LEGAL

Privacy Policy

What personal data Stuama.ie processes, why, which service providers are involved, how long information is kept, and your rights under data protection law.

  • Last updated

Summary

  • You can read Stuama.ie without giving us any personal information.
  • The only personal information you give us directly is what you choose to send through our contact form.
  • Only if you consent, Stuama.ie uses Google Analytics 4 for website usage statistics. It does not use advertising, remarketing or social media tracking.
  • Following a link to a provider or to CompareInsuranceIreland.ie does not send them your details.
  • We do not sell personal data.

Who is responsible for your data

Stuama.ie is operated by Paul Hudson, trading as Magenta Online Marketing, in Ireland. Paul Hudson, trading as Magenta Online Marketing, is the controller of the personal data described on this page: the person who decides why and how it is processed.

To ask a question about this policy or to make a privacy request, use our contact form and choose “General enquiry” or “Other”.

What we process and why

This table covers all the personal data processing connected with Stuama.ie as the site works today. Data protection law requires a lawful basis for each purpose; ours are shown in the last column, with the relevant article of the General Data Protection Regulation (GDPR).

Personal data processed in connection with Stuama.ie
WhatWhyLawful basis
Contact form enquiries: your name, email address, company or business name (if you give it), enquiry type and message To read and reply to your enquiry and deal with what you raise, such as correcting a page or discussing a partnership Our legitimate interests in running the website and responding to people who contact us (Article 6(1)(f)). Where you ask about entering into an arrangement with us, steps taken at your request before a contract (Article 6(1)(b))
Security check data on the contact page: IP address, browser and device characteristics and signals about how the check was completed To confirm that a message is sent by a person, not an automated program, using Cloudflare Turnstile Our legitimate interests in protecting the contact form and our inbox from spam and abuse (Article 6(1)(f))
Technical request data: IP address, browser and device information, the page or file requested, and the date and time To deliver pages to your browser and protect the site against attacks and abuse, through our hosting provider, Cloudflare Our legitimate interests in delivering the website reliably and securely (Article 6(1)(f))
Your cookie choice, saved in your browser’s local storage To remember whether you accepted or rejected optional analytics, so we respect your choice and do not ask on every page It stays in your browser and is not sent to us. Storing it is strictly necessary to respect your choice (see our Cookie Policy)
Website usage data, only if you consent to analytics: pages viewed, scrolling, links followed to other websites, browser and device information, approximate location and a randomly generated identifier stored in Google Analytics cookies To produce aggregated statistics about how Stuama.ie is used, using Google Analytics 4, so we can improve the website Your consent (Article 6(1)(a)), which you can withdraw at any time in Cookie Settings

We do not use this information to build profiles of visitors, and we do not use the technical request data to identify individual visitors. Stuama.ie does not carry out automated decision-making that has legal or similarly significant effects on you.

The contact form

Giving us your details is optional. You only need to if you want a reply; if you prefer not to, you can still use every other part of the site.

When you press “Send message” on our Contact page:

  1. your browser sends what you entered to a small program that runs on Cloudflare as part of our website;
  2. that program checks the details, confirms with Cloudflare that the security check was passed, and rejects the message if a hidden field that people do not see has been filled in (a sign of an automated program);
  3. it then passes the message to Resend, our email delivery provider, which delivers it to our inbox as an email. The email comes from our website’s own sending address, with your email address set as the reply address so we can answer you directly.

The website does not save your message in a database, and our code does not write the content of your message to logs. The copy we keep is the email in our inbox. We use your details only to deal with your enquiry. We do not add you to a mailing list or use your details for marketing.

Please do not send financial, health or other sensitive personal information through the form. If you do, we will use it only to deal with your enquiry.

Security check on the contact page

Our Contact page uses Cloudflare Turnstile to check that a message is being sent by a person. It usually works without you needing to do anything. Turnstile loads from challenges.cloudflare.com on the Contact page only; it is not loaded on any other page. To carry out the check, Cloudflare receives technical information such as your IP address, browser and device characteristics and signals about how the check was completed. We use Turnstile only to protect the form, not for analytics or advertising.

Hosting and security

Stuama.ie is hosted on Cloudflare, which delivers the site’s pages and protects it against malicious traffic. As part of that, Cloudflare processes technical request data about each visit, such as your IP address, browser and device information, the page or file requested, and the date and time. Cloudflare may also use strictly necessary security cookies in some circumstances; our Cookie Policy explains this. The fonts used on Stuama.ie are stored on our own site, so reading a page does not involve a request to a separate font provider.

Cookies, local storage and analytics

Stuama.ie uses your browser’s local storage to remember the choice you make in the cookie banner or Cookie Settings.

Stuama.ie uses Google Analytics 4, provided by Google, for website usage statistics, but only if you consent. Analytics is optional and switched off until you choose “Accept” or switch Analytics on in Cookie Settings; until then, Google Analytics is not loaded. Once you consent, Google Analytics may set analytics cookies and collects the website usage data described above. We use it only for aggregated statistics, with Google signals and ad personalisation switched off; we do not use it for advertising or remarketing. You can withdraw or change your consent at any time in Cookie Settings; Google Analytics then stops collecting data and its cookies are removed. Our Cookie Policy has the detail.

