Privacy notice

Privacy Policy

When you send an enquiry, you should know exactly what happens to the information you provide. This notice explains how Róisín's Bespoke Contracts handles personal data connected with this website, enquiries and legal services.

We ask for information needed to respond and, where instructed, to provide contract drafting, review or legal consultation. Please read the review notes below: the controller and publication details must be confirmed before this policy is final.

01 / Information

Personal Data We Collect

The information depends on how you contact us and whether you ask us to work on a matter. Share only what is relevant at that stage.

Website enquiries

A form may ask for your name, organisation, email address, phone number, service requested and the details in your message.

Email and calls

We receive the contact details and information you choose to give us by email or phone. That may include documents sent for contract drafting or review.

Website activity

Hosting and site tools may record technical details such as IP address, browser type, device information and pages viewed. Confirm the exact data collected with each provider.

Please take care with sensitive information. Don't send special category personal data or confidential documents unless they're needed for your enquiry and we've asked you to provide them.

02 / Handling

How We Use and Retain Your Data

We use personal data to deal with your enquiry, agree the work and provide the service you request. We don't sell it or use it for unrelated marketing.

Purpose, basis and proposed retention

Reply to an enquiry Steps taken at your request before a contract, or legitimate interests in handling and responding to correspondence. Proposed period: 12 months after the last contact if the matter does not proceed.
Prepare a proposal Steps taken before entering a contract. Proposed period: 12 months after the proposal closes if you don't instruct us.
Provide legal services Performance of the engagement and, where relevant, compliance with legal obligations. Proposed period: 6 years after the engagement ends, subject to applicable duties and the needs of the matter.
Protect the website Legitimate interests in site security and preventing misuse. Retain relevant logs only for a period justified by the security purpose.

We use service providers for functions such as website hosting, business email and, if enabled, analytics. They should only process personal data under suitable written terms and our instructions. Confirm the providers, locations and any international transfer safeguards before this notice is approved.

03 / Your choices

Your Rights, Security and Cookies

You can ask us to act on your data protection rights. Contact us with enough information to identify your request and the matter it concerns.

Access and a copy

You can ask whether we hold personal data about you and request a copy, along with information about how it is used.

Correction or deletion

You can ask us to correct inaccurate details. You may also ask us to erase data where the law gives you that right.

Restriction or objection

You can ask us to limit certain processing or object where we rely on legitimate interests. We may need to explain why we must continue in a particular case.

Data portability

In certain circumstances, you can ask for data you provided to be supplied in a commonly used electronic format or sent to another organisation.

Withdraw consent

If processing relies on your consent, you can withdraw it at any time. Withdrawal doesn't affect processing carried out before you changed your choice.

We aim to respond to a valid rights request within one month. The period may be extended for complex or multiple requests, and we will explain if that applies. You can also complain to Ireland's Data Protection Commission. Cookie choices can be changed through the site's consent controls where available, or managed through your browser settings.

04 / Final checks

Policy Review Notes and Contact

This notice needs a final review against the business's actual data handling, website tools and legal identity before it is published as a complete policy.

Details to confirm

  • Controller's full legal identity: Róisín's Bespoke Contracts and [confirm legal form].
  • Company number: [Insert company number, if applicable].
  • Registered office: [Confirm registered office address].
  • Hosting, email and analytics processors: [Insert provider names and locations].
  • International transfer safeguards, if any: [Confirm applicable safeguards].
  • Review date and version: [Insert date] / [Insert version].

The retention periods and cookie descriptions above also need confirmation against current practice.