Purposes and legal bases
We process your data only when we have a lawful basis under GDPR (Articles 6(1)(a)-(f)):

• Responding to enquiries and providing quotes
  • Purpose: communicate, assess fit, prepare proposals
  • Legal basis: legitimate interests; steps prior to a contract
• Delivering our services
  • Purpose: plan, design, build, host, and support websites; manage accounts and projects
  • Legal basis: performance of a contract; legitimate interests
• Billing and compliance
  • Purpose: invoicing, accounting, tax, and legal obligations
  • Legal basis: legal obligation; performance of a contract
• Marketing and newsletter
  • Purpose: send updates, offers, and insights if you subscribe
  • Legal basis: consent (you can withdraw anytime); soft opt‑in where permitted for existing customers
• Analytics and site improvement
  • Purpose: understand site performance and improve content
  • Legal basis: consent (via cookie banner) for non-essential cookies; legitimate interests for basic security logs
• Security and fraud prevention
  • Purpose: keep our site and services secure, prevent abuse
  • Legal basis: legitimate interests; legal obligation

Cookies and similar technologies

• We use essential cookies to make the site work and, with your consent, analytics/marketing cookies to measure and improve performance.
• You can manage your choices at any time via our cookie banner or browser settings.
• For details, including a list of cookies and their providers, please see our Cookie Policy.

Who we share data with
We do not sell your personal data. We share data with:

• Hosting and infrastructure: our website is hosted by Hostinger
• Communications: email, form delivery, and support tools
• Analytics and tag management: to understand site usage (only with consent)
• Payment processing: secure third‑party processors if you pay online (we do not store full card details)
• Professional services: accountants, legal advisors, insurers
• Regulators or law enforcement: where required by law

We enter into data processing agreements with our processors to protect your data.

International transfers
If we transfer personal data outside the EEA/UK (for example, to service providers), we ensure appropriate safeguards, such as:

• Adequacy regulations/decisions; and/or
• Standard Contractual Clauses (SCCs), and supplementary measures where necessary
  Details are available on request.

Data retention
We keep personal data only as long as necessary for the purposes set out above:

• Enquiries and contact form submissions: up to 24 months
• Newsletter data: until you unsubscribe or your consent is withdrawn
• Client/project records: for the duration of the engagement and up to 7 years thereafter (tax/accounting)
• Technical logs: typically 12 months
• Analytics data: as configured in our analytics tool and subject to your consent
  We may retain data longer where required by law or to establish, exercise, or defend legal claims.

Your rights (EEA/UK)
You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (in certain circumstances)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (does not affect prior processing)
• Not be subject to solely automated decisions with legal or similar significant effects

To exercise your rights, contact us at info@websitecompany.ie. We may need to verify your identity. We aim to respond within one month.

Children
Our services are not directed to children. In Ireland, the digital age of consent is 16. We do not knowingly process personal data of children under 16.

Security
We use technical and organisational measures appropriate to the risks, including encryption (HTTPS/SSL), access controls, and regular monitoring. No method of transmission or storage is 100% secure, but we work to protect your data continuously.

Links to other websites
Our site may contain links to third‑party sites. We are not responsible for their privacy practices. Please review their policies.

Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. Material changes may also be communicated by email or banner notice.

How to contact us

• Email: info@websitecompany.ie
• Phone: +353-867807401
• Postal address: Birch Way, The Willows, Dunshaughlin, Co. Meath, Ireland

Complaints
If you have concerns, please contact us first. You also have the right to lodge a complaint with your local supervisory authority. In Ireland:

• Data Protection Commission (DPC)
• Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
• Website: www.dataprotection.ie
• Phone: +353 (0)761 104 800 | +353 (0)57 868 4800

When we act as a processor for clients
For some services (e.g., hosting, maintenance, analytics on client websites), we may act as a processor and handle personal data on behalf of our clients. In those cases, our clients are the controllers and their privacy notices apply. We process such data only under contract and client instructions, implement appropriate security, and support our clients’ GDPR obligations.