Pinta

Privacy Policy

Last Updated

1. Introduction

[FULL REGISTERED COMPANY NAME] ("Pinta", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what personal data we collect through pinta.ie (the "Site"), how we use it, who we share it with, and the rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Acts 1988–2018.

2. Who we are — the data controller

We are the data controller for the personal data described in this policy. That means we decide how and why it is processed.

  • Company: [FULL REGISTERED COMPANY NAME]

  • Company number: [CRO NUMBER]

  • Registered address: [REGISTERED ADDRESS]

  • Email: explore@pinta.ie

  • Phone: +353 21 603 0710

[If you appoint a Data Protection Officer, add their contact details here. Most companies of this size are not required to appoint one — your solicitor can confirm.]

3. The personal data we collect

3.1 Information you give us through our contact form

When you complete the contact form on the Site, we collect:

Field

Required?

Full name

Yes

Email address

Yes

Company name

No

Phone number

No

The message you write in "How can we help?"

No

Please only include information in the message field that you are comfortable sharing by email. Do not include confidential, commercially sensitive or special category data (such as health information). If you need to share sensitive material with us, contact us first and we will agree a secure method.

3.2 Information you give us by email, phone or LinkedIn

If you contact us directly, we will hold a record of that correspondence, including your contact details and the content of your message.

3.3 Information collected automatically

When you visit the Site, our hosting provider automatically processes limited technical data for security, performance and abuse-prevention purposes. This may include your IP address, browser type and version, device type, operating system, referring page and the pages you visit.

[If you enable Google Analytics, keep the following paragraph. If you do not, delete it and delete the Google Analytics rows in sections 5 and 6.]

If you consent to analytics cookies, we also use Google Analytics 4 to understand how visitors use the Site. This may include pages viewed, time on page, approximate location derived from a truncated IP address, device and browser information, and how you arrived at the Site. Google Analytics only runs if you accept analytics cookies via our cookie banner. See our Cookie Policy for details.

3.4 Data we do not collect

We do not collect payment card details through the Site, we do not knowingly collect data from children, and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

4. How we use your personal data and our legal basis

What we do

Personal data used

Legal basis under GDPR

Respond to your enquiry and correspond with you

Name, email, company, phone, message

Article 6(1)(b) — steps at your request prior to entering a contract; or Article 6(1)(f) — our legitimate interest in responding to business enquiries

Prepare and send a proposal or quotation

Name, email, company, phone, message

Article 6(1)(b) — pre-contractual steps

Keep a record of enquiries and correspondence for our business records

All of the above

Article 6(1)(f) — our legitimate interest in managing our business and maintaining accurate records

Keep the Site secure and prevent spam or abuse

Technical data, IP address

Article 6(1)(f) — our legitimate interest in protecting our systems

Comply with legal, tax or regulatory obligations

Relevant records

Article 6(1)(c) — compliance with a legal obligation

Establish, exercise or defend legal claims

Relevant records

Article 6(1)(f) — our legitimate interest in protecting our legal position

Measure and improve how the Site performs (Google Analytics)

Analytics data and cookie identifiers

Article 6(1)(a) — your consent

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we have concluded that they are not. You can object to this processing at any time — see section 8.

We do not use your contact form details to send you marketing emails unless you have separately asked us to. If we ever introduce a newsletter or marketing list, it will be opt-in and every message will contain an unsubscribe link.

5. Who we share your personal data with

We do not sell your personal data. We share it only with the following categories of recipient, all of whom act as our processors under written agreements, or where we are legally required to disclose it:

Recipient

Purpose

Location

Framer B.V.

Website hosting and delivery of the Site and contact form

Netherlands / EU, with sub-processors that may operate outside the EEA

[YOUR EMAIL PROVIDER — e.g. Google Workspace or Microsoft 365]

Receiving and storing enquiry emails and correspondence

[LOCATION]

[YOUR CRM, IF ANY]

Managing enquiries and client relationships

[LOCATION]

Google Ireland Limited

Website analytics (only if you consent to analytics cookies)

Ireland, with transfers to Google LLC in the United States

Professional advisers (accountants, solicitors, insurers)

Where necessary for advice, compliance or legal claims

Ireland / EU

Public authorities, regulators or courts

Where we are required to disclose by law

Ireland / EU

6. International transfers

Some of our service providers process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on one or more of the following safeguards under Chapter V of the GDPR:

  • the European Commission's adequacy decision for the EU–US Data Privacy Framework, where the recipient is certified under it; and/or

  • the European Commission's Standard Contractual Clauses, supplemented by additional technical and organisational measures where appropriate.

You can request a copy of the relevant safeguards by emailing explore@pinta.ie.

7. How long we keep your data

Data

Retention period

Enquiries that do not lead to an engagement

[24] months from your last contact with us, then deleted

Enquiries and correspondence relating to clients

For the duration of the engagement and [7] years afterwards, to meet tax, accounting and limitation-period requirements

Website server logs

As set by our hosting provider, typically a short period for security purposes

Google Analytics data

[14] months from collection (configurable in your GA4 property — set this to match)

Cookie consent records

[12] months, as evidence that consent was obtained

At the end of these periods we delete the data or anonymise it so it can no longer be linked to you.

8. Your rights

Under the GDPR you have the right to:

  • Access — obtain a copy of the personal data we hold about you and information about how we process it.

  • Rectification — have inaccurate or incomplete data corrected.

  • Erasure — ask us to delete your data where there is no good reason for us to continue processing it.

  • Restriction — ask us to pause processing while a concern is investigated.

  • Portability — receive the data you provided to us in a structured, commonly used, machine-readable format, or have it transmitted to another controller, where processing is based on consent or contract and is carried out by automated means.

  • Object — object to processing based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.

  • Withdraw consent — where we rely on consent (for example, analytics cookies), withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, email explore@pinta.ie. We will respond within one month. That period may be extended by a further two months where the request is complex, and we will tell you if that applies. There is no charge, although we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive. We may ask you for information to confirm your identity.

9. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at explore@pinta.ie so we can try to resolve it. You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission 6 Pembroke Row, Dublin 2, D02 X963, Ireland Phone: +353 1 765 0100 / 1800 437 737 Website: dataprotection.ie

If you are resident in another EU member state, you may complain to the supervisory authority in that state.

10. Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encryption in transit (HTTPS), access controls on the accounts that receive enquiries, multi-factor authentication where available, and limiting access to personal data to those who need it.

No transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee the security of data transmitted to the Site, and any transmission is at your own risk.

11. Cookies

The Site uses cookies and similar technologies. Full details, including how to manage your preferences, are set out in our Cookie Policy.

12. Links to other websites

The Site contains links to third-party websites, including our LinkedIn page. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy notices.

13. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with the date it was last updated. Where changes are significant, we will take reasonable steps to bring them to your attention.

14. Contact

Questions about this policy or about how we handle your personal data:

  • Email: explore@pinta.ie

  • Phone: +353 21 603 0710

  • Post: [REGISTERED ADDRESS]