Privacy Policy

Who we are

Visionoble ("we", "us", "our") is a digital studio based in Ireland that designs and builds websites, online stores, AI chatbots and custom software. We are the data controller for the information described here.

This policy covers both our public website and the Visionoble client portal. It explains what personal information we collect, why we collect it, and what rights you have over it.

If you have any questions about this policy or your data, contact us at hello@visionoble.com.

What we collect

We only collect what we need to respond to you and run our business:

• Enquiry details you give us. When you fill in a form on our website, or a lead form on Facebook or Instagram, we collect your name, email address, phone number (if provided) and anything you write in your message.
• Client portal accounts. If we set up portal access for you, we hold your name, email address, the business you belong to and your role. Your password is handled entirely by our authentication provider and is never visible to us.
• What you send us through the portal. Requests, messages and any files or details you choose to include in them.
• Website and domain records. For client websites we hold technical details such as the domain name and its renewal date, so we can remind you before it expires.
• Technical and usage data. Basic anonymous information about how the site is used, through privacy-first analytics that set no cookies.

How we use your information

We use your information to:

• Reply to your enquiry and discuss your project.
• Provide the services you have asked us for, and run your account in the client portal.
• Send you service messages, such as a reminder before your domain expires or an update on a request you raised.
• Understand how our website is used so we can make it better.

Legal basis (GDPR)

Where the EU/UK General Data Protection Regulation applies, we rely on: our legitimate interest in responding to enquiries and running our business; performance of a contract, where you are a client and we need your information to deliver the service; and legal obligation, where we are required to keep records.

We do not rely on consent for any of the above, and we do not send marketing email.

Who we share it with

We do not sell your personal information, ever. We share it only with the service providers that help us operate, and only as far as needed:

• Google (Firebase), which provides the sign-in and database behind the client portal.
• Our hosting and email providers, which deliver the website and route your enquiry to our inbox.
• Meta (Facebook and Instagram), if you contact us through one of their lead forms, which passes your details to us.
• Cloudflare, whose privacy-first analytics give us anonymous visitor counts without cookies or tracking.

Where your data is stored

Some of these providers operate outside the European Economic Area, which means your information may be transferred and stored outside the EEA. Where that happens, the transfer is covered by the safeguards those providers put in place, such as the standard contractual clauses approved by the European Commission.

Cookies and analytics

We do not use tracking cookies. To understand how the site is used we rely on Cloudflare Web Analytics, which is privacy-first by design: it sets no cookies, stores nothing on your device, and does not build a profile of you or follow you across other websites.

It records only anonymous, aggregated information such as which pages were viewed, the country a visit came from, and which site referred you. None of it identifies you, and there is no way for us to link any of it back to an individual.

Because nothing is stored on your device, there is no cookie banner to accept or decline.

The client portal uses a small amount of storage in your browser to keep you signed in and to remember your theme. That is necessary for the portal to work and is not used for tracking.

How long we keep it

We keep enquiry information only as long as needed to respond to you and for our legitimate business records, after which it is deleted. If you become a client, we keep your portal account and request history for as long as we work together.

When our work together ends we close your portal account and delete the personal data in it, other than anything we are required to keep for tax or legal records.

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to ask for a copy of it. To exercise any of these, email hello@visionoble.com and we will respond within one month.

You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie, or to the data protection authority in your own country.

Security

Access to the client portal requires an individual account and password. Passwords are handled by our authentication provider and are never stored or seen by us. Database rules restrict each account to the information for its own business only, and all traffic to the site and portal is encrypted.

No system is completely secure, but we keep what we hold to a minimum and review access regularly. If a breach ever affected your personal data, we would notify the Data Protection Commission within 72 hours and tell you directly where there was a risk to you.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown below.