Last updated: 17/11/2025

1. Who I Am

This website and the services offered through it are operated by:

Amanda Hagarty, trading as “Mandy’s Media”
County Cork, Ireland
Email: amanda@mandysmedia.com

For the purposes of GDPR, I am the Data Controller for all personal data collected through this website and in the course of providing web design and digital services.

2. Information I Collect

I only collect the information necessary to communicate with you, carry out requested work, maintain this website, and comply with legal obligations.

a) Information You Provide Directly

  • Name

  • Email address

  • Phone number (optional)

  • Project details or service requests

  • Billing information (I do not store payment card details)

b) Information Collected Automatically

When you visit this website, certain technical data may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Pages visited and referring URLs

  • Date and time of access

This helps with site functionality, analytics, and security.

c) Cookies and Tracking Technologies

This site may use cookies for:

  • Basic site functionality

  • Security

  • Analytics

  • Managing your cookie preferences

A list of cookies currently in use on this site can be found in the Cookie Policy.

3. How I Use Your Information

Your information may be used for:

  • Responding to enquiries

  • Providing web design and related digital services

  • Managing communication during ongoing projects

  • Invoicing, accounting, and tax compliance

  • Improving website performance and user experience

  • Maintaining website security and preventing malicious activity

  • Fulfilling legal obligations

I do not sell or share personal data with third parties for marketing purposes.

4. Legal Bases for Processing

Under GDPR, I process personal data based on the following legal grounds:

  • Contract – when you request services or enter into a project with me

  • Consent – for optional cookies or newsletter subscriptions

  • Legitimate Interests – to improve website performance and ensure security

  • Legal Obligation – for tax, accounting, and business record-keeping

5. Third-Party Services

This website uses third-party services necessary for functionality, analytics, hosting, security, email communications, and data storage.

These may include:

  • Hosting providers

  • Website performance tools

  • Security services

  • Consent management services

  • Analytics providers

  • Email or contact form providers

Each processes data only as needed for the function it performs.
The exact cookies and trackers in use at any time are listed in the Cookie Policy.

6. Data Retention

I keep personal data only for as long as it is necessary to provide my services, maintain business records, and comply with legal obligations.

  • Client communications and project files:
    Emails, messages, project notes, design assets, and other materials related to active or past client work are retained for as long as needed to deliver services, provide ongoing support, and meet accounting and legal record-keeping requirements.

  • Enquiry emails:
    Messages from potential clients who do not proceed with a project are generally kept for a limited period, unless further follow-up is required.

  • Security and technical logs:
    Automatically collected technical data (such as security logs) is stored only for the minimum time needed to maintain the safety and functionality of the website.

  • Cookie consent records:
    Retained according to the settings and requirements of the consent management platform in use.

If you would like your personal data deleted sooner—and there is no legal basis requiring me to retain it—you may request this at any time.

7. How Your Data Is Protected

I take reasonable technical and organisational measures to protect your data, including:

  • SSL encryption

  • Secure hosting environment

  • Security monitoring tools

  • Strong password and authentication practices

Although no method of transmission is completely secure, I follow industry best practices.

8. Your Rights Under GDPR

If you are located in the EU/EEA, you have the right to:

  • Access your personal data

  • Request correction

  • Request deletion

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with the Irish Data Protection Commission

To exercise your rights, contact me at amanda@mandysmedia.com.

9. International Data Transfers

Some service providers may process or store data outside the EU/EEA.
In such cases, appropriate safeguards (such as Standard Contractual Clauses) are used to ensure your data remains protected.

10. External Links

If this website links to external sites, I am not responsible for their privacy practices. Please review their privacy policies if you visit them.

11. Changes to This Policy

This policy may be updated periodically to reflect changes in website functionality, services offered, or legal requirements.
The latest version will always be posted on this page.

12. Contact

If you have questions about this Privacy Policy or your personal data:

Email: amanda@mandysmedia.com
Data Controller:
Amanda Hagarty, trading as “Mandy’s Media”