Privacy policy

Tóg (togs.ie) is the data controller responsible for your personal data. We are a digital studio based in Galway, Ireland. For any privacy question — including the rights set out below — contact us at shannytrades@gmail.com.

We only collect what we need to talk to you and deliver our work:

• Enquiries. When you use our contact form we collect your name, email, and optionally your phone number, business name, area of interest and message — so we can reply and prepare for our conversation. Lawful basis: legitimate interests (responding to your request) and steps taken at your request prior to entering a contract.
• Bookings. When you book a call or session we collect your name, email, optional phone and business, the chosen time, and any notes you add — to schedule and run the meeting and send you a calendar invite. Lawful basis: performance of a contract (or steps prior to one).
• Payments. When a booking, package or membership requires payment, card details are entered directly with our payment processor — we never see or store your full card number. We retain a transaction reference, amount and status for accounting. Lawful basis: performance of a contract and legal obligation (tax and accounting records).
• Technical data. Our hosting keeps standard server logs (such as IP address and request time) to keep the site secure and available. Lawful basis: legitimate interests (security and reliability). We do not run advertising trackers.

We do not buy contact lists, and we do not use your data for automated decision-making that has a legal or similarly significant effect on you.

We use a small number of carefully chosen service providers (sub-processors) who act only on our instructions:

• Stripe — payment processing. Stripe acts as a processor for card payments and is itself a controller for fraud-prevention and regulatory purposes. See Stripe's own privacy policy for details.
• Cloud hosting & database — our site, enquiries and bookings are hosted on managed cloud infrastructure with data stored in the European Union. Where any provider transfers data outside the EEA, that transfer is covered by an adequacy decision or Standard Contractual Clauses.
• Email — we use a business email provider to correspond with you and to send booking confirmations.

• Enquiries that don't become a project: kept for up to 24 months, then deleted, so we can pick up a conversation if you come back.
• Bookings: kept for the life of our working relationship and for a reasonable period afterwards.
• Payment & accounting records: retained for six years to meet Irish tax and accounting obligations.

When data is no longer needed for these purposes, we securely delete it.

Under the GDPR and the Irish Data Protection Act 2018 you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where there's no overriding reason to keep it.
• Restriction — ask us to pause processing while a concern is resolved.
• Portability — receive your data in a portable, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, where we rely on consent.

To exercise any of these, email shannytrades@gmail.com. We respond within one month. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

Access to enquiries and bookings is role-scoped and limited to the people who need it. Data is encrypted in transit, payments are handled by a PCI-DSS-compliant processor, and we keep our systems patched. No system is perfectly secure, but we take the protection of your data seriously and review our practices regularly.

We keep cookies to a minimum. We use only what's strictly necessary to run the site securely; we do not use advertising or cross-site tracking cookies. If we ever introduce optional analytics, we will ask for your consent first.

We may update this policy as our services or the law change. We'll revise the date at the top, and for material changes we'll do our best to let affected people know directly.

Questions, requests or concerns about your privacy? Email shannytrades@gmail.com — a real person will reply. You can also read our terms of service.