Your data, handled simply.

• We only collect personal data you choose to send us, such as an enquiry through the contact form or an email.
• We use it to reply to you and to run the project or conversation that follows. Nothing else.
• This website sets no advertising or tracking cookies. We count visits with cookieless, privacy-friendly analytics that doesn't identify you.
• We never sell your data, and we don't share it except with the service providers that make the site and our email work.
• You can ask to see, correct or delete what we hold at any time.

Wayfinders Limited, a company registered in Ireland (company number 602087), is the data controller for personal data collected through this website. You can reach us at:

• Post: Wayfinders Limited, Wayfinder House, Baldoyle Industrial Estate, Dublin 13, D13 H6E5, Ireland
• Email: sales@wayfindersgroup.com
• Phone: +353 (1) 832 6966

Please mark any data protection request “Data protection” so it reaches the right person quickly.

When you use the contact form. We collect your name, email address, your project if you tell us, and your message. The form doesn't save anything on the website: it sends your enquiry to our inbox by email so that we can reply. Our lawful basis is our legitimate interest in responding to people who contact us, and, where you are asking about a project, taking steps at your request before entering into a contract.

When you email or phone us. We hold what you send us, including attachments such as drawings, for the same purposes and on the same basis.

When you apply for a job. If you send a CV, portfolio or speculative application, we use it only to consider you for work with us. Our lawful basis is taking steps at your request before entering into an employment contract, and our legitimate interest in recruiting.

When you browse the site. Like any website, our hosting provider processes technical information to deliver pages and keep the service secure: your IP address, browser type, the pages requested and the time of the request. To stop automated spam, the contact form briefly holds the IP address of each submission in memory, for about a minute. Our lawful basis is our legitimate interest in running a secure, working website.

Visit statistics. We use Vercel Web Analytics to understand how the site is used: which pages are visited, which page or site referred the visit, and the visitor's country, device type, browser and operating system. It works without cookies and stores nothing on your device. Visits are counted using a short-lived value derived from the request, which resets every 24 hours and can't be used to recognise you on another day or on another site; your IP address is not kept. We see only totals, never individual people. Our lawful basis is our legitimate interest in understanding and improving the site, and you can object at any time (see Your rights). Blocking scripts in your browser also stops it.

Mailing lists. We don't run a mailing list from this website. If we start one, we will update this notice and ask for your consent first.

We don't collect special category data and we don't make automated decisions about you.

This website does not use advertising, social media, analytics or other tracking cookies, and it doesn't use browser storage to follow you between visits. Our visit statistics are cookieless (see What we collect and why). That is why you don't see a cookie banner: there is nothing to consent to.

The only cookie the site can set is a strictly necessary one called wf-access, used when a password-protected preview version of the site is being reviewed. It is set only after someone enters the preview password, and it expires after 30 days. It isn't used on the public site.

We never sell personal data. We share it only with service providers who process it on our behalf, under contracts that require them to protect it and use it only on our instructions:

• Vercel Inc. hosts this website, processes the technical information described above and provides our cookieless visit statistics.
• Twilio SendGrid delivers contact form submissions to our inbox by email.
• Our business email provider holds the emails you send us and the form submissions we receive.
• OpenFreeMap serves the map tiles on our contact page. Your browser requests the tiles directly, so OpenFreeMap receives your IP address, as any website you load content from does. It sets no tracking cookies.

If you become a client, we may share project information with the main contractor, design team and others involved in your project, as the work requires. We may also disclose data where the law requires it.

Some of our service providers, including Vercel and Twilio SendGrid, are based in the United States and may process data there. Where personal data leaves the European Economic Area or the UK, we rely on recognised safeguards: the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or Standard Contractual Clauses approved by the European Commission. You can ask us for details.

• Enquiries. We keep enquiries and our replies for as long as we need to respond and follow up, and then as part of our ordinary business records. If you ask us to delete an enquiry that didn't lead to any work, we will.
• Projects. Where an enquiry becomes a project, correspondence is kept with the project records for as long as we need them for the warranty, our legal and tax obligations, and any claims.
• Job applications. If we don't have a role for you now, we keep your application for up to 12 months so we can contact you about future roles, unless you ask us to delete it sooner.
• Technical logs. Hosting logs are kept by Vercel for a short period under its own retention settings. If a form submission ever fails to send, the error log may record your name and email address so that we can follow up with you. The contact form's spam check forgets IP addresses after about a minute.

Under the GDPR (and the UK GDPR, if you are in the UK) you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where we no longer need it or have no lawful basis to keep it;
• ask us to restrict how we use your data;
• object to processing based on our legitimate interests;
• receive data you gave us in a portable format;
• withdraw consent at any time, where we rely on it.

To use any of these rights, email sales@wayfindersgroup.com or write to us at the address above. It's free, and we will reply within one month. We may need to confirm your identity before acting on a request.

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Data Protection Commission in Ireland, 21 Fitzwilliam Square South, Dublin 2, D02 RD28. If you are in the UK, you can complain to the Information Commissioner's Office.

The site is served only over an encrypted connection (HTTPS), and the contact form sends your enquiry over an encrypted connection to our email delivery provider. Access to our inboxes and project records is limited to the people who need it.

This website is for businesses and professionals. It isn't aimed at children and we don't knowingly collect their data.

We will update this notice if the way the website handles data changes, for example if we change how we measure visits or start a mailing list, and we will change the date at the top. See also our accessibility statement.