Your information, handled simply.

Who is responsible

This site is run by Garrett Reil, a brand consultant based in Ireland. I am the data controller for any personal information you share here. If you have a question about your data, get in touch through the contact page.

What this site collects

There are two ways information reaches me.

When you use the contact form, you choose to send your name, email address and message, and optionally your phone number and organisation. I use these only to read and reply to your enquiry.

Technical data from your visit. Like any website, my host records standard information such as your IP address and browser type for security and to keep the site running. The site also uses privacy-first analytics that count visits without cookies and without tracking you across other sites.

Why I’m allowed to hold it

When you send the contact form, I process your message because you’ve asked me to get back to you – the legal basis is your request as a step preparatory to a possible contract.

For technical and security data, the legal basis is my legitimate interest in running a safe, working website.

If you ask to hear from me by email (updates, newsletter or similar), the legal basis is your consent. You can withdraw it at any time.

For business records I’m required to keep – invoices, tax filings, regulatory records – the legal basis is legal obligation.

Who else processes it

I keep the list of third parties deliberately short, and each one handles only what it needs to:

• Cloudflare hosts the site, provides the spam check on the contact form (Turnstile), and supplies the cookieless visit analytics.
• Resend delivers contact-form messages to my inbox.
• Microsoft provides the email service where I read and reply to your message.
• Register365 is the domain registrar.

I don’t sell your information, and I don’t pass it to advertisers or data brokers.

Working with collaborators

On some projects I engage collaborators or work alongside agency partners. Where doing so involves your personal data, it is shared only as needed for the specific work and only under written confidentiality and data-processing terms. If a collaborator is engaged independently by you (rather than by me on your behalf), they act as a separate data controller, and any data you share with them is governed by their own privacy notice.

International transfers

Some processors (Cloudflare, Resend) are based in the United States. Transfers are covered by Standard Contractual Clauses approved by the European Commission, with appropriate additional safeguards.

Cookies and tracking

This site doesn’t set advertising or tracking cookies. The spam check on the contact form may store a small technical token in your browser to confirm you’re a real person – that’s its only purpose. The analytics are cookie-free.

How long it’s kept

• Client records (invoices, contracts, project files): six years from the end of our engagement, in line with Irish accounting and tax retention.
• Prospect enquiries: up to two years from last contact, then deleted unless you’ve become a client.
• Newsletter subscribers, if and when I operate one: until you unsubscribe.
• Server and security logs: a short period in line with my host’s normal practice.

Your rights

Under data-protection law you can ask me to:

• Show you the information I hold about you
• Correct anything that’s wrong
• Delete your information, subject to legal retention requirements
• Restrict or object to specific uses
• Send you a portable copy of your data
• Withdraw consent at any time, where consent is the legal basis

Just ask through the contact page and I’ll sort it out within a month. If you’re not happy with how I’ve handled things, you can complain to the Irish Data Protection Commission (dataprotection.ie).

Changes to this notice

If how the site handles information changes, I’ll update this page with a new ‘last updated’ date.