Legal
Privacy Policy
Last updated: [DATE]
This policy explains how [LEGAL ENTITY NAME], trading as Deadly Sites ("we", "us"), collects and uses your personal data when you use this website. We are the data controller for the information described below.
Who we are
[LEGAL ENTITY NAME], [REGISTERED BUSINESS ADDRESS, IRELAND]. Company number: [CRO NUMBER, IF APPLICABLE]. Contact: [hello@yourdomain.ie].
What we collect
- Questionnaire details: your name, email address, phone number, business name, information about you, your business and your customers, your existing website and the reference websites you share.
- Payment details: your deposit is processed by Stripe. We receive confirmation of payment, the amount and a payment reference. We never see or store your full card details.
- Booking details: if you book a design presentation, the booking provider shares the date, time and the details you enter.
- Attribution: if you arrive through a partner link or campaign, we record the referral code and campaign parameters (for example utm_source) so we can credit the right partner.
- Contact messages: anything you send us through the contact or refund forms.
Why we use it, and our lawful basis
- To prepare your personalised design concept, take your deposit, arrange your presentation and, if you go ahead, build your website. Lawful basis: taking steps at your request before entering a contract, and performing that contract (GDPR Article 6(1)(b)).
- To keep financial and tax records of deposits, refunds and credits. Lawful basis: legal obligation (Article 6(1)(c)).
- To protect the website from spam and abuse, and to credit referral partners. Lawful basis: our legitimate interests (Article 6(1)(f)).
- To send marketing emails, only if you ticked the optional marketing box. Lawful basis: consent (Article 6(1)(a)). You can withdraw consent at any time by emailing [hello@yourdomain.ie].
Reference websites
We only use the websites you share as design inspiration to understand your taste. We do not copy their imagery, wording or branding.
Who we share it with
We use trusted service providers ("processors") who handle data on our behalf under contract:
- Netlify, Inc. — website hosting, database, file storage and administrator sign-in.
- Stripe Payments Europe, Ltd. — deposit payments and refunds.
- Resend (or [YOUR EMAIL PROVIDER]) — sending transactional emails such as your booking confirmation.
- Calendly LLC (or [YOUR BOOKING PROVIDER]) — booking your design presentation.
Some of these providers may process data outside the European Economic Area. Where they do, transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. [CONFIRM EACH PROVIDER'S TRANSFER MECHANISM BEFORE LAUNCH.]
How long we keep it
- Enquiries where no deposit is paid are deleted after 90 days.
- Enquiries that do not proceed (including refunded deposits) have their personal details removed 24 months after closing. We keep the minimum payment records required for tax purposes.
- Customer project records are kept for the duration of our working relationship and as required by Irish tax law.
You can ask us to delete your data sooner at any time.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. Email [hello@yourdomain.ie] and we will respond within one month.
You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — www.dataprotection.ie.
Cookies and local storage
This website uses only what is strictly necessary for it to work: your browser stores your questionnaire answers while you fill them in, any referral code you arrived with, and, for administrators, a sign-in cookie. We do not use advertising or tracking cookies. Embedded booking and video providers may set their own cookies when you choose to use them.