Privacy notice

Who we are

This website is operated by Datameal Ltd, a private company limited by shares registered in Ireland under company number 676135, with its registered office at 51 Bracken Road, Sandyford, Dublin D18 CV48 ("Datameal", "we", "us").

We are the data controller for the personal data described in this notice. You can reach us about anything in it at privacy@datameal.ltd.

What this website collects

This site is deliberately minimal. It sets no cookies, runs no advertising or tracking scripts, and has no contact form. We therefore display no cookie banner, because there is nothing to consent to.

Our hosting provider, Cloudflare, processes standard server request data — IP address, user agent, requested URL, timestamp — to deliver the site and protect it from abuse. This is necessary for the technical operation of the service and rests on our legitimate interests under Article 6(1)(f) GDPR.

If we later add analytics, a contact form or a mailing list, this section will be updated before that goes live.

If you email us

When you write to us we hold your email address, your name if you give it, and the content of the correspondence, so that we can reply and keep a record of what was agreed. The lawful basis is our legitimate interests in responding to enquiries, or the performance of a contract where one follows.

We keep business correspondence for seven years, matching the statutory record-keeping period for company and tax records, and enquiries that do not lead to work for 24 months.

Client data we handle on a project

When we deliver consultancy work we normally act as a data processor on our client's behalf, not as the controller. In those cases the client's own privacy notice governs the personal data involved, and our handling of it is set out in a written data processing agreement covering purpose, security measures, sub-processors, international transfers, and deletion on termination.

We do not use client data to train models, and we do not reuse it for any purpose outside the engagement that supplied it.

Service providers

We use a small number of providers who may process personal data on our behalf: Cloudflare (website hosting and DNS) and our email provider (mailboxes and correspondence). Each is engaged under terms that include GDPR-compliant processing obligations. [Add your accounting software and any other provider that touches personal data.]

Where a provider processes data outside the EEA, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

Your rights

Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to data portability. Where we rely on legitimate interests you may object at any time.

Write to privacy@datameal.ltd and we will respond within one month. If you are not satisfied with how we handle it, you can complain to the Irish Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963 — dataprotection.ie.

Security

Access to systems is restricted to those who need it, protected by multi-factor authentication, and reviewed periodically. Data in transit is encrypted. We will notify affected individuals and the Data Protection Commission of a personal data breach where the GDPR requires it.

Changes

If this notice changes materially we will update the date at the top and, where the change affects you directly, tell you by email.