Privacy Policy

Technaaf Limited (CRO No. 755195), 48 Scholars Walk, Lusk, Co. Dublin, K45 HC62, Ireland, is the data controller for the processing described here. Contact [email protected] for data-protection questions or rights requests.

When you contact us through the website or email, we may collect your name, email address, optional telephone number, organisation, enquiry subject, message, and subsequent correspondence. If we work together, we may also process the information needed to prepare and perform the agreed services.

When you visit the website, our infrastructure and security providers may process technical information such as IP address, browser or device characteristics, request times, security signals and error logs. We may receive website usage measurements from analytics tools where enabled.

For details specific to the free website application, see the Personal Websites Privacy Notice. Technaaf Reminders has its own service notice.

• To respond to enquiries, discuss prospective engagements and provide requested services: steps before entering into a contract or performance of a contract (GDPR Article 6(1)(b)), or our legitimate interest in responding to business enquiries (Article 6(1)(f)), depending on the circumstances.
• To manage customer relationships, address disputes and improve operational reliability: our legitimate interests (Article 6(1)(f)), where these are not overridden by individuals' rights.
• To secure the website, prevent abuse and troubleshoot errors: our legitimate interests in maintaining a safe, functioning service (Article 6(1)(f)).
• To meet accounting, tax or other legal obligations: compliance with a legal obligation (Article 6(1)(c)).
• For optional marketing communications or non-essential tracking: only where a valid legal basis and any separate consent required by ePrivacy rules are in place.

We do not treat a necessary application or enquiry checkbox as consent for unrelated marketing.

We use service providers to host and protect the website, deliver enquiries, communicate with users and measure site performance. These include Cloudflare for website hosting and Turnstile security checks, Google Apps Script and related Google services for enquiry forwarding, email providers, and Vercel Web Analytics where enabled.

Access to submitted data should be limited to people who need it for the stated purposes. We do not sell information submitted through our forms. Providers may process data outside the European Economic Area. Where GDPR transfer rules apply, we rely on lawful arrangements such as adequacy decisions or appropriate contractual safeguards, as relevant to the provider and transfer.

We keep enquiries and correspondence while needed to respond, manage a possible or active engagement and deal with reasonable follow-up or legal obligations. Financial records are retained for applicable statutory periods. Technical logs are kept for operational and security purposes under relevant system and provider retention settings.

Service-specific retention rules are described in the relevant additional notice, including the 180-day rule for unsuccessful personal website applications.

We use access controls and appropriate organisational and technical safeguards, although no internet service can guarantee absolute security.

Cloudflare may use strictly necessary security technologies, including Turnstile on our forms. The website also includes Vercel Web Analytics integration, which may be active in production. These tools can process device, browser and usage information.

We will provide appropriate information and obtain consent before using cookies or similar technologies for which Irish ePrivacy law requires consent. Strictly necessary technologies may not require consent. We will update this notice if our tracking configuration changes.

Where GDPR applies, you may request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting previous lawful processing. Rights are subject to applicable conditions and exceptions.

Write to [email protected]. We may verify your identity and generally respond within one month where GDPR applies, subject to lawful extensions. You may complain to the Irish Data Protection Commission or another competent supervisory authority.

We do not currently use solely automated decisions with legal or similarly significant effects for ordinary website enquiries. We will update this notice if our processing changes, and provide additional notices where required.

For people applying for a free website, the programme-specific notice explains the application fields, human review and retention period without repeating these general rights and provider disclosures.