Privacy Policy
What personal information CK Website Design collects, why we use it, who we share it with, and the rights you have over it.
We collect what you send us
Mostly your name, business contact details and project information when you enquire, book a call or request a review.
We never sell your data
We share it only with the service providers we need to run the website and deliver our work.
Optional tracking is your choice
Analytics, advertising and the use of your contact details for Google's measurement features require your consent. Sending an enquiry does not give that consent.
You stay in control
Ask us to access, correct or delete your information at any time by emailing info@ckwebsitedesign.ie.
1. Who we are
CK Website Design is the trading name of Kamil Kuś, a web design and development business based in Ireland. In this policy, "CK Website Design", "we", "us" and "our" refer to that business.
We are the data controller for the personal information described in this policy. That means we decide how and why it is used, and we are responsible for looking after it in line with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Acts 1988–2018 and the ePrivacy Regulations 2011 (S.I. No. 336 of 2011).
This policy covers:
- visitors to ckwebsitedesign.ie and any page that links to this policy;
- people who send us an enquiry, book a call or request a Website Opportunity Review;
- prospective and existing clients and their staff, and our suppliers and partners;
- business contacts we reach out to about our services.
We are not required to appoint a Data Protection Officer. Privacy questions go directly to our project lead, Kamil Kuś, using the details in section 15.
2. Information we collect
Information you give us
- Enquiry and quotation forms: your name, email address, phone number, business name, website address, business sector, the service you are interested in, and anything you write in your message.
- Call and meeting bookings: your name, email address, the time you choose and any notes you add when booking a discovery call through our online booking page.
- Website Opportunity Review requests: the website address you ask us to check, and the name, email address and business details you give us so we can send you the results.
- Emails, calls and meetings: what you tell us when you contact us directly, including notes we take during discovery calls and meetings.
- Client projects: contact details for you and your team, project briefs, content and files you send us, account access you give us, contracts, invoices, payment records and correspondence.
- Reviews and testimonials: if you leave us a review or agree to a testimonial, your name, business, role and comments.
Information collected automatically
The local country lookup includes GeoLite2 data created by MaxMind, available from MaxMind.
When you submit an enquiry, request a free report or complete a website check, we estimate the submission country locally from the connection's IP address. Only the country is saved with the submission record, not the raw IP address. We use this approximate country to understand where requests come from and handle enquiries. VPNs and mobile networks can affect accuracy, and we leave the country unrecorded when it cannot be determined. This information is visible only in our private administration workspace and follows the retention period of the associated record. No IP address is sent to a geolocation provider for this lookup. This is separate from optional form-progress analytics and does not track unfinished forms.
When you visit our website, our hosting provider automatically records basic technical information needed to deliver pages and keep the site secure, such as your IP address, browser type, device type, the pages requested, the referring page and the date and time of the request.
If you accept analytics and advertising cookies, we also collect information about how you use the site, such as pages viewed, approximate location (city or country level), the ad or link that brought you here, and actions such as submitting a form or tapping our phone number or email link. See section 4.
Depending on the Google features enabled and the permissions you give, this may also involve device and browser identifiers, an internal User-ID, information associated with your signed-in Google Account, or hashed contact details you have provided directly to us. Section 4 explains these features and your choices.
Information from other sources
- Publicly available websites: when you request a Website Opportunity Review, or when we prepare a proposal, we analyse publicly available pages of your website and related public sources, such as search results and business listings.
- Business data providers and public sources: we may obtain business contact details (name, job title, company, work email address and work phone number) from B2B data providers, company websites, professional networks and public business registers, so that we can contact businesses about services relevant to them.
- Review platforms: our website displays ratings and reviews published on Google and Trustpilot, including reviewers' public display names.
- Referrals: a client or partner may pass on your contact details when recommending us.
We do not ask for, and do not want to receive, special category data (such as health information, religious beliefs or political opinions). Please do not include it in forms or messages.
Free website checks and internal alerts
When you use our free website check, we process the submitted public website address and the technical observations produced by the check. If these show serious problems or areas needing improvement, a summary may be emailed privately to CK Website Design's enquiry inbox through our email delivery provider. Unavailable measurements are not treated as problems.
You do not need to provide your name or email address to run the check. An internal scan alert is not an enquiry, a marketing subscription or permission to contact you, and it does not send an email to the owner of the scanned website.
Internal alert delivery records, including the scan evidence used in the notification, are removed after seven days by routine cleanup. Internal emails are handled under our business-correspondence retention arrangements below.
3. How we use your information and our legal basis
GDPR requires us to have a lawful basis for each use of personal information. The table below sets out what we do and why.
| What we do | Legal basis |
|---|---|
| Reply to your enquiry, arrange a call and prepare a proposal or quotation | Steps taken at your request before entering a contract (Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Carry out a Website Opportunity Review and send you the results | Steps taken at your request (Art. 6(1)(b)) |
| Deliver projects, maintenance, SEO, advertising and support services, and manage our client relationship | Performance of our contract with you or your business (Art. 6(1)(b)); legitimate interest where the contract is with your employer (Art. 6(1)(f)) |
| Invoicing, bookkeeping, tax and other legal or regulatory records | Legal obligation (Art. 6(1)(c)) |
| Keep the website working and secure, prevent spam and abuse, and investigate problems | Legitimate interest in running a secure, reliable website (Art. 6(1)(f)) |
| Optional analytics, Google signals, User-ID measurement, advertising personalisation and consented customer-data matching | Your consent (Art. 6(1)(a), and Regulation 5 of S.I. 336/2011 where cookies or device storage are involved), which you can withdraw at any time. Consent to cookies alone is not permission to share contact details for matching |
| Send service updates and relevant offers to existing clients | Legitimate interest and the existing-customer rule in Regulation 13 of S.I. 336/2011; you can opt out at any time |
| Contact businesses about services that may be relevant to them | Legitimate interest in promoting our services to businesses (Art. 6(1)(f)), always with a simple way to opt out; consent where the law requires it |
| Publish reviews and testimonials | Your consent, or the fact that you chose to publish the review on a public platform |
| Establish, exercise or defend legal claims | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed those interests against your rights and expectations. You can ask us for more detail about that assessment, and you have the right to object (see section 9).
