Legal
Privacy notice
How we handle personal data on this website.
Last updated: 23 Jun 2026
What we collect
The site has no analytics, no advertising pixels, and no on-site estimate tool. We collect personal data only when you send a message or when standard hosting/security logs are created.
Contact form
When you submit the contact form, we send a transactional email to our team via our email provider. That message may include: your name, email address, message, and basic routing fields used by the form. The email includes your address as the reply-to so we can answer you. Our hosting provider (Cloudflare) can log the request, including a client IP address, for security and operations — see Server logs. If the anti-spam captcha is shown, Cloudflare Turnstile also processes browser and request signals to verify the submission is legitimate.
Server logs
Cloudflare, which serves this site, keeps short-lived edge logs of HTTP requests. By default, stored fields typically include the IP address, user agent, path, and similar metadata, with retention on the order of a few days — check Cloudflare’s current documentation for exact periods and locations.
Subprocessors
We rely on the following for hosting and email. The links point to their data processing and customer DPA information.
| Service | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Cloudflare Pages | Hosting and edge delivery | Request metadata, including IP in logs | Global edge | Cloudflare DPA |
| Cloudflare Turnstile | Anti-spam verification on the contact form | Browser/request signals needed to verify the challenge | Global edge | Cloudflare DPA |
| Resend | Transactional email delivery | Form fields, reply-to | EU / US (see Resend) | Resend DPA |
What we do not collect
- No third-party web analytics and no advertising cookies.
- No social pixels, remarketing beacons, or similar marketing trackers.
- No browser fingerprinting for profiling.
- Fonts and static assets are self-hosted; we do not load fonts or third-party marketing scripts for normal browsing. The contact form may load Cloudflare Turnstile only for anti-spam verification.
Your rights (GDPR)
Under the General Data Protection Regulation and Irish data protection law, you may have the right to access, rectify, or erase personal data we process about you, to restrict or object to certain processing, and in some cases to receive your data in a portable form. You can lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie. If you contact us from outside Ireland, UK GDPR may also apply to how we handle your request; we still respond in line with applicable law. For routine requests, email hello@papslab.com.
Retention
Messages sent via the contact form are delivered to our mailbox and may be kept for as long as we need to respond and run the business, unless you ask us to remove them. Edge logs on Cloudflare are short-lived, as described above. You can request deletion of correspondence by writing to the same address.
Changes to this policy
We update this when our stack or practices change. The last change date is shown at the top of this page.
Contact
Questions about this notice: hello@papslab.com