Privacy Policy

    Last updated: [INSERT DATE]

    1. Data Controller

    The data controller responsible for your personal data is:
    [INSERT BUSINESS LEGAL NAME]
    Company Registration Number: [INSERT COMPANY NUMBER]
    Registered Address: [INSERT REGISTERED ADDRESS]
    Email: info@smurrayscarpentry.ie
    Phone: 085 279 9413

    2. Data We Collect

    When you use our website or submit an enquiry, we may collect the following personal data:

    • Full name
    • Email address
    • Phone number
    • Location / address
    • Project details and description
    • Uploaded files (e.g. inspiration photos)
    • Budget range and timeframe preferences

    3. Legal Basis for Processing

    We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018:

    • Consent: You have given clear consent for us to process your personal data for the purpose of responding to your enquiry.
    • Contractual Necessity: Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
    • Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services and responding to enquiries, provided these interests are not overridden by your rights.

    4. How We Use Your Data

    Your personal data is used to:

    • Respond to your enquiry or quote request
    • Provide you with information about our services
    • Arrange site inspections and consultations
    • Process and manage your project
    • Improve our website and services

    5. Third-Party Processors

    We use the following third-party service providers to process your data:

    • CRM System: [INSERT CRM PROVIDER NAME] — used to manage enquiries and customer communications. Your data is transmitted securely to this system via encrypted API connections. No customer data is stored directly on our website server.
    • Analytics: Google Analytics (GA4) — used to understand website usage patterns. This data is anonymised where possible.
    • Cookie Consent: Cookiebot — used to manage your cookie preferences.

    Each third-party processor operates under its own privacy policy and security framework. We ensure that appropriate Data Processing Agreements (DPAs) are in place with all processors.

    6. International Data Transfers

    Some of our third-party processors may transfer your data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data in accordance with GDPR requirements.

    7. Data Retention

    We retain your personal data for [INSERT RETENTION PERIOD] from the date of your last interaction with us, unless a longer retention period is required or permitted by law. After this period, your data will be securely deleted or anonymised.

    8. Your Rights

    Under GDPR and the Data Protection Act 2018, you have the following rights:

    • Right of Access: You can request a copy of the personal data we hold about you.
    • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
    • Right to Erasure: You can request that we delete your personal data, subject to legal obligations.
    • Right to Restrict Processing: You can request that we limit how we use your data.
    • Right to Data Portability: You can request your data in a structured, machine-readable format.
    • Right to Object: You can object to processing based on legitimate interest.
    • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

    To exercise any of these rights, please contact us at info@smurrayscarpentry.ie.

    9. Right to Complain

    If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland:

    Data Protection Commission
    21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
    Website: www.dataprotection.ie
    Phone: +353 (0)1 765 0100 / 1800 437 737

    10. Data Security

    We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data submitted through our website is transmitted over HTTPS (SSL/TLS encryption).

    11. Data Breach Policy

    In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

    Call Now