Stuama.ie links to other websites, including providers’ pricing pages, regulators and official sources. These are ordinary links: when you follow one, your browser goes directly to that website. Stuama.ie does not send that website your name, contact details or anything you have entered on our site. As with any link, your browser may tell the other website that you arrived from Stuama.ie. Once you are on another website, its own privacy and cookie policies apply, not ours.

Business insurance. Business insurance comparisons and quote requests are provided through CompareInsuranceIreland.ie. Following our link to it takes you to a separate website. Stuama.ie does not collect insurance details from you and does not pass any personal information to CompareInsuranceIreland.ie. CompareInsuranceIreland.ie is also operated by Paul Hudson, trading as Magenta Online Marketing, but it is a separate website: anything you enter there is handled under its own privacy policy, which you can read on that site.

Commercial links. The Our Partnerships page explains which links, if any, involve a commercial relationship. A commercial relationship does not mean that personal information is shared: no link on Stuama.ie sends your personal information to the website it points to.

Who receives personal data

We use the following service providers to run Stuama.ie. They process personal data on our behalf, or as described in their own privacy information:

  • Cloudflare: hosting, content delivery and security for the whole site; running the contact form program; and the Turnstile security check on the Contact page. Cloudflare Privacy Policy.
  • Resend: delivering contact form messages to our inbox as email. Resend Privacy Policy.
  • Google: Google Analytics 4 website usage statistics, only if you consent to analytics. Google Privacy Policy.
  • Our email provider: hosting the inbox where contact form messages arrive and from which we reply.

Beyond this, we share personal data only where the law requires it, for example in response to a valid request from a public authority, or where it is needed to establish, exercise or defend legal claims. We do not sell personal data.

International transfers

Cloudflare operates a global network, so technical request data and security check data may be processed outside the European Economic Area (EEA). Cloudflare states that it is certified under the EU-U.S. Data Privacy Framework and that its data processing addendum incorporates the European Commission’s Standard Contractual Clauses.

Google may process analytics data outside the European Economic Area. Where this occurs, Google states that it uses recognised data transfer safeguards in accordance with applicable data protection law.

Resend is based in the United States and stores the data it handles there, so contact form messages are transferred to the United States when they are delivered. Resend states that these transfers are covered by the EU-U.S. Data Privacy Framework and by Standard Contractual Clauses in its data processing addendum (Resend GDPR information).

How long we keep information

  • Contact form messages are kept in our inbox for as long as we need them to deal with your enquiry and any follow-up. After that, we keep them only where there is a continuing reason, such as a record of a correction we made or correspondence about a business arrangement that we need to keep, and delete them when that reason ends.
  • Resend keeps records of the emails it delivers for a limited period under its own data retention terms.
  • Cloudflare keeps technical request and security data under its own retention terms.
  • Google Analytics keeps website usage data for the data retention period set in our Google Analytics account. Its cookies last up to two years unless you withdraw consent or clear them.
  • Your cookie choice stays in your browser until you change it or clear your browser’s storage. We ask again after about six months.

Your rights

Under the GDPR and Ireland’s Data Protection Act 2018, you have the following rights. Some apply only in certain circumstances.

  • Access: to ask whether we hold personal data about you and to get a copy of it (Article 15).
  • Rectification: to have inaccurate data corrected or incomplete data completed (Article 16).
  • Erasure: to have your data deleted, for example where we no longer need it (Article 17).
  • Restriction: to ask us to limit how we use your data, for example while we check its accuracy (Article 18).
  • Objection: to object to processing based on our legitimate interests; we must then stop unless we have compelling legitimate grounds that override your interests, or need the data for legal claims (Article 21).
  • Portability: to receive data you gave us in a commonly used format, where processing is based on consent or a contract and carried out by automated means (Article 20).
  • Withdrawing consent: where processing is based on your consent, to withdraw it at any time, as easily as you gave it. For cookie choices, use Cookie Settings in the footer of any page (Article 7(3)).

To use any of these rights, contact us through our contact form. We may need to ask for information to confirm your identity. We will respond without undue delay and within one month; that can be extended by up to two further months for complex or numerous requests, in which case we will tell you why within the first month (Article 12). Making a request is normally free. The Data Protection Commission explains these rights in its guide to your rights under the GDPR.

Complaints to the Data Protection Commission

If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. You also have the right to lodge a complaint with a supervisory authority (Article 77). In Ireland this is the Data Protection Commission (DPC), 6 Pembroke Row, Dublin 2, D02 X963. The DPC’s How to contact us page has its current contact details and online form. If you live or work in another EU or EEA country, you can also complain to the data protection authority there.

Children

Stuama.ie is written for people running or working in businesses. It is not aimed at children, and we do not knowingly collect personal data from children.

Changes to this policy

We will update this policy when the way Stuama.ie handles personal data changes, for example before introducing an analytics service or a new way to contact us. The “Last updated” date at the top of this page shows when it last changed.