Use of AI tools
We use AI-assisted software to help us analyse publicly available website content, draft reports and proposals, and write code. Any information you share may be processed by these tools as part of preparing work for you. We use business services whose terms do not allow your information to be used to train their models, and a person at CK Website Design reviews every report, proposal and recommendation before it reaches you.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
6. Transfers outside the European Economic Area
Some of our service providers are based in, or store data in, countries outside the European Economic Area, including the United States and the United Kingdom. Where that happens, we make sure your information is protected by one of the safeguards GDPR recognises, such as:
- a European Commission adequacy decision (for example, for the United Kingdom, or for US companies certified under the EU–US Data Privacy Framework); or
- the European Commission's Standard Contractual Clauses, together with any additional measures needed.
You can contact us for more information about the safeguards that apply.
7. How long we keep your information
We keep personal information only for as long as we need it. When that period ends we delete or anonymise it.
| Information | How long we keep it |
|---|---|
| Enquiries, call bookings and Website Opportunity Review requests that do not lead to a project | Up to 24 months from our last contact |
| Client contracts, project records, invoices and accounting records | 6 years after the end of the financial year in which the engagement ends, to meet Irish tax and legal requirements |
| Business contacts held for outreach | Up to 24 months from collection or last contact, or until you opt out |
| Suppression list (people who asked not to be contacted) | For as long as we carry out marketing, so that we can respect your request |
| Analytics data | Up to 14 months |
| Server and security logs | Up to 90 days, unless needed to investigate an incident |
| Backups | Overwritten on a rolling cycle; deleted data may remain in backups for a short period before being overwritten |
We may keep information for longer where it is needed to deal with a complaint or legal claim.
The periods above describe information we control. Activity associated with your Google Account is also subject to Google's own retention settings and privacy policy. You can manage that activity through My Activity.
8. How we protect your information
We use technical and organisational measures appropriate to the information we hold, including encrypted connections (HTTPS) across the website, access limited to the people who need it, multi-factor authentication on business accounts, strong password management, secure storage of client credentials, regular software updates and reputable providers with recognised security standards.
No system is completely secure. If a personal data breach occurs that is likely to put you at risk, we will tell you and notify the Data Protection Commission where the law requires it, normally within 72 hours of becoming aware of it.
9. Your rights
Under GDPR you have the right to:
- Access the personal information we hold about you and receive a copy;
- Rectification of information that is inaccurate or incomplete;
- Erasure of your information where there is no good reason for us to keep it;
- Restriction of how we use your information in certain circumstances;
- Data portability, to receive information you gave us in a commonly used, machine-readable format, where we process it by automated means on the basis of consent or contract;
- Object to processing based on legitimate interests, and to object at any time to direct marketing;
- Withdraw consent at any time where we rely on it. This does not affect anything we did before you withdrew it.
To use any of these rights, email info@ckwebsitedesign.ie. We may ask you to confirm your identity. We will respond within one month, which can be extended by up to two further months for complex requests, in which case we will tell you why. Exercising your rights is free of charge unless a request is clearly unfounded or excessive.
10. Marketing and your choices
We send marketing emails only to existing clients about similar services, to people who have agreed to receive them, and to business contacts where the law allows. Every marketing email includes a simple way to unsubscribe. You can also opt out at any time by replying "unsubscribe" or emailing info@ckwebsitedesign.ie.
If we obtained your work contact details from a business data provider or public source, this policy is our notice to you of that, and you can ask us to stop contacting you and delete your details at any time. We keep a minimal record of your opt-out so that we do not contact you again.
Opting out of marketing does not affect service messages about a project, invoice or enquiry you have with us.
11. When we work on our clients' websites
When we build, host, maintain or support a website, store or web application for a client, we may have access to personal information about that client's own customers, users or members. In that work we act as a data processor for the client, who remains the data controller.
We use that information only to provide the services the client has asked for, under a written agreement that includes data processing terms. If you are a customer or user of one of our clients, please contact that business about your information. This policy does not cover their use of it.
12. Children
Our services are for businesses and organisations. Our website is not aimed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us their information, please contact us and we will delete it.
13. Links to other websites
Our website links to other sites, including Google, Trustpilot, client websites and our booking page. We are not responsible for how those sites handle personal information, so please read their privacy policies.
14. Changes to this policy
We review this policy regularly and update it when our services, tools or the law change. The "last updated" date at the top shows when it was last changed. If we make a significant change that affects how we use information you have already given us, we will tell you directly where we can.
15. Contact us and complaints
For any question about this policy or your personal information, contact:
CK Website Design (Kamil Kuś)Guinness Enterprise Centre, Taylor's Ln, The Liberties, Dublin 8, D08 ET2R
Email: info@ckwebsitedesign.ie
Phone: +353 87 943 2594