Last Updated: May 28, 2025
We Build It (“we,” “us,” or “our”), a company registered in Ireland under company number 1563077WA, is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.webuildit.ie (the “Website”) or use our services.
This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Data Protection Acts 1988-2018 (Ireland), and other applicable data protection laws. By using our Website or services, you agree to the collection and use of your personal data as outlined in this policy.
1. Data Controller
We Build It is the data controller responsible for your personal data. For questions or to exercise your data protection rights, please contact us at privacy@webuildit.ie.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
a) Data You Provide
- Identity and Contact Data: Name, email address, or other information you provide when you contact us, register for an account, place an order, or subscribe to our newsletter.
- Transaction Data: Details about payments to and from you, including billing information and order history.
- User Content: Information you submit through forms, surveys, or communications (e.g., feedback, inquiries, or support requests).
b) Data Collected Automatically
- Technical Data: IP address, browser type, operating system, device information, and browsing behavior (e.g., pages visited, time spent on the Website) collected via cookies and similar technologies.
- Usage Data: Information about how you interact with our Website, such as clicks, navigation paths, and preferences.
c) Data from Third Parties
- Third-Party Services: Data from analytics providers (e.g., Google Analytics), advertising networks, or payment processors (e.g., Stripe, PayPal) when you interact with our services.
- Publicly Available Data: Information from public sources, such as social media profiles, if relevant to our services.
We do not collect special categories of personal data (e.g., health, political opinions, or biometric data) unless explicitly required and with your consent.
3. How We Use Your Personal Data
We process your personal data based on lawful grounds under the GDPR, including:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| To provide and manage our services (e.g., process orders, deliver products) | Identity, Contact, Transaction Data | Performance of a contract |
| To respond to inquiries or provide customer support | Identity, Contact, User Content | Legitimate interests or performance of a contract |
| To improve our Website and services | Technical, Usage Data | Legitimate interests |
| To send marketing communications (e.g., newsletters) | Identity, Contact Data | Consent |
| To comply with legal obligations (e.g., tax, accounting) | Identity, Transaction Data | Legal obligation |
| To prevent fraud or ensure Website security | Technical, Usage Data | Legitimate interests |
4. Cookies and Tracking Technologies
We use cookies and similar technologies (e.g., web beacons, pixels) to enhance your experience, analyze Website performance, and deliver personalized content. Cookies may include:
- Essential Cookies: Necessary for the Website to function (e.g., session management).
- Analytics Cookies: Track usage patterns to improve our services.
- Marketing Cookies: Used for targeted advertising.
You can manage your cookie preferences through our Cookie Consent Tool or your browser settings.
5. Sharing Your Personal Data
We may share your personal data with:
- Service Providers: Third parties providing services such as hosting, payment processing, email delivery, or analytics (e.g., Google Analytics, AWS). These providers are bound by data processing agreements to protect your data.
- Business Partners: If necessary to fulfill our services (e.g., delivery companies).
- Legal Authorities: When required by law or to protect our rights, safety, or property.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a third party, subject to GDPR compliance.
We do not sell your personal data to third parties.
6. International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Adequacy Decisions: Transfers to countries deemed to have adequate data protection by the European Commission.
- Standard Contractual Clauses (SCCs): Contracts approved by the EU to ensure GDPR-compliant data protection.
- Binding Corporate Rules: For intra-group transfers, where applicable.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:
- Transaction data may be kept for 12 years to comply with tax and accounting obligations.
- Marketing data is retained until you withdraw consent or unsubscribe.
- Technical data (e.g., analytics) is typically retained for 24 months.
When personal data is no longer needed, we securely delete or anonymize it.
8. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal exceptions).
- Restriction: Limit how we process your data in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests, including direct marketing.
- Withdraw Consent: Withdraw consent at any time where processing relies on consent (e.g., marketing emails).
- Automated Decision-Making: Not to be subject to decisions based solely on automated processing that significantly affect you.
To exercise these rights, contact us at privacy@webuildit.ie. We will respond within one month, though complex requests may take longer (up to three months).
If you are unsatisfied with our response, you can lodge a complaint with the Data Protection Commission (DPC) in Ireland:
Website: www.dataprotection.ie
Email: info@dataprotection.ie
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest.
- Regular security assessments and updates.
- Access controls to limit data access to authorized personnel.
Despite these measures, no online system is 100% secure. If a data breach occurs, we will notify you and the DPC within 72 hours, as required by the GDPR.
10. Third-Party Links
Our Website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
11. Children’s Privacy
Our Website and services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at privacy@webuildit.ie.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or a prominent notice on our Website. The updated policy will be effective from the date posted.
13. Contact Us
For questions, concerns, or to exercise your data protection rights, please contact us at:
Email: privacy@webuildit.ie