Privacy Policy

This website is owned and operated by Flexi Boost Limited ("Flexi Boost", "we", "us", "our"). For the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Data Protection Act 2018 (Ireland), Flexi Boost Limited is the Data Controller of personal data collected through this website and through direct interactions with us.

This Privacy Policy applies where we collect personal data from you when you:

• visit our website,
• contact us via forms, email, phone, or other channels,
• request a quote or proposal,
• purchase or receive our services,
• engage with our marketing communications,
• apply for a job (if applicable).

• Personal Data means information relating to an identified or identifiable individual.
• Processing means any operation performed on Personal Data, including collecting, storing, using, disclosing, or deleting it.
• Controller means the party that determines the purposes and means of processing Personal Data.
• Processor means the party that processes Personal Data on behalf of a Controller.

We may collect and process the following categories of personal data depending on how you interact with us:

4.1 Identity and Contact Data

• Full name, Company name (if applicable), Job title (if applicable)
• Email address, Phone number, Postal address

4.2 Account and Service Data

• Details of services requested or purchased, Support requests and communications
• Meeting notes and project records, Service delivery history

4.3 Billing and Transaction Data

• Billing name and address, VAT number (where applicable), Invoice details, Payment status and payment references

4.4 Technical Data (Website Use)

• IP address, Browser type and version, Device type, Operating system
• Pages visited and timestamps, Approximate location (derived from IP)

4.5 Recruitment Data (If Applicable)

• CV, employment history, qualifications, Interview notes, References (if provided)

4.6 Special Category Data

We do not intentionally collect special category data (such as health data, biometric data, political opinions, or religious beliefs). If you voluntarily provide such data, we will only process it where lawful and necessary.

We collect data through:

• Direct communication from you (email, forms, phone, meetings)
• Contractual interactions (service delivery, invoicing)
• Website usage (limited technical logs and essential cookies)
• Third parties where lawful (e.g. your employer, referrals, publicly available business sources)

We process personal data only where we have a lawful basis under GDPR Article 6.

6.1 Contractual Necessity

We process personal data where necessary to: provide services you request; enter into a contract with you; manage service delivery, support, and project work.

6.2 Legal Obligation

We process personal data where necessary to comply with Irish law, including tax and accounting obligations and responding to lawful requests from authorities.

6.3 Legitimate Interests

We process personal data where necessary for legitimate business interests, including responding to enquiries, improving services, ensuring IT security, preventing fraud, and managing disputes and legal claims. We ensure our legitimate interests do not override your rights and freedoms.

6.4 Consent

We process personal data based on consent where required, including direct marketing to individuals (where required) and non-essential cookies (if implemented in future). You may withdraw consent at any time.

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

We do not sell your personal data. We may share your personal data only where necessary with:

8.1 Service Providers (Processors)

Website hosting providers, email and communication providers, cloud storage providers, accounting and invoicing tools, IT support tools required for service delivery. All service providers are contractually required to protect personal data and only process it on our instructions.

8.2 Professional Advisers

Solicitors, accountants, auditors, insurers.

8.3 Legal and Regulatory Authorities

We may disclose personal data where required by law, court order, or regulatory obligation.

We primarily store and process data within the European Economic Area (EEA).

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Typical retention periods include:

• Enquiries: up to 24 months from last contact
• Contracts and service records: up to 6 years after completion
• Financial and invoicing records: 6 years (tax/accounting compliance)
• Marketing records: until you opt out or withdraw consent
• Recruitment applications: up to 12 months after conclusion of the process

We may retain data longer where required by law or to establish, exercise, or defend legal claims.

Our website uses essential cookies and basic technical logs necessary for security and operation. We do not currently use Google Analytics, Meta Pixel, LinkedIn tracking, advertising cookies, or behavioural profiling cookies. If we implement non-essential cookies in future, we will request your consent in advance and provide a cookie preference tool. You can control cookies through your browser settings.

We implement appropriate technical and organisational security measures, including secure hosting, access controls, confidentiality obligations, encryption in transit (HTTPS), and secure backups where appropriate. No system is 100% secure, but we take reasonable steps to protect your personal data.

You have the right to: request access to your personal data; request correction of inaccurate data; request deletion of your data (in certain circumstances); restrict processing; object to processing (especially for legitimate interests or marketing); request portability of your data; withdraw consent at any time (where processing is based on consent).

To exercise your rights, email: support@flexiboost.ie. We may request identity verification before responding.

If you are unhappy with how we process your personal data, you may contact us first at support@flexiboost.ie. You also have the right to lodge a complaint with the Data Protection Commission (Ireland): https://www.dataprotection.ie

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children.

Where we provide IT services or consulting to business clients, we may process personal data on behalf of those clients. In such cases the client is typically the Data Controller and Flexi Boost Limited is the Data Processor. Where required, we will enter into a Data Processing Agreement (DPA) with the client.

We may update this Privacy Policy from time to time. The latest version will always be published on our website.