Privacy Policy

1. Who we are

ÉireStack is a web design and development business based in Ireland. We operate the website eirestack.ie and provide web design, development, and related digital services to small businesses across Ireland.

For the purposes of the EU General Data Protection Regulation (GDPR) and the Data Protection Acts 1988-2018, ÉireStack is the data controller for personal data collected through this website.

You can contact us at hello@eirestack.ie.

Legal supplier details: ÉireStack, Dublin, Ireland

2. What data we collect

We collect personal data in the following circumstances:

• - Contact form: Name, email address, project type, a selected package where supplied, and the message you submit.
• - Email correspondence: Your email address and any personal information you include when you contact us directly.
• - Invoicing: Name, email, billing address, and VAT number if you become a client.
• - Website analytics: Anonymous page views: the page URL, referrer, browser, device type, and country. We do not store IP addresses, unique visitor IDs, or advertising profiles.

We do not collect sensitive personal data (such as health, financial, or biometric data). The public website does not set analytics or marketing cookies. A technical session cookie is used only if you sign in to the admin desk. Because we do not use non-essential cookies, we do not show a cookie banner. See our Cookie Policy for the current tracking details.

Usage statistics are collected with Plausible, a cookieless analytics service hosted in the EU. Plausible does not set cookies, does not track you across other websites, and does not sell data. We use it to see which pages are useful, not to identify you. You can object to this processing by emailing hello@eirestack.ie.

3. Why we process your data

4. How long we keep your data

We retain contact form submissions and email correspondence for up to 3 years from the date of last contact, or for the duration of any business relationship plus 6 years thereafter to comply with Irish legal requirements.

Anonymous Plausible statistics are kept while we use the service, as aggregated counts rather than a profile of you.

When personal data is no longer needed, it is securely deleted or anonymised.

5. Who we share data with

We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers solely to deliver our services:

• - Hosting (Netlify): Our website is hosted on Netlify (USA). Netlify is EU-US Data Privacy Framework certified.
• - Email (Resend): We use Resend to deliver enquiry emails and transactional messages.
• - Payments (Stripe): Invoices and card payments are processed by Stripe. Card details never touch this website.
• - Database (Supabase): Client, invoice, portfolio, and enquiry records are stored in a Supabase Postgres database in the EU or a GDPR-compliant region.
• - Analytics (Plausible): Plausible Insights OÜ (Estonia) processes anonymous page-view data in the EU. No cookies, no advertising identifiers, no sale of data.

All service providers are contractually required to process data only on our instructions and in compliance with GDPR.

6. Your rights

Under GDPR, you have the following rights regarding your personal data:

• - Access: Request a copy of the personal data we hold about you.
• - Rectification: Ask us to correct inaccurate or incomplete data.
• - Erasure: Request deletion of your data, subject to legal obligations.
• - Restriction: Ask us to limit how we process your data.
• - Portability: Receive your data in a structured, machine-readable format.
• - Objection: Object to processing based on legitimate interest.

To exercise any of these rights, email us at hello@eirestack.ie. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority.

7. Data security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. This includes HTTPS encryption, access controls, and using reputable, GDPR-compliant service providers.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Where a change materially affects how we process personal data, we will provide any notice required by law.

9. Contact

Questions or concerns about this policy or your data? hello@eirestack.ie