Privacy Notice.

Shane Doherty operates Saper and is the data controller for the personal data described in this notice. Saper is based in North County Dublin, Ireland.

For privacy or data-protection requests, email Shane at Shane@littleredssauces.com. This is a temporary contact address and will be replaced with a Saper address once the studio inbox is active.

If you send an enquiry, we may collect your name, business name, email address, optional phone number, optional website or social-media link, business type, current website status, package interest, the type of help you are looking for and the project details you provide.

Please do not send sensitive personal information or special-category data through the enquiry form unless it is genuinely necessary.

When you visit the website, the hosting and infrastructure used to deliver the site may process technical information such as your IP address, request time, requested page, browser or device information and security or server-log information. This is used to operate, secure and troubleshoot the website.

Saper may identify relevant businesses using information those businesses have made publicly available, for example on a business website, business directory or business social-media profile. This may include a business name, named business contact, role, published business email address, business telephone number or public social-media profile.

Where personal data is used for proportionate business-development activity, Saper's GDPR basis is legitimate interests under Article 6(1)(f). Any electronic marketing or direct contact must also comply with the separate rules that apply under Irish ePrivacy law.

You can object to the use of your personal data for direct marketing at any time. Once an objection is received, Saper will stop using your personal data for that purpose.

Where necessary, Saper may keep a minimal suppression record so that an opt-out request is respected and the person is not contacted again.

• Website hosting and infrastructure: Vercel, which currently delivers this website, may process technical request and security information.
• Email delivery: when live enquiry delivery is enabled, Saper uses Resend / Plus Five Five, Inc. to transmit enquiry emails.
• Studio email: once the Saper inbox is active, the email provider will process enquiry correspondence.
• Website fonts: Google receives technical request information when a visitor's browser downloads the fonts used by this website.
• Professional advisers: accountants, legal advisers or other professional advisers, only where reasonably necessary.
• Authorities and legal claims: information may be disclosed where required by law or to establish, exercise or defend legal rights.

Saper does not sell personal data and does not provide enquiry details to third parties for their own advertising.

Some technology providers may process personal data outside Ireland or the European Economic Area. Where GDPR requires a transfer safeguard, Saper must use providers and arrangements that provide a lawful transfer mechanism, such as an applicable European Commission adequacy decision, EU Standard Contractual Clauses or another valid GDPR transfer safeguard.

• Enquiries that do not become projects: normally deleted within 12 months of the last meaningful contact, unless there is a legitimate reason to keep them for longer.
• Project and client correspondence: kept for the project and up to 24 months after it ends where needed for support, dispute handling or legitimate business records, unless another legal requirement applies.
• Accounting and tax records: records that must be retained for Irish accounting or tax purposes may be kept for six years or for a longer period where the law requires it.
• Suppression records: where someone objects to direct marketing, Saper may retain the minimum information necessary to record and respect that opt-out.
• Technical and security logs: retained only for the period reasonably required for security, troubleshooting and service delivery, subject to the infrastructure provider's applicable retention settings.

Depending on the circumstances, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• object at any time to processing for direct marketing;
• receive personal data in a portable format where the GDPR right to portability applies;
• withdraw consent where processing is actually based on consent; and
• lodge a complaint with a supervisory authority.

These rights are subject to the conditions and exceptions set out in data protection law. Saper will normally respond to a valid data-protection rights request within one month. Where GDPR permits an extension because a request is complex or numerous, the requester will be informed within the initial one-month period. Saper will not charge for an ordinary rights request unless GDPR expressly permits it.

If you have concerns about how Saper handles your personal data, please contact Saper first so we can try to resolve them. You also have the right to lodge a complaint with the Irish Data Protection Commission.

Visit the Irish Data Protection Commission website.

You do not have a statutory obligation to send Saper an enquiry. The fields marked as required are needed so that Saper can understand and respond to the enquiry. Optional fields do not have to be completed. If the required information is not provided, Saper may not be able to respond or assess the project.

Saper does not use automated decision-making or profiling to decide whether to accept, reject or price a website project.

Saper does not currently use behavioural analytics, advertising pixels or visitor profiling on this website.

Saper does not currently use non-essential cookies for analytics or advertising. A consent banner is therefore not shown for non-essential tracking. If Saper introduces analytics, advertising cookies or another non-essential technology that requires consent, an appropriate consent mechanism will be implemented before that technology is activated.

Saper uses reasonable technical and organisational measures appropriate to the nature of the information handled through the website. No online system can be guaranteed to be completely secure, and visitors should avoid sending unnecessary sensitive information through the enquiry form.

This notice may be updated when Saper changes the way personal data is used or when service providers or legal requirements change. The latest version will always be published on this page with an updated date.