Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how Bold Web Story Designs collects, uses and protects personal information when you visit boldwebstory.ie, contact the business, request a quotation or become a client.

I aim to collect only the information reasonably needed to run the business, respond to enquiries and provide web design, website support and related services.

 

1. Who is responsible for your information?

Bold Web Story Designs is an independent web design business based in County Mayo, Ireland.

For the purposes of data-protection law, Joe Hendley trading as Bold Web Story Designs is the data controller for the personal information described in this policy.

Contact details

Joe Hendley
Bold Web Story Designs
Tourmakeady
Co Mayo
Ireland

Email: info@boldwebstory.ie
Website: boldwebstory.ie

If you have a question about your personal information or wish to exercise a data-protection right, please use the contact details above.

 

2. Information I may collect

The information collected depends on how you interact with the website or business.

Website enquiries

If you contact me through a website form, by email or by telephone, I may collect information such as:

• your name;
• email address;
• telephone number;
• business or organisation name;
• website address;
• information about the project or service you are enquiring about; and
• anything else you choose to include in your message.

I use this information to respond to your enquiry and, where appropriate, discuss or prepare a proposal for services.

 

Clients

If you become a client, I may also process information needed to provide and administer the work, including:

• contact details;
• project correspondence;
• quotations and agreements;
• website or business information supplied for a project;
• information needed to access or work with services you have authorised me to use;
• invoices and payment records; and
• records relating to ongoing support or maintenance.

Where access credentials are required to work on a client's website or service, they are used only for the purpose for which access has been provided and should be handled securely.

 

Website usage information

If you consent to analytics cookies, limited information about how you use the website may be collected through Google Analytics.

This can include information such as:

• pages viewed;
• approximate visit duration;
• general geographic information;
• device and browser type;
• referring website or source; and
• interactions with pages.

I use this information to understand how the website is being used and to improve its content, structure and performance.

More information is available in the Cookie Policy.

 

Technical and security information

The website and its hosting or security systems may automatically record technical information such as:

• IP address;
• date and time of access;
• browser or device information;
• requested pages; and
• information relating to attempted misuse, spam or security incidents.

This information may be used where necessary to operate, protect and troubleshoot the website.

 

3. Why I use personal information

I use personal information only where there is an appropriate reason to do so.

The main purposes and legal bases are:

Responding to enquiries and preparing quotations

Information you provide when asking about a service may be processed because it is necessary to take steps at your request before entering into a contract.

Providing services to clients

Client information is processed where necessary to perform a contract, manage a project, provide website support or otherwise deliver an agreed service.

Running and protecting the business and website

Some information may be processed where this is necessary for the legitimate interests of running and protecting the business.

These interests can include:

• responding to business correspondence;
• maintaining appropriate records;
• protecting the website against spam, fraud and security threats;
• troubleshooting technical problems;
• managing client relationships; and
• establishing, exercising or defending legal claims.

Where I rely on legitimate interests, I consider whether those interests are outweighed by your rights and interests.

Meeting legal and financial obligations

Certain information must be processed or retained to meet legal obligations, including accounting, taxation and record-keeping requirements.

Analytics and optional cookies

Where consent is required for analytics or other optional website technologies, they are used only after you have given that consent.

You can withdraw that consent through the website's cookie controls.

 

4. Marketing

I do not use information submitted through an ordinary website enquiry to add you automatically to a marketing mailing list.

If I introduce an email newsletter or other direct-marketing service that requires consent, you will be given a clear choice about whether to subscribe and will be able to unsubscribe afterwards.

I may contact existing or prospective clients about an enquiry, project or existing business relationship where it is appropriate and lawful to do so.

 

5. Who may receive your information?

I do not sell personal information.

Personal information may be processed by trusted service providers where this is necessary to operate the website or business.

Depending on the service concerned, these may include providers of:

• website hosting and infrastructure;
• email and communications;
• website security and spam protection;
• analytics;
• online forms;
• appointment or booking systems;
• payment processing;
• accounting and invoicing;
• cloud storage or business software; and
• professional services such as accountancy or legal advice.

These providers may act as data processors or, in some cases, as independent data controllers.

Only information reasonably required for the relevant service is shared.

