Legal
Privacy policy
Last updated: April 2026
This policy explains what personal information The Web Company of Ireland collects when you use this website, why we collect it, and what we do with it. We aim to be straightforward about this — no legal jargon where plain English will do.
Who we are
The Web Company of Ireland is a web design and development service based in Ennis, Co. Clare, Ireland. We are the data controller for the personal information described in this policy.
You can contact us about anything in this policy at hello@thewebcompany.ie.
What we collect and why
We only collect information you give us directly. We do not buy lists, scrape data, or use tracking cookies.
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Your name and email address | To respond to your website enquiry and send you a proposal | Legitimate interest |
| Your phone number | To contact you if you opt in to a call | Legitimate interest |
| Business name, industry, county | To understand your business and tailor the proposal | Legitimate interest |
| Website goals, pages, content readiness | To scope the work accurately | Legitimate interest |
| Brand colours | To inform the design of your site | Legitimate interest |
| Google Business Profile status, service area | To set up local SEO correctly | Legitimate interest |
| How you heard about us | To understand which channels are working | Legitimate interest |
| Marketing consent | To send occasional tips and offers if you opt in | Consent |
If you create an account to track your project, we also store your email address via Supabase Auth to authenticate you. This is used solely to give you access to your own project dashboard.
How long we keep your data
Enquiry data (your wizard submission) is kept for up to two years from the date of submission, or until we have completed any resulting project work and reasonable follow-up has concluded — whichever is later. After that it is deleted.
If you created an account, your login details are kept for as long as the account is active. You can ask us to delete your account at any time.
If you gave marketing consent and later withdraw it, we will stop sending marketing emails promptly and flag your record accordingly.
Who we share your data with
We do not sell or rent your data. We use a small number of third-party services to run this website:
- Supabase — stores your enquiry data in a Postgres database hosted in the EU. Supabase acts as a data processor on our behalf. Supabase privacy policy.
- Vercel — hosts this website and its server functions. Your data passes through Vercel infrastructure when you submit a form. Vercel is a US company with Standard Contractual Clauses in place for EU data transfers. Vercel privacy policy.
- Resend — used to send confirmation emails and internal notifications. Your name and email address are passed to Resend for this purpose only. Resend is a US company with Standard Contractual Clauses in place. Resend privacy policy.
- Plausible Analytics — used for anonymous website traffic statistics. Plausible does not use cookies and does not collect any personal data. It is hosted in the EU. Plausible privacy policy.
Cookies
This website does not use tracking or advertising cookies. Plausible Analytics, our traffic tool, is cookieless by design. No cookie consent banner is required.
If you log in to your project dashboard, a session cookie is set by Supabase Auth to keep you signed in. This cookie is strictly necessary for the login to work and does not track you across other websites.
Your rights
Under GDPR you have the following rights regarding your personal data:
- Access — you can ask us what data we hold about you.
- Rectification — you can ask us to correct inaccurate data.
- Erasure — you can ask us to delete your data, subject to any legal obligation to retain it.
- Restriction — you can ask us to pause processing your data in certain circumstances.
- Portability — you can ask for a copy of your data in a machine-readable format.
- Object — you can object to processing based on legitimate interest.
- Withdraw consent — if processing is based on consent (e.g. marketing emails), you can withdraw that consent at any time.
To exercise any of these rights, email us at hello@thewebcompany.ie. We will respond within 30 days.
Complaints
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority for data protection in Ireland.
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
dataprotection.ie
Changes to this policy
If we make material changes to this policy we will update the date at the top of this page. We will not reduce your rights under this policy without giving you notice.