Privacy policy

1. Who we are

SruthDigital ("we", "us", "our") is the data controller for personal data collected through this website. For any privacy question or request, contact us at info@sruthdigital.com.

2. What we collect

We only collect personal data that you choose to give us, or that is strictly necessary to operate the site securely:

• Contact form submissions: name, email address, phone number (optional), your message, an optional reference image, and which package you enquired about.
• Technical & security data: your IP address and request metadata, used only to apply rate limiting and to detect spam or abuse.
• Admin account data: for the small number of staff with dashboard access, we store an email address and a securely hashed password.

We do not use advertising cookies or sell personal data to third parties. See our cookie policy for details on browser storage.

3. Why we process your data, and our legal basis

• Responding to your enquiry — necessary to take steps at your request before entering into a contract (GDPR Art. 6(1)(b)), or our legitimate interest in answering enquiries (Art. 6(1)(f)).
• Preventing spam and abuse — our legitimate interest in keeping the website and contact form secure (Art. 6(1)(f)).
• Administering the admin dashboard — necessary to provide the service to our own staff (Art. 6(1)(f)).

4. How long we keep your data

Contact enquiries are kept for as long as reasonably needed to respond to you and to maintain accurate business records, and are then deleted or anonymised. You can ask us to erase your enquiry at any time using the contact details above.

5. Who we share data with

We use a small number of trusted service providers ("processors") to run this website, including our email delivery (SMTP) provider and our database/hosting provider. These providers only process data on our instructions and are contractually required to protect it. We do not sell or rent your personal data.

6. International transfers

Where a service provider is located outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

7. Your rights

Under GDPR, you have the right to request access to, correction of, or erasure of your personal data, to restrict or object to processing, to request data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, email info@sruthdigital.com.

You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie if you believe your data has been mishandled.

8. Keeping your data secure

We use industry-standard measures including HTTPS encryption, hashed passwords, rate limiting, sanitised form inputs and access-controlled admin accounts to protect your data.

9. Children's privacy

This website is intended for business use and is not directed at children. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The "last updated" date above shows when it was last revised.