Privacy Policy

Last updated: 15 July 2026

This draft assumes Nova Web Design is a sole-trader/small business registered and operating in Ireland. Placeholders like [Business Address] and [Registration/VAT Number, if applicable] should be filled in before publishing. Have a solicitor or data protection advisor review before this goes live.

1. Who we are
Nova Web Design (“Nova Web Design”, “we”, “us”, “our”) is a web design business established in Ireland, operating the website www.novawebdesign.ie and providing web design services to clients in Ireland, the United Kingdom, and internationally.
For the purposes of data protection law, Nova Web Design is the data controller of the personal data described in this policy.
Registered address: Shantallow, Oranmore, Galway, Ireland.
Contact email: admin@novawebdesign.ie

2. Which laws apply to this policy
Because we are established in Ireland, our processing of personal data is governed primarily by:
 • The EU General Data Protection Regulation (GDPR); and
 • The Irish Data Protection Act 2018,
both regulated by the Irish Data Protection Commission (DPC).
Because we also provide services to clients and website visitors in the United Kingdom, we additionally aim to comply with:
 • The UK GDPR and the Data Protection Act 2018 (as it applies in the UK); and
 • The Privacy and Electronic Communications Regulations (PECR), as both have been updated by the Data (Use and Access) Act 2025 (DUAA),
both regulated by the UK Information Commissioner's Office (ICO).
Where the two frameworks differ, we apply whichever standard is more protective of your rights.

3. Personal data we collect

3.1 Website visitors (general)
Like most websites, our site (built on Showit) automatically collects non-identifying technical information such as browser type, device type, referring site, and general usage patterns via Google Analytics. We use Google Analytics under its standard data retention settings; IP addresses are truncated/anonymised where Google's settings allow.

3.2 Contact form enquiries
When you submit our contact form (hosted via Showit), we collect:
 • Name and email address
 • Business website and/or Instagram URL
 • Any other details you choose to include in your message

These submissions are sent directly to our admin email inbox (admin@novawebdesign.ie); Showit does not separately store your enquiry once it has been delivered to us, beyond its own standard processing logs.

3.3 Email marketing sign-ups
If you subscribe to our mailing list, we collect your name and email address, which is stored and processed by our email marketing platform, MailerLite, in order to send you newsletters, updates, or promotional content. You can unsubscribe at any time using the link in any email we send.

3.4 Clients
If you engage us for web design services, we collect the personal data necessary to deliver those services and manage the business relationship, which may include:
 • Name, business name, email address, and phone number
 • Billing and payment information (processed by Stripe — see Section 5)
 • Project-related content you provide (e.g. text, images, branding assets)
 • Correspondence between us

4. How we use your data and our lawful basis
We only use personal data for the purpose it was collected, and rely on the following lawful bases:
 • Contract — to provide web design services, process payments, and communicate with clients about their projects.
 • Consent — to send marketing emails via MailerLite (you may withdraw this consent at any time).
 • Legitimate interests — to respond to contact form enquiries, maintain and secure our website, and understand website usage via analytics.
 • Legal obligation — to retain financial records for tax and accounting purposes.

5. Who we share your data with
We do not sell or rent your personal data. We share personal data only with trusted third-party service providers (“processors”) who help us run our business, currently:
 • Stripe — payment processing for client invoices. Stripe acts as an independent controller/processor for payment data and maintains its own security and compliance standards (including PCI-DSS).
 • MailerLite — email marketing platform used to store subscriber details and send newsletters.
 • Showit — website hosting/builder platform and contact form delivery.
 • Google Analytics — website usage analytics.

We may also disclose personal data where required by law, to protect our legal rights, or in connection with a sale or transfer of the business (in which case your data would transfer as part of that transaction, subject to the protections in this policy continuing to apply).

6. International data transfers
Some of our service providers (including Stripe, MailerLite, and Google) may process data outside Ireland/the EEA and the UK, including in the United States. Where this occurs, we rely on appropriate safeguards recognised under GDPR and UK GDPR, such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum, and/or the provider's own certified data protection frameworks. You can contact us for more information about the specific safeguards in place for a given provider.

7. Cookies
Our website may use cookies and similar technologies for essential site functionality and for analytics (Google Analytics). Under PECR (as updated by the DUAA), some low-risk analytics/statistical cookies may be used without requiring prior consent, provided clear information is given and an easy opt-out is available; more intrusive cookies (e.g. advertising/tracking cookies) require your prior consent. You can control or disable cookies through your browser settings, though this may affect site functionality.

8. Data retention
We keep personal data only for as long as necessary for the purposes described in this policy:
 • Client, contract, and payment records: retained for 7 years after the end of the engagement, in line with Irish Revenue/tax record-keeping requirements.
 • Contact form enquiries that do not result in a client relationship: retained for up to 12 months, then deleted.
 • Email marketing data (MailerLite): retained until you unsubscribe, or reviewed periodically for inactive subscribers.
 • Website analytics data (Google Analytics): retained per Google's standard retention settings.

9. Your rights
Whether you are based in Ireland, the UK, the EU, or elsewhere, you generally have the right to:
 • Access the personal data we hold about you
 • Have inaccurate data corrected
 • Request erasure of your data (“right to be forgotten”), subject to our legal obligations (e.g. tax records)
 • Object to or restrict certain processing
 • Request a copy of your data in a portable format
 • Withdraw consent at any time, where processing is based on consent (e.g. marketing emails)
To exercise any of these rights, contact us at admin@novawebdesign.ie. We will respond within one month, as required by GDPR/UK GDPR.

10. Complaints procedure
We take data protection concerns seriously and want the chance to put things right directly.
How to complain to us
 • Email admin@novawebdesign.ie with the subject line “Data Protection Complaint”, describing your concern.
 • We will acknowledge your complaint within 5 working days.
 • We will investigate and aim to provide a full response within 30 calendar days. If we need longer due to complexity, we will tell you why and give a revised timeframe.

If you're not satisfied
If you are not happy with our response, or with how we have handled your personal data, you have the right to complain to the relevant supervisory authority:
Ireland/EU: Data Protection Commission (DPC) — 
www.dataprotection.ie
UK: Information Commissioner's Office (ICO) — 
www.ico.org.uk

11. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including relying on reputable third-party providers (Stripe, MailerLite, Showit, Google) who maintain their own industry-standard security measures. No method of transmission or storage is 100% secure, but we work to use commercially acceptable means to protect your data.

12. Children
Our website and services are intended for business use by adults. We do not knowingly collect personal data from children, and our services are not directed at anyone under the age of 18.

13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.

14. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: admin@novawebdesign.ie