The short version
I hold what you send me so I can answer you and do the work. I do not sell it to anyone, and you can ask me to show you it or delete it at any time, at info@dylanmadden.ie.
Who is responsible
Dylan Madden Photographer of Dublin, Ireland is the data controller for enquiries to this site and for my own clients’ records.
What I collect
When you get in touch. If you use the form or email me, I hold your name, your email address and what you send me, including your website address if you give it.
When we work together. Your contact details, the details of the job and the invoices.
Basic technical data. Like any website, my host records standard request information, such as your browser type and internet address, to keep the site running and secure.
This site sets no cookies and runs no analytics.
Why, and the legal basis
To answer you and do the work, because you asked me to (GDPR Article 6(1)(b)), or because replying to you and running the business is my legitimate interest (Article 6(1)(f)). To keep tax and accounting records, because the law requires it (Article 6(1)(c)).
How long I keep it
An enquiry, for as long as there is likely work behind it and a reasonable time afterwards. Invoices and accounts, for six years, as Irish tax law requires. If you ask me to delete something sooner I will, unless the law says I must keep it.
Websites and booking systems I look after
I build and host websites, mailboxes and online booking systems for other businesses. If you have used one of those, that business decides what is collected and why, and its own privacy policy is the one that applies to you. I act only on its instructions, as its data processor.
That can include what people enter on its website or booking page, such as a name, email address, phone number, appointment times and receipts, and the messages in its mailbox.
I can reach this information only to keep those systems running. I do not use it for anything else, I do not contact you with it, and I do not sell or share it.
A nightly copy of a booking system’s diary is kept on a computer only I use, so that a fault on the server cannot lose it. When a business stops working with me, I give it its information and delete my copies once it asks.
Who helps
DreamHost hosts this site and the systems above, on servers in the United States. DreamHost’s privacy policy.
Twilio sends text messages for the businesses that use text reminders. Twilio’s privacy notice.
Nobody else handles it, apart from the company that runs my own email.
Your rights
Under the GDPR and the Data Protection Act 2018 you can ask me for a copy of your data, to correct it, to delete it, to restrict or object to how I use it, or to give it to you in a portable form. Email info@dylanmadden.ie.
If it is about a business I look after, ask that business, or tell me and I will pass it on. You can also complain to the Data Protection Commission at dataprotection.ie.