Personal information may also be disclosed where required by law or where reasonably necessary to establish, exercise or defend a legal claim.

 

6. Payments

Where a payment is made through a third-party payment provider, payment information may be processed directly by that provider.

Bold Web Story Designs does not normally need to receive or store full payment-card details.

The payment provider's own privacy terms apply to information processed directly by them.

 

7. Google Analytics and other Google services

The website may use Google Analytics and other Google services such as reCAPTCHA or Google Maps.

Google Analytics is used only where the necessary cookie consent has been given.

reCAPTCHA may be used to protect forms and the website against spam, bots and abuse.

Google Maps may be used where an interactive map is provided.

These services may process technical information such as an IP address and may involve processing by Google companies outside Ireland.

Please see the Cookie Policy for further information about cookies and website tracking technologies.

 

8. International data transfers

Some service providers used to operate the website or business may process information outside Ireland or the European Economic Area.

Where personal data is transferred outside the EEA, I expect the relevant provider to use an appropriate mechanism recognised under data-protection law.

Depending on the destination and provider, this may include:

• a European Commission adequacy decision;
• approved contractual safeguards such as Standard Contractual Clauses; or
• another lawful transfer mechanism available under the GDPR.

Further information about an individual provider's transfer arrangements can normally be found in that provider's privacy documentation.

 

9. How long information is kept

I do not keep personal information indefinitely simply because it has been collected.

Retention depends on why the information is held.

 

Enquiries that do not become projects

Enquiry correspondence may be retained for a reasonable period in case you contact me again or the correspondence is needed to understand previous discussions.

Information that is clearly no longer useful or necessary may be deleted sooner.

 

Client and project information

Project correspondence, agreements and related records may be retained after a project finishes where reasonably necessary for:

• ongoing support;
• reference to previous work;
• resolving queries;
• protecting legal rights; or
• complying with legal obligations.

 

Financial and accounting records

Invoices, payment information and other records required for tax and accounting purposes are normally retained for at least the period required by Irish law.

 

Analytics information

Analytics information is retained according to the settings applied to the analytics service and is not retained longer than reasonably necessary for its purpose.

 

Security information

Server and security logs are normally retained only for the period reasonably required for security, troubleshooting or investigation, unless a longer period is required in relation to a specific incident.

When personal information is no longer reasonably required, it should be deleted, anonymised or securely disposed of.

 

10. Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Measures may include:

• access controls and secure passwords;
• website and hosting security measures;
• software updates;
• secure connections;
• backups;
• limiting access to information where appropriate; and
• using reputable service providers.

No website, email system or internet transmission can be guaranteed to be completely secure, but reasonable steps are taken to reduce the risks.

 

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask whether I hold personal information about you;
• request a copy of your personal information;
• ask for inaccurate or incomplete information to be corrected;
• request deletion of your personal information in certain circumstances;
• request restriction of processing;
• object to certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent; and
• make a complaint to a data-protection authority.

These rights are subject to the conditions and exceptions set out in data-protection law.

If you wish to exercise a right, please contact info@boldwebstory.ie.

I may need to confirm your identity before providing information or acting on a request.

 

12. Complaints

If you have a concern about how your personal information has been handled, you are welcome to contact me first so that I can try to resolve it.

You also have the right to make a complaint to the:

Data Protection Commission
Ireland

Current contact information and guidance on making a complaint are available at dataprotection.ie

 

13. Links to other websites

This website may contain links to websites operated by other organisations.

Following one of these links takes you to a website that is outside the control of Bold Web Story Designs.

The privacy and cookie practices of that website will then apply, and you should refer to its own privacy information if you want to know how it handles personal data.

 

14. Cookies

This website uses cookies and similar technologies for essential website functions and, where consent has been given, analytics and other optional services.

The separate Cookie Policy explains which cookies are used, why they are used and how you can change your cookie preferences.

 

15. Automated decision-making

Bold Web Story Designs does not use personal information to make decisions about individuals solely through automated decision-making or profiling that produces legal or

similarly significant effects.

 

16. Changes to this policy

This Privacy Policy may be updated when the website, business practices or services used by Bold Web Story Designs change.

The date at the top of the page shows when it was last updated.

I review the policy periodically so that it continues to reflect how personal information is actually handled.