Privacy Policy

Last updated: 1 May 2025

1. Who We Are

GeoMaster is a trading name of Greenstone Energy Ltd., a company registered in England and Wales (Company No. 17151768). In this Privacy Policy, “GeoMaster”, “we”, “us”, and “our” refer to Greenstone Energy Ltd.

Our Data Protection Officer can be contacted at: [email protected]

2. What Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, password (hashed), company name, and role.
  • Usage data: pages visited, features used, session duration, and interaction logs within the GeoMaster platform.
  • Well and geological data: data you upload or stream into GeoMaster, including WITSML data, LAS files, and geological models. This data belongs entirely to you.
  • Communication data: emails, support tickets, and feedback submissions sent to us.
  • Payment data: billing address and payment method (processed by our payment provider — we do not store full card details).
  • Technical data: IP address, browser type, operating system, and device identifiers collected via cookies and server logs.

3. How We Use Your Data

We use personal data for the following purposes:

  • To provide, maintain, and improve the GeoMaster platform.
  • To process your subscription and manage billing.
  • To communicate with you about your account, updates, and support requests.
  • To send product updates and marketing communications (with your consent, which you may withdraw at any time).
  • To monitor platform performance, diagnose technical issues, and prevent fraud or abuse.
  • To comply with our legal obligations.

4. Legal Basis for Processing (UK GDPR)

  • Contract: Processing necessary to perform our contract with you (delivering the GeoMaster service).
  • Legitimate interests: Platform security, fraud prevention, improving our services, and direct marketing to existing customers.
  • Consent: Email marketing to prospects and optional data collection features.
  • Legal obligation: Retaining records as required by UK law.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Sub-processors: Cloud infrastructure providers (hosting, storage), payment processors, analytics tools, and customer support platforms. All sub-processors are contractually bound to handle data securely and in accordance with UK GDPR.
  • Legal authorities: Where required by law or to protect the rights, property, or safety of GeoMaster, our users, or others.

6. Data Retention

We retain personal data for as long as your account is active, plus a period of 30 days after closure (to allow data export). Financial records are retained for 7 years as required by HMRC. You may request deletion at any time by contacting [email protected].

7. Your Rights (UK GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Object to processing or request restriction.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact our DPO at [email protected]. We will respond within 30 days.

8. Security

We protect your data using AES-256 encryption at rest and TLS 1.3 in transit. Our infrastructure is hosted in UK-based data centres. We conduct regular security audits and maintain an incident response plan. In the event of a data breach, we will notify affected users and the ICO as required by law.

9. Cookies

We use cookies to maintain session state, remember preferences, and analyse platform usage. For full details, see our Cookies Policy.

10. International Transfers

Your data is primarily processed and stored in the United Kingdom. Where data is transferred outside the UK (for example, to sub-processors with infrastructure in the EEA or USA), we ensure adequate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms approved by the ICO.

11. Children

GeoMaster is a professional tool intended for adults in the oil and gas industry. We do not knowingly collect data from anyone under the age of 18. If we become aware of such collection, we will delete the data immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the platform. The date at the top of this page indicates when the policy was last revised.

13. Contact

For any privacy-related questions, contact our Data Protection Officer at [email protected].

GeoMaster Ltd. | Trading name of Greenstone Energy Ltd. | Registered in England & Wales | Company No. 17151768