Privacy Policy

SD Consulting is the data controller responsible for your personal data. We are a business consultancy based in Dublin, Ireland, providing ERP implementation, AI and intelligent automation, business process automation, and technical recruitment services.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

We collect only the personal data that is necessary for the purposes described in this policy. The categories of data we may collect include:

Identity and contact data: your name, email address, phone number, company name, and job title, provided when you submit our contact form or communicate with us directly.

Enquiry data: the content of messages you send us, including any details about your business needs or project requirements.

Technical data: your IP address, browser type and version, device type, operating system, and time zone, collected automatically when you visit our website.

Usage data: information about how you navigate and interact with our website, including pages visited, time spent on pages, and referring URLs. This data is collected in aggregate and is not linked to your identity without your consent.

We do not collect any special categories of personal data (such as health, racial or ethnic origin, political opinions, or biometric data), and we do not knowingly collect data from children under the age of 16.

Direct interactions: you provide data when you complete our contact form, send us an email, or communicate with us by phone or in person.

Automated technologies: we collect technical and usage data automatically through cookies and similar technologies when you visit our website. Please see our Cookies section below.

Third parties: we may receive data about you from analytics providers and website hosting partners, subject to their own privacy policies.

We use your personal data only for the purposes for which it was collected and where we have a valid legal basis to do so. Specifically:

To respond to your enquiries and provide the services or information you have requested.

To manage our relationship with you, including following up on proposals or engagements.

To improve our website, services, and communications based on how visitors use our site.

To comply with our legal and regulatory obligations under Irish and EU law.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Under Article 6 of the GDPR, we rely on the following legal bases to process your personal data:

Legitimate interests (Article 6(1)(f)): responding to business enquiries, managing client relationships, and improving our website and services, where our interests are not overridden by your fundamental rights and freedoms.

Consent (Article 6(1)(a)): where you have given us clear, freely given, specific, and informed consent — for example, to set non-essential analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Legal obligation (Article 6(1)(c)): where processing is necessary to comply with a legal requirement applicable to us.

Contract (Article 6(1)(b)): where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law.

Contact form submissions and enquiry correspondence are retained for up to 24 months from the date of last contact, after which they are securely deleted.

Where we enter into a client engagement, we retain relevant data for the duration of the engagement and for up to 7 years thereafter, in accordance with Irish statutory requirements.

You may request deletion of your personal data at any time by contacting us at [email protected], subject to any overriding legal obligations.

We do not sell, rent, or trade your personal data to third parties.

We may share your data with carefully selected service providers who assist us in operating our website and delivering our services — for example, website hosting providers and email service providers. These providers act as data processors on our behalf and are contractually bound to process your data only on our instructions and in accordance with GDPR.

We may disclose your data to competent authorities where required by law, court order, or to protect our legal rights.

We do not transfer your personal data outside the European Economic Area (EEA). Where any service provider is located outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Our website uses cookies — small text files stored on your device — to improve your browsing experience and help us understand how visitors use our site.

Essential cookies are strictly necessary for the website to function correctly. They do not require your consent and cannot be disabled through our cookie settings.

Analytics cookies help us understand how visitors interact with our website by collecting and reporting information in aggregate form. These cookies are only set with your prior consent, which you can give or withdraw at any time through the cookie consent banner on our site.

You can also control and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more information, visit www.aboutcookies.org.

As a data subject under the GDPR, you have the following rights, which you may exercise free of charge:

Right of access (Article 15): you may request a copy of the personal data we hold about you and information about how we process it.

Right to rectification (Article 16): you may ask us to correct inaccurate or incomplete personal data without undue delay.

Right to erasure (Article 17): you may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations.

Right to restrict processing (Article 18): you may ask us to suspend processing of your personal data in certain circumstances.

Right to data portability (Article 20): where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to object (Article 21): you may object at any time to processing of your personal data based on legitimate interests, including for direct marketing purposes.

Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within one month of receipt of your request. We may need to verify your identity before processing your request.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure, in accordance with Article 32 of the GDPR.

Our website is served over HTTPS. Access to personal data is restricted to authorised personnel only, on a need-to-know basis.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify you directly without undue delay.

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority in Ireland.

Data Protection Commission: www.dataprotection.ie | Lo Call: 1800 437 737 | 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

We would, however, appreciate the opportunity to address your concerns before you approach the DPC. Please contact us first at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be posted on this page with an updated revision date.

We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.