Legal

Privacy Policy

Last updated: 7 August 2026

This Privacy Policy explains how Merritt Digital handles personal information when you visit this website, make an enquiry or work with us.

1. About this Privacy Policy

This Privacy Policy applies to personal information handled by Merritt Digital, a sole trader operating in Ireland, through this website, business communications and the delivery of website services.

For this information, Merritt Digital is normally the data controller. That means Merritt Digital decides why and how the information is used. Section 12 explains the different position that can apply when Merritt Digital handles information for a client through that client's website.

2. Information we collect

The information collected depends on how you interact with Merritt Digital. It may include:

  • your name, phone number, email address, business name and contact preferences;
  • the information you include in an enquiry, message, call or other communication;
  • quotation, contract, project, support, invoice and payment-status information;
  • limited publicly available business information used to assess a possible business-to-business enquiry, such as a business name and links to its website, map listing or social profile;
  • website content, access details and other material supplied for a client project;
  • records of communications and actions taken in relation to an enquiry or client account; and
  • limited technical and security information, such as an IP address, request time, browser or device information, and service logs generated when the website or its private administration area is used.

The public enquiry form currently asks for your name, email address, phone number, an optional business name, information about what you want your website to do, and confirmation that you have read this Privacy Policy. It does not ask for payment-card details.

Please do not submit sensitive personal information unless Merritt Digital has specifically asked for it and there is a clear reason to provide it.

3. How we collect information

Information is collected directly from you when you complete the enquiry form, email, call, accept a quotation, provide project material, request support or otherwise communicate with Merritt Digital.

Some technical information is generated automatically when your device requests a page or uses the private administration area. Merritt Digital may also receive relevant information from a person acting for your business, a client, a service provider or a public source where it is lawful and appropriate to do so.

For proportionate business-development research, Merritt Digital may compile limited information from public business websites, map listings and business social profiles. Research tools may help organise these public sources, but Merritt Digital reviews whether a business is relevant before deciding whether to make contact.

4. Why we use personal information

Merritt Digital uses personal information to:

  • review and respond to enquiries;
  • prepare quotations and take steps requested before a contract is agreed;
  • design, build, host, maintain and support client websites;
  • manage client relationships, projects, tasks, communications, invoices and payments;
  • identify and review businesses that may reasonably be interested in Merritt Digital's services and record whether contact would be appropriate;
  • operate, protect, troubleshoot and improve the website, CRM and related services;
  • prevent misuse, fraud and security incidents;
  • keep appropriate business and accounting records;
  • establish, exercise or defend legal claims; and
  • comply with legal and regulatory obligations.

6. Contact-form submissions

When you submit the enquiry form, the information is sent to Merritt Digital's own website endpoint. The website records the submission and creates related enquiry and contact records in the private CRM database. It also attempts to send Merritt Digital a notification through its transactional email provider so that the enquiry can be reviewed.

The website also attempts to send an automatic confirmation to the email address supplied with the enquiry. The information is available only to authorised people managing Merritt Digital's enquiries and to service providers that need it to operate the relevant systems.

Submitting the form does not create a contract or require Merritt Digital to accept a project. Please provide information that is accurate and relevant to the enquiry.

7. Sharing information

Merritt Digital does not sell personal information. Information is shared only where reasonably necessary, including with:

  • Netlify, which is intended to host and deliver the website;
  • Neon, which is intended to provide the database used for enquiry and CRM records;
  • Postmark, which is intended to deliver transactional enquiry and authorised follow-up emails;
  • domain, DNS and other technical providers where needed to operate a client service;
  • contractors or professional advisers who need the information for an authorised purpose and are subject to appropriate duties; and
  • courts, regulators, law-enforcement bodies or other public authorities where disclosure is required or permitted by law.

Service providers may process information only as needed for the relevant service and under the applicable contract and privacy terms. The production accounts and hosting regions for this website are not yet finalised, so provider arrangements may be updated before launch.

8. International data transfers

Some service providers may process personal information outside Ireland or the European Economic Area, depending on the provider's operations and the region selected for the production service. Merritt Digital therefore does not promise that all information will remain in Ireland or the EEA.

