Privacy Policy

Last updated: June 2026

This privacy policy explains how OnWebPoint (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you visit onwebpoint.ie or submit an enquiry through our contact form.

OnWebPoint is operated as a sole trader based in Cork, Ireland. As a data controller processing personal data of individuals in the EU and EEA, we comply with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

What Information We Collect

Information you provide directly

When you submit an enquiry through our contact form, we collect your name, email address, phone number (if provided), and the details of your project or message. This information is submitted voluntarily.

Information collected automatically

When you visit our website, we collect standard server log data including your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This data is collected automatically and used for security and analytics purposes.

Cookies

Our website uses cookies to improve your experience. Please see our Cookie Policy for full details of the cookies we use and how to control them.

Why We Collect Your Information

We use the personal information you provide for the following purposes:

• To respond to your enquiry — when you contact us through the website, we use your name and email address to respond to your message. This processing is necessary for our legitimate interests in responding to potential client enquiries.
• To provide our services — if you become a client, we use your contact details and project information to deliver the agreed services, issue invoices, and communicate throughout the project.
• To improve our website — anonymised analytics data helps us understand how visitors use our site so we can improve its content and performance.
• To comply with legal obligations — we may process or retain data where required by Irish or EU law.

We do not use your information for automated decision-making or profiling.

Legal Basis for Processing

We process your personal data under the following legal bases (Article 6 GDPR):

• Legitimate interests (Article 6(1)(f)) — responding to enquiries and improving our website
• Contractual necessity (Article 6(1)(b)) — processing necessary to provide our services to you
• Legal obligation (Article 6(1)(c)) — retaining financial records as required by Irish tax law
• Consent (Article 6(1)(a)) — for non-essential cookies where you have given consent

How Long We Keep Your Data

• Enquiry data (contact form submissions from non-clients): deleted after 12 months if no project proceeds
• Client data (project communications, invoices): retained for 7 years as required by Irish tax and accounting law
• Website analytics data: anonymised and aggregated — no individual retention limit
• Cookie data: varies by cookie type — see our Cookie Policy

Who We Share Your Information With

We do not sell, rent, or trade your personal information with any third party.

We may share data with the following trusted service providers who process data on our behalf:

• Google Analytics — website traffic analytics (data processed in the US under Standard Contractual Clauses). You can opt out at analytics.google.com/analytics/optout
• WP Mail SMTP / Email provider — used to deliver contact form notifications to us
• Hosting provider — your data is stored on servers managed by our hosting provider

All third-party providers are contractually required to process your data only as instructed and in compliance with applicable data protection law.

We may also disclose personal data if required by law, court order, or regulatory authority.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data (“right to be forgotten”)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@onwebpoint.com. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

Data Security

We take the security of your personal data seriously. Our website uses HTTPS encryption, contact form data is transmitted securely, and we apply appropriate technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction of personal data.

No method of internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately at hello@onwebpoint.com.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.

Contact Us

For any privacy-related questions or to exercise your GDPR rights:

OnWebPoint
Cork, Ireland
hello@onwebpoint.com

Data Protection Commission (Ireland): dataprotection.ie · Lo-Call 0761 104 800