-assisted software tools to help with internal administration — for example, drafting correspondence, summarising file notes, or preparing documents such as this one. Where we do this:

• We remain the data controller at all times. An AI tool is a processor acting on our instructions, in the same way as any other IT service provider.

• We do not input full client files or unnecessary personal data into an AI tool. Where personal data is used, we limit it to what is needed for the specific task.

• A person always reviews and takes responsibility for the final output before it is used or relied upon — we do not allow an AI tool to make decisions about your application, your suitability for a product, or a claim.

• We select tools that do not use our data, or your data, to train their underlying models for the benefit of other customers.

If you have questions about how a specific piece of correspondence or advice was prepared, please ask us.

7. Marketing communications

We will only send you marketing communications — for example, about products, services or renewal reminders that go beyond servicing your existing policy — where you have consented to receive them, or in the limited circumstances permitted by law for similar products to ones you already hold.

You can withdraw your consent to marketing at any time, free of charge, by contacting us at trevor@guidemefinancial.ie or by using the unsubscribe link in any marketing email. Withdrawing consent to marketing does not affect our ability to contact you about products you already hold with us.

8. Our website and appointment enquiry form

Our website does not currently use advertising, retargeting or marketing cookies (such as the Meta Pixel or LinkedIn Insight Tag). It may use strictly necessary cookies needed for the website to function — these do not require consent under the ePrivacy Regulations.

If you use the appointment or enquiry form on our website to ask us to contact you or arrange a meeting, we collect the information you provide in that form — typically your name, contact details, and the subject of your enquiry. We use this information to respond to you and, where you go on to become a client, we transfer it to our CRM system (see section 5). We process this data on the basis that it is a step you have asked us to take before entering into a contract with us (Article 6(1)(b) GDPR), or, if you do not go on to become a client, on the basis of our legitimate interest in responding to your enquiry.

If this changes — for example, if we introduce advertising cookies or a third-party booking tool in future — we will update this notice and, where required, put a cookie-consent tool in place before any such cookie is set.

9. International transfers

We keep your personal data within the European Economic Area (EEA). Microsoft 365 is operated under Microsoft's EU Data Boundary commitments, which keep the processing and storage of customer data within the EU/EEA, and our CRM system is hosted on Zoho's EU data centre in the Netherlands.

If this changes in future — for example, if we adopt a new service provider that processes data outside the EEA — we will ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, before any transfer takes place, and we will update this notice accordingly.

10. How long we keep your data

We retain your personal data for as long as necessary to provide our services to you, and afterwards for the period required by law and regulation. As a general rule:

• We retain client records for a minimum of six years after the end of our relationship with you, in line with Central Bank record-keeping requirements.

• Where a policy remains in force, we retain records for as long as the policy continues, plus the applicable retention period afterwards.

• Where a complaint or a claim is outstanding, or litigation is in prospect, we retain relevant records for as long as necessary to deal with that matter.

• Data collected for marketing consent purposes is retained only for as long as your consent remains valid, and is deleted or anonymised once you withdraw it or it becomes out of date.

At the end of the applicable retention period, we securely delete or anonymise your data.

11. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.

• Rectification — ask us to correct inaccurate or incomplete data.

• Erasure — ask us to delete your data, where we are not required to keep it for legal or regulatory reasons.

• Restriction — ask us to limit how we use your data in certain circumstances.

• Objection — object to processing based on our legitimate interests, or to direct marketing at any time.

• Data portability — ask us to provide certain data to you, or transfer it to another organisation, in a structured, commonly used format.

• Withdraw consent — where processing is based on consent (such as health data or marketing), withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at trevor@guidemefinancial.ie. We will respond within one month of a valid request, and will not charge a fee unless the request is manifestly unfounded or excessive.

We may need to verify your identity before acting on a request, to protect your data from being disclosed to the wrong person.

12. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you, or similarly significantly affects you, without human involvement. Underwriting decisions on any product you apply for are made by the relevant product producer, in accordance with their own privacy notice, which will be provided to you separately during the application process.

13. Keeping your data secure

We maintain appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure, including access controls, encryption of data in transit, and written agreements with our service providers governing how they handle your data. Telephone calls may be recorded for training, quality and regulatory purposes, as set out in our Terms of Business.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at trevor@guidemefinancial.ie so that we can try to resolve the matter. You also have the right to lodge a complaint directly with the Irish Data Protection Commission:

Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28 Telephone: +353 (0)761 104 800 Website: www.dataprotection.ie

15. Changes to this notice

We may update this notice from time to time to reflect changes in our data processing activities or in the law. Where we make a material change, we will notify you (for example, by email, if you are an existing client) and update the effective date at the top of this notice. The current version is always available on our website and on request.

16. Contact us

Email	trevor@guidemefinancial.ie
Telephone	083 132 9704
Post	Guide Me Financial Solutions Limited, Unit 8, 1st Floor, The GRID, Charlesland, Greystones, Co. Wicklow, A63 T9K1