Privacy Policy

Last updated: 1 August 2025

ClonNua Digital Product Studio ("ClonNua", "we", "us", or "our") is registered in the Republic of Ireland and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and your rights under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

The data controller for your personal data is ClonNua Digital Product Studio, contactable at hello@clonnua.com.

1. Data We Collect

We collect personal data only when you provide it to us directly through our website. This includes:

Project enquiries — your name, email address, company name, website URL, project type, estimated budget, project description, business objective, desired launch date, preferred contact method, and any other details you choose to include.
Consultation bookings — your name, email address, phone number (optional), preferred date and time, and a brief description of what you would like to discuss.
Newsletter subscriptions — your email address.

We do not use cookies for tracking or advertising purposes, and we do not collect any data automatically beyond what is necessary to serve the website.

2. Why We Collect Your Data

We process your personal data on the following legal bases:

Responding to enquiries and bookings (Legitimate interest / Consent) — We use the information you submit via our contact forms to assess your project requirements and respond to your request. By submitting the form and ticking the consent checkbox, you explicitly consent to this processing.
Newsletter (Consent) — If you subscribe to our newsletter, you give explicit consent by ticking the consent checkbox on our subscription form. We use your email address to send you product updates, insights, and growth tips. You can withdraw consent and unsubscribe at any time by emailing us at hello@clonnua.com with "Unsubscribe" in the subject line. We will remove your address within 30 days of your request.
Service delivery (Contract) — Where you engage us for a project, we process your contact and project details to fulfil our contractual obligations under our Terms of Service.

3. How Long We Keep Your Data

Enquiry and booking data — retained for up to 2 years from the date of submission unless we enter into a project engagement, in which case it is retained for the duration of the engagement plus 6 years (to satisfy legal and tax record-keeping obligations under Irish law).
Newsletter subscriptions — retained until you unsubscribe. After unsubscribing, your email is removed from our mailing list within 30 days.

When data is no longer required, it is securely deleted or anonymised.

4. Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of trusted service providers, solely for the purpose of running our business:

Hosting and infrastructure — our website and backend are hosted on Replit (United States). Replit is covered by standard contractual clauses for international data transfers.
Email communications — we may use a transactional email provider to send replies to enquiries or newsletter emails.

All third-party processors are contractually required to process your data only on our instructions and in compliance with applicable data protection law.

We may also disclose your data where required by law, court order, or regulatory authority.

5. Your Rights

Under GDPR, you have the following rights in relation to your personal data:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — you can ask us to delete your data, subject to any legal retention obligations.
Right to restriction — you can ask us to restrict how we process your data in certain circumstances.
Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
Right to object — you can object to processing based on legitimate interest.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at hello@clonnua.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority, at www.dataprotection.ie.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to stored enquiry and booking data is restricted to authorised personnel only, and all connections to our site are encrypted via HTTPS.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at hello@clonnua.com.

7. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

9. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at hello@clonnua.com.