Legal
Privacy Policy
Last updated: 17 August 2026
1. Who we are
ÉireStack is a web design and development business based in the Greater Dublin Area, Ireland. We operate the website eirestack.ie and provide web design, development, and related digital services to small businesses across Dublin and Ireland.
For the purposes of the EU General Data Protection Regulation (GDPR) and the Data Protection Acts 1988-2018, ÉireStack is the data controller for personal data collected through this website.
You can contact us at hello@eirestack.ie.
2. What data we collect
We collect personal data in the following circumstances:
- Contact form: Name, email address, optional business name, optional phone number, package interest, and the message you submit.
- Email correspondence: Your email address and any personal information you include when you contact us directly.
- Invoicing: Name, email, billing address, and VAT number if you become a client.
We do not collect sensitive personal data (such as health, financial, or biometric data). We do not use cookies beyond technical session cookies unless we have obtained your consent.
3. Why we process your data
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry | Article 6(1)(b) - necessary to take steps prior to entering a contract |
| Provide contracted services | Article 6(1)(b) - performance of a contract |
| Send you invoices and service updates | Article 6(1)(b) - performance of a contract |
| Comply with legal obligations | Article 6(1)(c) - legal obligation |
| Improve our website | Article 6(1)(f) - legitimate interest |
4. How long we keep your data
We retain contact form submissions and email correspondence for up to 3 years from the date of last contact, or for the duration of any business relationship plus 6 years thereafter to comply with Irish legal requirements.
When personal data is no longer needed, it is securely deleted or anonymised.
5. Who we share data with
We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers solely to deliver our services:
- Hosting (Vercel): Our website is hosted on Vercel, Inc. (USA). Vercel is EU-US Data Privacy Framework certified.
- Email (Resend): We use Resend to deliver enquiry emails and transactional messages.
- Payments (Stripe): Invoices and card payments are processed by Stripe. Card details never touch this website.
- Database (Supabase): Client, invoice, portfolio, and enquiry records are stored in a Supabase Postgres database in the EU or a GDPR-compliant region.
All service providers are contractually required to process data only on our instructions and in compliance with GDPR.
6. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your data, subject to legal obligations.
- Restriction: Ask us to limit how we process your data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interest.
To exercise any of these rights, email us at hello@eirestack.ie. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority.
7. Data security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. This includes HTTPS encryption, access controls, and using reputable, GDPR-compliant service providers.
8. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website after an update constitutes acceptance of the revised policy.
9. Contact
Questions or concerns about this policy or your data? hello@eirestack.ie