Privacy policy
Last updated: 05/08/2026
1. The short version
I collect as little information as I can get away with. I don't sell it, I don't share it for marketing, and I don't do anything clever with it. If you want to know what I hold about you, ask and I'll tell you.
The rest of this page is the detail, because you're entitled to it and because the law requires it.
2. Who's responsible for your information
I am. AHConsultancy is a sole trader business run by Adam Henson from the address at the bottom of this page, and I'm the data controller for the information described here.
If you have any question about your information, email me at adam.henson@ahconsultancy.ie. It comes to me, not to a support desk.
3. If you're just visiting the website
What I collect
When you visit this site, some information is gathered automatically:
- Which pages you looked at and how long you stayed
- Roughly where in the world you are, at country or county level
- What kind of device and browser you're using
- Which website or search sent you here
This is aggregate and statistical. It tells me that eleven people read the pricing page last week. It doesn't tell me who they were.
Why
To understand which parts of the site are working and which aren't, so I can improve it.
Legal basis
My legitimate interest in running and improving my own website. Where this relies on cookies that aren't strictly necessary, I ask for your consent first, and you can withdraw it at any time.
Cookies
Details of the specific cookies used are in my Cookie Policy.
4. If you get in touch
What I collect
Whatever you send me — your name, email address, phone number if you give it, your business details, and whatever you tell me about what you're looking for. This applies to any method of communication.
Why
To answer you, and to have the conversation you asked for.
Legal basis
Taking steps at your request before entering a contract, and my legitimate interest in responding to enquiries.
How long I keep it
If we end up working together, your enquiry becomes part of your client record — see below. If we don't, I delete the correspondence after two years.
5. If you become a client
What I collect
- Your name, business name, address, email and phone number
- Your business details — what you do, your opening hours, your services
- Content you send me: text, images, logos, product information
- Login details or delegated access to accounts I need to work on, such as your domain registrar, hosting, Google Business Profile or social accounts
- Records of what you've been quoted, invoiced and paid
Why
To build and look after your website, to invoice you, and to keep proper business records.
Legal basis
Performance of our contract, and my legal obligations around tax and accounting records.
How long I keep it
Financial records for six years, as Irish tax law requires. Project files and correspondence for two years after our arrangement ends, in case you come back or need something recovered — then deleted.
Account access
Any access you give me is used solely for the work you've asked me to do. When we stop working together, I remove myself from your accounts, and I'll confirm in writing that I've done it. If you'd like that access removed sooner, say so and it's done the same day.
6. Information about your customers
If I'm building or looking after a website that collects information about your customers — through a contact form, a booking system or an online shop — then that information belongs to you, not to me.
In that situation you're the data controller and I'm acting as a processor on your behalf. I only handle that information as needed to do the work you've asked for, and I don't use it for anything of my own. Where required, we'll put a separate written data processing agreement in place.
7. Who else sees your information
I use a small number of established services to run the business. Each one only gets what it needs.
| Service | What it's used for |
|---|---|
| Shopify | Hosting this website |
| Google Analytics | Website visitor statistics |
| Google Search Console | How the site performs in search results |
| Email provider | Sending and receiving email |
| Accounting software | Invoicing and financial records |
Where I work on your accounts, you'll also be dealing directly with providers such as your domain registrar, email host, booking provider or payment processor. Those accounts are in your name and their own privacy policies apply.
I do not sell your information, and I do not share it with anyone for advertising or marketing purposes. Ever.
I may share information where I'm legally required to — for example with Revenue, or if a court orders it.
8. Information leaving the EU
Some of the services above are run by companies based outside the European Economic Area, mainly in the United States. Where information is transferred outside the EEA, it's protected by the safeguards required under GDPR, such as Standard Contractual Clauses or an adequacy decision by the European Commission.
9. Keeping it safe
I take reasonable steps to protect the information I hold — encrypted connections, strong and unique passwords, two-factor authentication on every account that supports it, and access limited to me alone.
No system is completely secure, and I won't claim otherwise. If something happens that puts your information at risk, I'll tell you and I'll report it to the Data Protection Commission where the law requires.
10. Your rights
Under the General Data Protection Regulation and the Data Protection Act 2018, you have the right to:
- Know what information I hold about you and get a copy of it
- Correct anything that's wrong or incomplete
- Delete your information, where I'm not legally required to keep it
- Restrict how I use it while a query is being sorted out
- Object to my using it on the basis of legitimate interest
- Take it with you in a portable format
- Withdraw consent at any time, where consent is what I relied on
Email me at adam.henson@ahconsultancy.ie and I'll respond within one month. There's no charge.
I don't use your information for automated decision-making or profiling.
11. Marketing
I won't add you to a mailing list because you enquired about a website. If I ever start sending anything of that sort, it'll be because you specifically asked for it, and every message will have a one-click unsubscribe.
12. Children
This website isn't aimed at children and I don't knowingly collect information about anyone under 16. If you believe I have, tell me and I'll delete it.
13. Changes to this policy
If this policy changes, the updated version goes up on this page with a new date at the top. If a change materially affects you as a client, I'll tell you directly.
14. Complaints
If you're unhappy with how I've handled your information, please tell me first — most things are a misunderstanding and get sorted quickly.
You also have the right to complain to the supervisory authority:
Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28 www.dataprotection.ie
15. Getting in touch
Adam Henson AHConsultancy 12 Sandbrook, Sarsfield Road, Wilton, Cork, T12 V564 adam.henson@ahconsultancy.ie