Privacy Policy

Who we are

Pefwil is a business development and digital agency based at Rosemount Business Park, Dublin 11, D11 H602, Ireland. We are the data controller for the personal data described in this policy.

If you have a question about your data or want to exercise any of the rights below, email info@pefwil.com or write to us at the address above. We reply within one working day.

What we collect and when

We only collect personal data you give us or that is needed to run the site. In practice that means:

Contact and enquiry forms. Your name, email address, what you need, and if you choose to give them, your phone number, company name and a message.
Booking a call. Your name, email address and the three qualifying answers on the booking form: business type, budget band and timeline. If we use a booking tool, it also records the time slot you pick.
Guide downloads. Your email address, so we can send the guide and the short follow-up emails described below.
Website review requests. Your email address and the URL of the site you want reviewed.
Analytics and session recordings. Only with your consent, we use analytics tools to see how the site is used, including pages visited, device type, approximate location and anonymised interaction recordings. See our cookie policy for the tools and how to withdraw consent.
WhatsApp and phone. If you contact us on WhatsApp or by phone, we see your number and the messages you send. WhatsApp’s own privacy policy also applies to that conversation.
Server logs. Our hosting provider keeps standard logs (IP address, browser, pages requested) for security and to keep the site running. These are not used to identify you.

Why we are allowed to use it

The General Data Protection Regulation (GDPR) requires a lawful basis for every use of personal data. Ours are:

Consent, for analytics cookies, session recordings and the guide email sequence. You can withdraw consent at any time and we stop.
Legitimate interests, for replying to an enquiry you sent us, keeping the site secure, and keeping basic records of who we have spoken to. We have weighed these interests against your rights and believe they are what you would expect when you contact a business.
Contract, where you become a client and we need your details to deliver the work and invoice for it.

How we use it

We do not sell personal data, and we do not use it for automated decisions that have a legal or similar effect on you.

To reply to your enquiry and, if you booked a call, to run that call and send you a short preparation note the day before.
To send you the guide you asked for, followed by a short series of emails on the same topic over about three weeks. Every email has an unsubscribe link and unsubscribing stops the series immediately.
To keep a record of enquiries and conversations in our customer relationship management (CRM) system so that whoever replies knows what was already said.
To understand which pages and forms work, so we can improve the site. This uses consented analytics only.
To meet legal obligations, such as keeping invoices for the period Irish tax law requires.

We use a small number of service providers to run the site and the business. Each one processes your data only on our instructions and under a written contract. By category, they are:

Hosting provider, in an EU data centre, which stores the website and its form submissions.
CRM and email provider, which stores enquiries and sends the auto-reply, the guide and the follow-up sequence.
Booking tool, for example Cal.com or Calendly, which handles the calendar slot when you book a call.
Analytics providers, such as Google Analytics and Microsoft Clarity, only after you have consented to analytics cookies.
Messaging: if you contact us on WhatsApp, Meta processes that conversation under its own terms.
Professional advisers such as our accountant, where a client relationship requires it.

International transfers

We keep data inside the European Economic Area where we can. Some providers above, particularly analytics and messaging tools, are based in or process data in the United States. Where that happens we rely on the European Commission’s adequacy decisions or on the Commission’s Standard Contractual Clauses, together with the provider’s own safeguards. You can ask us for details of the safeguards for any provider.

How long we keep it

Enquiries, booking requests and website review requests: 24 months from our last contact with you, unless a contract follows.
Client records: for the length of the engagement and then for the period required by Irish tax and company law for invoices and contracts.
Guide and email sequence subscribers: until you unsubscribe, or 24 months after you last open or click an email.
Analytics data: according to the retention setting in each tool, which we keep at the shortest practical option.
Server logs: as set by our hosting provider, normally a matter of weeks.

Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy.
Rectification of anything that is inaccurate or incomplete.
Erasure of your data where we no longer need it or you withdraw consent.
Restriction of processing while a question about the data is resolved.
Portability: to receive the data you gave us in a common machine-readable format.
Object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent at any time, without affecting what was done before you withdrew it.

How to exercise them, and how to complain

Email info@pefwil.com with what you would like us to do. We may ask you to confirm your identity so that we do not release data to the wrong person. We respond within one month, and sooner where we can.

If you are not happy with how we handle your data, you have the right to complain to the Data Protection Commission, Ireland’s supervisory authority, at www.dataprotection.ie. We would ask you to raise it with us first so we can try to put it right.

Security

The site is served over HTTPS. Form submissions are stored in systems with access limited to the people who need it. We keep software up to date, take backups, and review who has access to what. No system is perfectly secure, so if we ever discover a breach that affects your data we will tell you and the Data Protection Commission as the law requires.

Children

This site and our services are aimed at businesses and the adults who run them. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We update this policy when our tools or practices change. The date at the top of the page shows the latest version. If a change materially affects how we use data you have already given us, we will tell you by email where we can.

Related pages: Cookie policy and Terms of use.

Privacy policy