Born Studio (“we”, “us”, “our”) is a boutique digital studio based in Dublin, Ireland. We are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Acts 1988–2018, and any other applicable data protection legislation in force in Ireland.

This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website, contact us, engage our services or otherwise interact with us. By using our website or services, you acknowledge the practices described in this Policy.

Who We Are

Born Studio is the data controller for the purposes of data protection law in respect of the personal data we process. If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at [email protected].

Personal Data We Collect

We may collect and process the following categories of personal data:

• Information you provide directly to us, including your name, email address, business name, website address, telephone number and any other information you include in enquiry forms, contact forms or email correspondence.
• Information relating to projects and services, including details about your business, technical requirements, hosting details, billing information and communications exchanged during the course of a project.
• Technical and usage data collected automatically when you visit our website, such as your IP address, browser type, device information, pages visited, referring URLs and interaction data. This information may be collected through server logs, cookies or similar technologies.
• Marketing preferences, including your consent to receive communications from us.

We do not knowingly collect personal data from children under the age of 16. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete such information.

How We Use Your Personal Data

We process personal data for the following purposes:

• To respond to enquiries and provide information about our services.
• To enter into and perform contracts with clients, including the design, development, hosting and maintenance of websites and digital services.
• To manage billing, invoicing and payments.
• To improve our website, services and user experience.
• To send relevant updates, insights or marketing communications where you have provided consent or where we are otherwise permitted to do so under applicable law.
• To comply with legal obligations, including accounting, tax and regulatory requirements.

Legal Basis for Processing

Under the GDPR, we rely on the following legal bases for processing your personal data:

• Performance of a contract, where processing is necessary to provide services you have requested or to take steps at your request prior to entering into a contract.
• Legitimate interests, where processing is necessary for our legitimate business interests, such as improving our services, managing client relationships and ensuring the security of our website, provided such interests are not overridden by your rights and freedoms.
• Consent, where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Legal obligation, where processing is necessary to comply with applicable law.

Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, including satisfying legal, accounting or reporting requirements. Retention periods may vary depending on the nature of the data and the purpose for which it is processed. When personal data is no longer required, we will securely delete or anonymise it.

Sharing of Personal Data

We do not sell or rent your personal data. We may share personal data with trusted third-party service providers who assist us in operating our business, including hosting providers, payment processors, IT support services, analytics providers and professional advisers. Such third parties are required to process personal data in accordance with our instructions and applicable data protection laws.

We may also disclose personal data where required to do so by law or where we believe such action is necessary to protect our rights, comply with a legal obligation or respond to lawful requests by public authorities.

International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place in accordance with the GDPR, such as the use of standard contractual clauses or transfers to countries that have been deemed to provide an adequate level of protection.

Your Rights

Under Irish and EU data protection law, you have the following rights in respect of your personal data:

• The right to access the personal data we hold about you.
• The right to request rectification of inaccurate or incomplete data.
• The right to request erasure of your personal data in certain circumstances.
• The right to restrict or object to the processing of your personal data.
• The right to data portability, where applicable.
• The right to withdraw consent at any time where processing is based on consent.
• To exercise any of these rights, please contact us at [email protected]. We may request additional information to verify your identity before responding to your request.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Commission in Ireland.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality, analyse traffic and enhance user experience. You may manage your cookie preferences through your browser settings. Further details may be provided in a separate Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. While we take reasonable steps to safeguard personal data, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any external sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our processing practices. Any updates will be published on this page with an updated version date. We encourage you to review this Policy periodically.

Contact

If you have any questions about this Privacy Policy or the way we process your personal data, please contact us at [email protected].