Privacy notice
Personal information used for applications, public profiles, paid voting, standings and award delivery.
1. Who is responsible
GO Vertical ICM is the award brand. The controller’s full legal entity name, postal address and working privacy email must be identified before collection. Any required EU/UK representative or data-protection officer details must also be provided.
2. Information collected and its sources
- From applicants: name, email, role, authorized representative details, legal entrant name, country, eligibility declarations and rules-acceptance records.
- Public profile fields: inventor or startup display name, innovation title, women’s health focus, development stage, nonconfidential summary, website, logo and authorized images.
- From voters and transaction services: selected entrant, quantity, amount, timestamps, country or eligibility information, payment status, transaction references and available purchaser contact details.
- From our systems and correspondence: support messages, correction requests, security logs and proportionate fraud-prevention data.
- From potential winners: identity, authority, tax and payout details needed for verification and prize delivery.
Do not submit health histories, patient records, genetic data or other sensitive personal information in the application or public profile. This is an innovation award, not a patient intake service. Enter card details only into the authorized provider checkout. Do not put them into monday.com, a public profile or an email.
3. How information is used
Information is used to administer eligible applications, match payments, create profiles and applicant voting links, count votes, publish fortnightly top-five standings, verify results, provide support and deliver awards. It is also used as needed for security, fraud prevention, financial records, legal compliance and resolving disputes.
Where applicable, contract necessity or requested pre-contract steps support essential participation processing; legal obligations support required records and reporting; and legitimate interests may support proportionate security, fraud prevention and business-contact administration after considering affected rights. The final notice must map the actual purposes and legal bases to the implemented workflow, including business representatives.
Optional newsletters and marketing require a separate choice where consent is required. Refusing or withdrawing marketing consent does not affect eligibility or paid votes. Essential award and receipt communications are separate from marketing.
4. What is public
The designated public applicant profile, voting link and published vote/ranking information can be viewed internationally. Top-five updates identify leading candidates every two weeks; result announcements identify winners. Public content may also be shared through the GO Vertical network for award recognition.
Applicant contact details, verification documents, tax data and payment credentials must not be included in public profiles. Voter names and email addresses are not intended to be publicly displayed; the voting platform settings must be verified before launch. Information you place in a public summary can be copied or shared by others.
5. Providers and recipients
The planned workflow uses monday.com for applications and internal records, Gmail for automated application confirmation emails, and WordPress and its hosting services for candidate profiles and manually updated standings. Candidate-specific checkout links use a payment provider whose acceptance of the model is still to be confirmed. PollUnit, Make and Zapier are not part of the planned 2026 voting workflow. Necessary support, email, security, professional-adviser and accounting services may receive relevant information. Disclosures may also be necessary to comply with law or resolve a lawful dispute.
Access should be limited to what each recipient needs. Final provider entities, roles, contracts, enabled integrations and the data shared with each must be confirmed before launch. Providers may have separate privacy notices for processing they control themselves.
6. International processing
Global participation can involve handling information in the United States and other provider locations. Where a transfer mechanism is legally required, the organizer must identify and implement it, such as an applicable adequacy decision or appropriate contractual safeguards with necessary supplementary measures. Acceptance of these rules alone is not a substitute for transfer safeguards.
Before collection: identify processing destinations, applicable transfer arrangements and a working channel for obtaining information or copies of relevant safeguards.
7. Retention and security
Keep records only for the defined participation, prize-delivery, dispute, accounting and legal purposes. Apply access controls, secure service configurations and proportionate safeguards. No online system can promise absolute security.
Before collection: adopt and disclose periods or specific retention criteria for incomplete applications, confirmed entries and votes, payment and tax records, verification documents, public profiles and results archives, support messages, marketing data and backups. Align the public-profile archive with the content-license duration and removal process.
8. Rights and contact
Depending on applicable law, you may request access, correction, erasure, portability, restriction of processing or objection to processing, and withdraw consent without affecting earlier lawful processing. You may complain to your competent data-protection authority. Certain records may be retained to meet legal obligations or establish or defend claims.
Where applicable, additional regional rights concerning targeted advertising, sale or sharing of personal information must be disclosed after auditing the site’s actual practices. The final notice must explain how to exercise rights and how requests are verified proportionately. Do not send identity documents through a public form.
Required application and payment fields are needed to administer participation. If required information is missing, entry, voting or payout may not be possible. Optional marketing details are not a condition of participation.
9. Automation and review
For the 2026 edition, the team verifies application payments, prepares candidate profiles and reconciles voting transactions manually. Marking an application as paid in monday.com triggers the configured Gmail confirmation email. Published vote totals and rankings are updated manually and remain provisional until final verification. Report payment, eligibility or recording errors to info@goverticalicm.com for human review.
Confirm any provider fraud profiling or solely automated decisions with legal or similarly significant effects. Where applicable, disclose the logic, significance, consequences and review or contest rights before using them.
10. Cookies, analytics and embedded services
The WordPress site may load analytics, advertising pixels, chat tools and other site-wide services even when the award form is not embedded. Visiting an external voting or checkout page may involve that provider’s cookies and notices. Do not assume the award page is free of tracking.
Before launch: inventory actual cookies, pixels, chat, analytics and embeds; disclose purposes, providers and durations; and configure consent or opt-out controls as applicable. Nonessential tools that require prior consent must not load before that consent. A notice alone does not change a tool’s behavior.
11. Adults only and notice changes
Applications and paid voting are intended only for adults eligible under the Official Rules. If information about an ineligible minor is submitted, contact the privacy channel for review and appropriate removal. Material changes to data use will be communicated and any required new consent obtained. The effective date and version must be published before collection begins.