Privacy Notice
The short version
- We only collect what you send us through the contact form or by email: your name, email address and project details.
- We use it to reply to you and, if you become a client, to do the work. We never sell it.
- Our website sets no tracking, analytics or advertising cookies.
- If you accept the optional Google Fonts, Google receives your IP address. If you decline, nothing is sent to Google.
- You can ask us to see, correct or delete your data at any time by emailing info [at] tailormadeweb [dot] tech.
1. Who we are
This website, tailormadeweb.tech, is operated by TailorMadeWeb.tech, a web design studio based in Ireland and run by Alexander Philpot and Cillian Hearns. In this notice, "we", "us" and "our" mean TailorMadeWeb.tech.
For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Act 2018, we are the data controller of the personal data described here.
Contact for all privacy matters: info [at] tailormadeweb [dot] tech. Our postal address is available on request by email. We are a very small business and are not required to appoint a Data Protection Officer, so privacy queries go directly to the founders.
2. What data we collect
Data you give us
- Contact form: your name, email address, the type of service you're interested in, and the message you write. Please don't include sensitive information (such as health details, payment card numbers or passwords) in your message.
- Email and phone: if you contact us directly, we keep the messages and the details you share.
- If you become a client: business contact details, project content (text, images, logos), domain and hosting details, and invoicing and payment records.
Data collected automatically
- Server logs: our web host automatically records technical information when pages are requested, such as your IP address, browser type, pages requested and date and time. This is used to keep the site secure and working.
- Your privacy choice: if you answer the cookie popup, we store your answer in your browser (see section 4).
We do not use analytics, advertising trackers, social media pixels or profiling tools. We do not collect "special category" data (as defined in Article 9 GDPR) on purpose.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your enquiry and sending you a quote | Steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in responding to people who contact us (Art. 6(1)(f)) |
| Delivering and supporting a website for you as a client | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Keeping the website secure and preventing spam and abuse | Legitimate interest (Art. 6(1)(f)) |
| Loading Google Fonts | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have considered the impact on you and believe our use is reasonable and proportionate. You can object at any time (see section 8). We do not use your data for marketing emails unless you separately ask us to. We do not make decisions about you by automated means.
4. Cookies and similar technologies
We comply with the Irish ePrivacy Regulations (S.I. 336 of 2011) and the GDPR. Our site:
- sets no cookies for tracking, analytics or advertising;
- stores one item in your browser's local storage, named
tmw-consent, to remember whether you accepted or declined the optional Google Fonts. This is strictly necessary to respect your choice and is not used to identify you; - loads Google Fonts (Inter and Poppins) from Google's servers only if you accept. When that happens your browser connects to Google and your IP address and browser details are sent to Google, which acts as an independent controller under its own privacy policy. If you decline, your device's standard fonts are used and nothing is sent to Google.
You can change your choice at any time using the "Change cookie settings" button at the bottom of the main site, or by clearing this site's data in your browser.
5. Who we share data with
We do not sell your personal data, and we do not share it for advertising. We use a small number of service providers (processors) who handle data on our instructions:
| Provider | What they do | Data involved |
|---|---|---|
| Formspree, Inc. (USA) | Receives contact form submissions and forwards them to our inbox | Name, email, message, technical data such as IP address |
| Hostinger (web hosting) | Hosts this website and keeps server logs | IP address and request details |
| Our email provider | Delivers and stores our email | Messages you send us |
| Google (only if you accept fonts) | Serves Google Fonts | IP address, browser details |
We may also disclose data where the law requires it (for example to Revenue, the Gardaí or a court), or to our professional advisers (accountants, solicitors) where needed. If our business is ever sold or reorganised, data may be transferred to the new owner, who must honour this notice.
6. Transfers outside the EEA
Some providers, including Formspree and Google, are based in or process data in the United States. Where your data is transferred outside the European Economic Area, we rely on a valid transfer mechanism under Chapter V of the GDPR. That is the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified, or otherwise the Standard Contractual Clauses (together with appropriate safeguards) offered by the provider. You can ask us for more information about the safeguards by emailing us.
