Privacy Policy
This policy explains how Wide Web Artisans Limited ("we", "us", "our") collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
1. Who We Are
Wide Web Artisans Limited is the data controller responsible for personal data collected through this website and in the course of providing our services.
| Company name | Wide Web Artisans Limited |
| Registered address | Grand Canal Dock, Dublin 2, Ireland |
| privacy@widewebartisans.com | |
| Phone | +353 1 000 0000 |
| DPC registration | Registered with the Data Protection Commission Ireland |
2. Data We Collect
We collect the following categories of personal data:
| Category | Data Points | Basis |
|---|---|---|
| Contact data | Name, email address, phone number, company name | Legitimate interest / contract |
| Project inquiry data | Website URL, services required, budget range, project description | Pre-contractual steps |
| Technical data | IP address, browser type, device type, pages visited, referral source | Legitimate interest |
| Cookie data | Session identifiers, analytics identifiers, consent preferences | Consent / legitimate interest |
| Communications | Email correspondence, chat messages, form submissions | Contract / legitimate interest |
| Payment data | Invoice details (processed via Stripe — we do not store card data) | Contract |
3. How We Use Your Data
We use your personal data for the following purposes:
- Responding to project inquiries and providing quotations
- Delivering contracted web design, development, and SEO services
- Sending invoices and processing payments
- Analysing website performance and improving our services (analytics)
- Sending marketing communications (only with your explicit consent)
- Complying with legal obligations and protecting our legitimate interests
4. Legal Bases for Processing
| Processing activity | Legal basis |
|---|---|
| Responding to contact form inquiries | Legitimate interest (Article 6(1)(f) GDPR) |
| Delivering services under contract | Contract performance (Article 6(1)(b) GDPR) |
| Analytics and website improvement | Legitimate interest (Article 6(1)(f) GDPR) |
| Marketing emails and newsletter | Consent (Article 6(1)(a) GDPR) |
| Legal obligations (VAT, accounting records) | Legal obligation (Article 6(1)(c) GDPR) |
5. Third-Party Data Processors
We share your data only with trusted third-party processors under GDPR-compliant data processing agreements:
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Google Analytics 4 | Website analytics (anonymised IP, consent mode v2) | USA | EU Standard Contractual Clauses |
| Google Search Console | Search performance monitoring | USA | EU Standard Contractual Clauses |
| Calendly | Booking consultations | USA | EU Standard Contractual Clauses |
| Stripe | Payment processing (we never store card data) | USA | EU Standard Contractual Clauses |
| Mailchimp / Brevo | Email marketing (consent-only) | USA / EU | Standard Contractual Clauses |
| Cloudflare | DNS, CDN, security (WAF) | USA | EU Standard Contractual Clauses |
| Base44 | Application hosting and database | EU | EU Data Residency |
6. Cookies
We use cookies and similar tracking technologies on our website. Full details of every cookie we use, including duration and purpose, are available in our Cookie Policy. You can manage your cookie preferences at any time via our .
7. Data Retention Periods
| Data category | Retention period | Reason |
|---|---|---|
| Contact form submissions | 2 years from last contact | Legitimate interest (business inquiry records) |
| Client project records | 7 years from project completion | Legal obligation (Irish accounting law) |
| Invoice and payment records | 7 years from date of transaction | Revenue Commissioners requirement |
| Email marketing list | Until consent withdrawn + 30 days | Consent-based processing |
| Analytics data | 26 months (GA4 default) | Legitimate interest |
| Website server logs | 90 days | Security and fraud prevention |
8. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR Articles 15–22:
Right of access (Article 15)
Request a copy of all personal data we hold about you.
Right to rectification (Article 16)
Request correction of inaccurate or incomplete data.
Right to erasure (Article 17)
Request deletion of your personal data ('right to be forgotten').
Right to restrict processing (Article 18)
Request that we limit how we use your data.
Right to data portability (Article 20)
Receive your data in a structured, machine-readable format.
Right to object (Article 21)
Object to processing based on legitimate interest or for direct marketing.
Right to withdraw consent
Withdraw any consent given at any time, without affecting prior processing.
To exercise any right, email privacy@widewebartisans.com. We will respond within 30 days.
9. Data Protection Commission Ireland
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Irish supervisory authority:
Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28
Phone: +353 1 765 0100
dataprotection.ie10. International Transfers
Some third-party processors operate outside the European Economic Area (EEA), primarily in the United States. Where we transfer data internationally, we ensure appropriate safeguards are in place — including EU Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on adequacy decisions. A full list of transfers and safeguards is available on request.
11. Security
We implement appropriate technical and organisational security measures including: SSL/HTTPS encryption on all pages, Cloudflare Web Application Firewall, access controls and staff data protection training, regular security audits, and encrypted storage for any sensitive data. No method of transmission over the Internet is 100% secure. If you have concerns about a specific data interaction, contact us directly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify active clients by email. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Contact
For all data protection enquiries: privacy@widewebartisans.com
For general enquiries: Contact page