Where a transfer from the EEA requires a safeguard, Merritt Digital will use an appropriate lawful mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses or another safeguard permitted by data-protection law. You may contact Merritt Digital for further information about the safeguards relevant to your information.

9. How long we keep information

Merritt Digital keeps personal information only for as long as it is reasonably needed for the purpose for which it was collected, and for any legal, accounting, security or dispute-related requirement.

  • Enquiries that do not become client projects are normally kept for up to 12 months after the last meaningful communication.
  • Client and project records are kept for the duration of the relationship and afterwards where needed for support, handover, disputes or legal claims.
  • Invoices, payment records and accounting records are kept for the period required by Irish tax and accounting law.
  • Technical and security logs are kept according to operational need and the settings or retention periods of the relevant provider.
  • Where Merritt Digital records a consent or privacy choice, the relevant record may be kept where needed to show the choice that was made.
  • Business-development research records are reviewed periodically and removed when they are no longer needed. A limited decision or objection record may be retained where necessary to avoid inappropriate repeated contact.

Information may be deleted earlier where it is no longer needed and no legal or operational reason requires it to be retained. A longer or shorter period may apply where the circumstances or the law require it.

10. Security

Merritt Digital uses proportionate technical and organisational measures designed to protect personal information. These include restricted access to the private CRM, authenticated administrator accounts, secure connections, security headers, input validation, request controls, password hashing, software maintenance, backups where applicable, confidentiality duties and service-provider security controls.

No internet service or storage system can be guaranteed completely secure. If you believe information has been exposed or misused, contact Merritt Digital promptly.

11. Cookies and similar technologies

The public website does not currently use analytics cookies, advertising cookies, tracking pixels or browser storage for marketing or audience measurement.

The private CRM uses strictly necessary session and anti-forgery cookies when an authorised administrator signs in. These cookies support authentication and security, are not used for advertising, and expire after a short period or are removed on logout. Because they are strictly necessary to provide and secure the requested private service, they are not optional.

If non-essential cookies or similar technologies are introduced later, this policy and any required consent controls will be updated before they are used.

12. Client website data

A client will normally be the data controller for personal information collected through that client's own website, including an enquiry form, CRM, booking system, online shop or similar service. Where Merritt Digital hosts, maintains or supports that service and handles the information only on the client's documented instructions, Merritt Digital may act as a data processor.

The client remains responsible for deciding what information its website collects, identifying the appropriate legal basis, providing its own privacy information, responding to individual rights and giving Merritt Digital lawful instructions. Where required, the parties should put an appropriate data-processing agreement in place. This Privacy Policy does not replace a client's own policy or data-processing terms.

13. Individual rights

Depending on the circumstances, you may have the right to:

  • ask for access to your personal information;
  • ask for inaccurate or incomplete information to be corrected;
  • ask for information to be erased;
  • ask for processing to be restricted;
  • object to processing based on legitimate interests;
  • receive certain information in a portable format; and
  • withdraw consent at any time where consent is the legal basis.

These rights are not absolute and can be limited by law. To make a request, email office@merrittdigital.ie. Merritt Digital may need to confirm your identity and will respond within the time required by applicable data-protection law.

14. Complaints

Please contact Merritt Digital first if you have a concern about how your information is handled. This gives us an opportunity to understand and address the issue.

You also have the right to raise a concern or make a complaint to the Irish Data Protection Commission, or to the competent supervisory authority in the country where you live, work or believe an infringement occurred.

15. Children

This website and Merritt Digital's services are intended for businesses and are not directed at children. Merritt Digital does not knowingly seek to collect personal information from children through the enquiry form. If you believe a child has supplied information, please contact Merritt Digital so that it can be reviewed and deleted where appropriate.

16. Automated decision-making

Merritt Digital does not use personal information submitted through this website for solely automated decisions that produce legal or similarly significant effects, and it does not carry out profiling for advertising.

18. Changes to this Privacy Policy

Merritt Digital may update this Privacy Policy when its services, providers or legal obligations change. The current version will be published on this page with a revised last-updated date. Where a change materially affects an active client relationship, Merritt Digital will provide additional notice where appropriate.

19. Contact

Merritt Digital
Email: office@merrittdigital.ie

Privacy questions, rights requests or concerns about personal information may be sent to that address.