7. How long we keep data
- Enquiries that don't lead to work: up to 12 months from our last contact, then deleted.
- Client project files and correspondence: for the length of our working relationship and then up to 6 years, which is the period in which a contract claim can be brought in Ireland.
- Invoices and accounting records: 6 years, as required by Irish tax and company law.
- Server logs: kept by our host for a short period, normally not more than 90 days.
- Your privacy choice: stays in your browser until you clear it.
We may keep data longer if the law requires it or if we need it to deal with a legal claim.
8. Your rights (Ireland and the EU)
Under the GDPR and the Data Protection Act 2018 you have the right to:
- Access a copy of the personal data we hold about you;
- Rectification: have inaccurate or incomplete data corrected;
- Erasure: have your data deleted in certain circumstances;
- Restriction: ask us to pause our use of your data in certain circumstances;
- Portability: receive data you gave us in a common, machine-readable format;
- Object to our use of your data based on legitimate interests;
- Withdraw consent at any time, where we rely on consent. This doesn't affect what we did before you withdrew.
To use any of these rights, email us at info [at] tailormadeweb [dot] tech. We will reply within one month (we may extend this by up to two further months for complex requests and will tell you if so). We don't charge a fee unless a request is clearly unfounded or excessive. We may need to confirm your identity first.
You also have the right to complain to the Irish supervisory authority: the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie. If you live elsewhere in the EU, you can complain to your local authority. We would appreciate the chance to put things right first.
9. Information for US visitors
We are based in Ireland and this website is directed at businesses in Ireland and the wider EU, but we welcome enquiries from anywhere. If you contact us from the United States, your information is transferred to and processed in Ireland and the other places described above.
California and other US states. State privacy laws such as the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other states give residents certain rights. We are a small business that does not currently meet the thresholds that bring us within most of these laws, but we choose to treat all visitors fairly:
- We do not sell your personal information and do not "share" it for cross-context behavioural advertising. We have not done so in the past 12 months.
- In the last 12 months we have collected the categories of data in section 2: identifiers (name, email, IP address) and the content of your messages. We collect these directly from you and use them for the purposes in section 3.
- We do not collect sensitive personal information on purpose, and we do not use it to infer characteristics about you.
- You may ask us to tell you what we hold about you, to correct it or to delete it, and you will not be treated worse for asking. Email us and we will respond within 45 days (extendable once by a further 45 days where permitted).
- You can use an authorised agent to make a request on your behalf; we may ask for proof of authority.
- Do Not Track and Global Privacy Control: because we do not track visitors across sites, there is nothing to opt out of, and we treat browser opt-out signals as respected.
This section is provided for transparency and does not mean that US state laws apply to us.
10. Children
Our services are aimed at business owners, not children. The digital age of consent in Ireland is 16, so please do not send us personal data through this site if you are under 16 unless a parent or guardian is involved and agrees. We do not knowingly collect personal information from anyone under 16, and in particular we do not knowingly collect personal information from children under 13, in line with the US Children's Online Privacy Protection Act (COPPA). If you think a child has given us personal data, email us and we will delete it promptly.
11. Security
We take reasonable technical and organisational steps to protect your data, including HTTPS encryption, security headers on this site, spam protection on our contact form, limiting access to our inbox and files to the two founders, and choosing reputable service providers. No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify the Data Protection Commission within 72 hours and tell you where the law requires.
12. Links to other sites
Our site may link to other websites. We are not responsible for their privacy practices, so please read their notices.
13. Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top shows when it last changed. If we make a significant change we will say so on the main site.
14. Contact and complaints
Questions, requests or concerns about your data: info [at] tailormadeweb [dot] tech.
Complaints can also be made to the Data Protection Commission (Ireland) as set out in section 8.