Privacy Policy
Draft pending business/legal review.
Draft pending business/legal review
This notice describes the intended enquiry workflow. The legal entity acting as controller, contact details, final retention period and lawful basis must be confirmed before launch. Enquiries must not be enabled until this review is complete.
Information you provide
The contact form asks for your name, email and message, with an optional phone number. A quote enquiry also asks for your business, requested service and contact preference; website and budget are optional. Do not submit sensitive personal data.
How enquiries are used
Enquiry details are used to respond, understand requirements and prepare a proposal. We do not add enquirers to a marketing list. Pre-contractual steps and/or legitimate interests may be appropriate bases, subject to the controller’s review. The acknowledgement is not marketing consent.
Storage and service providers
Enquiries are stored in Cloudflare D1. Cloudflare Turnstile processes technical signals to protect the forms against abuse. Cloudflare may process data outside the EEA; the controller must review the applicable processor terms and transfer safeguards before launch. No CRM synchronisation is connected. When configured, Resend sends the business owner a notification containing an enquiry reference, type and time, without your name, contact details or message. Its processor terms and transfer safeguards must also be reviewed before activation.
Security and retention
The intended default is to review or remove enquiries after 180 days, unless a documented reason requires longer retention. This is a proposed period pending confirmation. A short-lived salted network identifier limits spam; raw IP addresses are not stored in the lead record. Platform security logs are subject to Cloudflare settings and retention.
Your choices and rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. Use the contact form to raise a request; a verified controller contact must be published before launch. You may also complain to Ireland’s Data Protection Commission at dataprotection.ie.
Updates
This draft was prepared on 12 November 2026. Material changes to how enquiries are handled must be reflected here before they take effect.