Privacy Policy
How OCL collects, uses and protects your personal data.
1. Who we are
OCL (O'Carroll Legear Consulting) is an Irish web services consultancy based in Dublin, Ireland. We operate the website oclconsulting.com. For the purposes of the General Data Protection Regulation (GDPR) and Irish data protection law, OCL is the data controller for personal data collected through this website.
Contact: [email protected]
2. What data we collect
We collect personal data only when you voluntarily submit it through our contact form:
- Required: Name, email address, service interest, message
- Optional: Phone number, business name
We do not use analytics, tracking pixels, advertising cookies, or any third-party scripts that collect data about your visit. No cookies are set by this website.
3. Why we collect it (lawful basis)
We process your contact form data on the basis of legitimate interests (Article 6(1)(f) GDPR) — specifically, to respond to your business enquiry and evaluate whether we can provide services to you. If our engagement proceeds to a contract, processing will shift to contractual necessity (Article 6(1)(b) GDPR).
4. How we use your data
- To respond to your enquiry
- To prepare a proposal or quotation
- To fulfil any agreed services
- We do not use your data for marketing without your explicit consent
- We do not sell or rent your data to any third party
5. Who we share it with
Contact form submissions are delivered via Resend (resend.com), an email delivery service. Resend processes your data as a data processor on our behalf in accordance with their privacy policy. No other third parties receive your personal data unless required by law.
This website is hosted on European infrastructure (EU-based servers in Germany and Finland) operated by Hetzner Online GmbH, a German company subject to EU data protection law. No personal data is transferred outside the European Economic Area (EEA).
6. How long we keep it
Enquiry data is retained for up to 12 months after our last contact with you. If we enter into a contract, relevant data is retained for 7 years in accordance with Irish tax and accounting obligations. Data is then securely deleted.
7. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten") — subject to legal retention requirements
- Object to processing based on legitimate interests
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time where processing is consent-based
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Complaints
If you believe your data rights have been violated, you have the right to lodge a complaint with the Data Protection Commission (DPC) — Ireland's national data protection supervisory authority:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
www.dataprotection.ie
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of this website after changes constitutes acceptance of the updated policy.