Policies

What we run on

These are our own operating documents, published in full rather than summarised. Every obligation in them is cited to the article or the section it comes from, so they can be checked rather than taken on trust.

Data protection policy

How we handle personal data, the lawful basis for each purpose, and the Irish provisions that sit on top of the GDPR.

Version 1.020 August 2026

Data retention schedule

Every category of record we hold, how long it is kept, the trigger that starts the clock, and the statute behind it.

Version 1.020 August 2026

Breach response plan

What happens in the first hour, when the 72 hours starts, and who we notify depending on whether we are controller or processor.

Version 1.020 August 2026

AI use policy

Where we are a provider and where we are a deployer under the EU AI Act, what we will not build, and what we disclose.

Version 1.110 September 2026