This policy explains how Tús AI, a trading name of Ethical Digital Marketing Limited, collects and uses personal data when you visit this website, contact us, or engage us for services. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and the ePrivacy Regulations 2011.
1. Who we are
Ethical Digital Marketing Limited is a limited company registered in Ireland, trading as Tús AI. Our registered office is Unit 2 Shearwater, Kinsale, Co Cork. We are the data controller for personal data processed through this website and through services we deliver to clients.
For any privacy questions, contact us at hello@example.ie.
2. What information we collect
We only collect information that we genuinely need.
Information you give us directly when you fill in the contact form, email us, or engage our services:
- Name and job title
- Business name, website, and county
- Email address and phone number
- Information about your business: number of staff, business type, tools you use, workflows, problems you want to solve, timeline, and budget
- Any other information you choose to send us in correspondence or attached files
Information collected automatically when you visit the website:
- Anonymised analytics about page views, referrers, browser type, device, and rough geographic region (country/city level only)
- Standard server log data such as IP address and timestamps, retained for security and abuse prevention
Information you share during a project: depending on the engagement, we may handle sample customer enquiries, internal documents, spreadsheets, screenshots, or test data. We agree the scope of any sensitive data in writing before the project begins, and we minimise unnecessary data wherever possible.
3. How we use your information
We use the information you provide to:
- Reply to your enquiry and discuss whether we are a good fit
- Prepare proposals, quotes, and project scopes
- Deliver services we have agreed with you
- Send you operational emails about a live project (status updates, scheduling, invoices)
- Maintain accounting, tax, and legal records
- Improve the website and service over time
We do not sell your data. We do not run a public newsletter or marketing list. We will not put you on a sales sequence without your consent.
4. Lawful basis for processing
Under GDPR Article 6, our lawful bases for processing personal data are:
- Performance of a contract — when we are delivering a service you have engaged us for, or preparing one at your request.
- Legitimate interests — for replying to enquiries, basic website analytics, fraud prevention, and security. Our legitimate interest is running and improving a small business in a way that is not detrimental to your rights.
- Legal obligation — for accounting, tax, and statutory record-keeping.
- Consent — only where we ask explicitly (for example, optional cookie categories, if used).
5. Who we share information with
We share data only with the service providers we genuinely need to run the business. Each is contractually bound to handle data securely and process it only on our instructions.
- Hosting and infrastructure: the website is hosted on Vercel.
- Form handling and email: contact form submissions and operational email may be processed via providers such as Formspree, Resend, or Google Workspace.
- Project tools: depending on the project, we may use Notion, Google Workspace, Slack, GitHub, and similar tools to deliver the work.
- AI providers: where AI features are part of a project we build for you, we may use providers such as OpenAI, Anthropic, or Google. Where possible we use enterprise tiers where data is not used to train provider models. We agree the specific provider, configuration, and data flow with you in writing before any sensitive data is used.
- Accounting, legal, and professional advisers: where required for compliance.
We do not share your data with advertisers, data brokers, or any party not strictly required to deliver our service.
6. International transfers
Some of the providers above are based outside the European Economic Area (EEA), most commonly in the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. We do not transfer data internationally where there is no lawful basis to do so.
7. How long we keep information
We keep personal data only as long as we genuinely need it.
- Contact form enquiries: up to 24 months from the last interaction, then deleted.
- Active client records: for the duration of the engagement.
- Past client records: typically 7 years after the engagement ends, in line with Irish accounting and tax retention requirements.
- Server logs and analytics: typically 30–90 days unless required longer for security investigation.
You can ask us to delete your data sooner — see your rights below.
8. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Ask us to delete your data ("right to erasure")
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where consent is the basis for processing
- Lodge a complaint with the Irish Data Protection Commission
To exercise any of these rights, email us at hello@example.ie. We will respond within one month.
If you are not happy with how we have handled your data, you can complain to the Data Protection Commission (Ireland), 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — dataprotection.ie.
9. Cookies and tracking
This website is intentionally light on tracking. We do not use behavioural advertising cookies. We may use a small number of strictly necessary cookies set by our hosting provider for security and basic site function, and privacy-respecting analytics that aggregate visits at the country and page level without tracking individual users.
If we add any non-essential cookies (for example, embedded video or chat) we will request your consent through a clear cookie banner before they are set.
10. Security
We take reasonable technical and organisational measures to protect personal data: HTTPS in transit, access controls on systems we use, encrypted storage where applicable, two-factor authentication on staff accounts, and a least-privilege approach to who can see what. No system is perfectly secure; if we ever suffer a breach affecting your data, we will notify you and the Data Protection Commission as required by law.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practice or in law. The "Last updated" date at the top of this page will always show when it was last revised. Material changes will be flagged on the website.
12. How to contact us
For any privacy-related questions or requests:
Ethical Digital Marketing Limited (trading as Tús AI)
Unit 2 Shearwater, Kinsale, Co Cork, Ireland
Email: hello@example.ie