Privacy policy

Last updated: 11 March 2026

1. Who we are

This website is operated by OneillCo Limited (trading as ONeillco), a company registered in Ireland with its registered office at Questum Business Center, Ballingarrane, Co. Tipperary, E91 V329, Ireland.

For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, OneillCo Limited is the data controller responsible for your personal data.

If you have any questions about this policy or your personal data, please contact us via our contact page.

2. What data we collect

We may collect and process the following personal data:

Data you provide to us

• Contact form submissions: name, email address, phone number, company name, and any information you include in your message.
• Email correspondence: your email address, name, and the content of your communications with us.
• Consultation and demo requests: name, company, role, contact details, and details of your application or requirements.

Data collected automatically

• Technical data: IP address, browser type and version, operating system, time zone setting, and general geographic location (country/region level).
• Usage data: pages visited, time spent on pages, navigation paths, and referring website addresses.

We do not collect any special categories of personal data (e.g. health data, political opinions, religious beliefs).

3. How we use your data

We process your personal data for the following purposes and on the following legal bases:

We will not use your personal data for automated decision-making or profiling.

4. Cookies and tracking

This website uses only strictly necessary cookies required for the website to function. We do not currently use any third-party analytics, advertising, or tracking cookies.

If we introduce any non-essential cookies in the future, we will implement a cookie consent mechanism in accordance with the ePrivacy Directive (2002/58/EC) and obtain your consent before placing them.

5. Who we share your data with

We do not sell, rent, or trade your personal data to third parties. We may share your data with:

• Hosting and infrastructure providers: our website is hosted on Vercel Inc. (USA). Data transfers to the USA are covered by the EU–US Data Privacy Framework. See Vercel's privacy policy.
• Professional advisers: accountants, auditors, or legal advisers where reasonably necessary.
• Legal or regulatory authorities: where required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

6. International transfers

Where your personal data is transferred outside the European Economic Area (EEA), we ensure that adequate safeguards are in place, including:

• Transfers to countries with an EU adequacy decision (GDPR Article 45)
• Standard Contractual Clauses approved by the European Commission (GDPR Article 46(2)(c))
• The EU–US Data Privacy Framework for US-based processors that are certified under the framework

7. How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry and contact data: retained for up to 24 months after your last communication with us, unless a contractual relationship is established.
• Contractual and project data: retained for the duration of the contract plus 7 years to comply with Irish tax and company law requirements.
• Website usage data: aggregated and anonymised data may be retained indefinitely for statistical purposes.

8. Your rights

Under the GDPR and the Irish Data Protection Act 2018, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object — object to processing based on legitimate interests at any time.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us via our contact page. We will respond within one month, as required by GDPR Article 12.

9. Right to complain

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission:

• Data Protection Commission
  21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
  Website: www.dataprotection.ie

10. Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular review of our security practices.

11. Links to other websites

This website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

12. Children

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

13. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically.