Privacy Policy

Last updated: December 22, 2025

Introduction

Site & Sight ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (siteandsight.com) or use our services, including web development, SEO and digital marketing, creative design, automation solutions, and hosting and maintenance services.

This policy complies with the General Data Protection Regulation (GDPR) and Irish data protection laws. By using our website and services, you acknowledge that you have read and understood this policy.

Data Controller

Site & Sight is the data controller responsible for your personal data. For any questions about this Privacy Policy or our data practices, please contact us:

Site & Sight

Dublin, Ireland

Email: hello@siteandsight.com

Information We Collect

We collect the following types of personal data:

Personal Information You Provide

Name and email address (via contact forms, project inquiry forms, pricing calculator, and newsletter subscription)
Project details and requirements you submit through our forms
Company name and business information (when voluntarily provided)
Payment information processed through Stripe for hosting and maintenance fees

Technical Information Collected

IP address, browser type, and device information
Website usage data via Google Analytics (only with your consent)
Marketing data via Meta Pixel (only with your consent)
Cookies and similar tracking technologies (see our Cookie Policy)

Client Project Information

Project requirements and specifications submitted through our forms
Content, images, and materials you provide for your projects
Email correspondence and communication records
Hosting and domain information for clients using our hosting services

How We Use Your Information

We use your personal data for the following purposes:

Service Delivery: To provide web development, SEO, digital marketing, creative design, automation solutions, hosting, and maintenance services as requested
Communication: To respond to form submissions and inquiries via email, provide customer support, and send project updates
Payment Processing: To process recurring monthly payments for hosting and maintenance services via Stripe, and to send invoices for custom services via email
Newsletter: To send periodic newsletters with web design tips, SEO insights, and project updates (only if you subscribe via our newsletter form)
Website Improvement: To analyze website usage (with your consent via cookies), improve our services, and enhance user experience
Legal Compliance: To comply with legal obligations, resolve disputes, and protect our legal rights

Legal Basis for Processing

Under GDPR, we process your personal data based on:

Contract: To fulfill our contractual obligations and provide requested services
Consent: When you have given explicit consent for specific processing activities
Legitimate Interests: For business operations, fraud prevention, and service improvement
Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Third Parties

We share your personal data only with trusted third-party service providers who help us operate our business and deliver our services:

Vercel: Website hosting platform where our website is hosted
Stripe: Payment processor for recurring hosting and maintenance fees
Brevo (formerly Sendinblue): Email marketing platform for newsletter subscriptions and communications
Web3Forms: Form submission service that forwards contact form, project inquiry, and pricing calculator submissions to our email
Google Analytics: Website analytics (only loaded with your consent via cookie preferences)
Meta Pixel: Marketing and advertising analytics (only loaded with your consent via cookie preferences)
Sanity.io: Content management system for our blog content

We do not sell, rent, or trade your personal data. All third-party service providers are contractually required to protect your data and use it only for the specific purposes we authorize.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

Contact and Project Inquiry Data: Retained for the duration of our business relationship and until you request deletion
Client Project Files: Retained while we provide services to you and until you request deletion
Newsletter Subscriptions: Retained until you unsubscribe or request deletion
Payment Records: Retained for 7 years as required by Irish tax and accounting laws
Analytics and Cookie Data: Retained according to our cookie settings (see Cookie Policy)
Hosting Client Data: Retained while you use our hosting services and until you request deletion after service termination

You have the right to request deletion of your personal data at any time by contacting us at hello@siteandsight.com. We will delete your data within 30 days of your request, except where we are required by law to retain certain information.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data in certain circumstances
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for processing activities where consent is the legal basis
Right to Lodge a Complaint: File a complaint with the Irish Data Protection Commission

To exercise any of these rights, please contact us at hello@siteandsight.com. We will respond to your request within one month.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

SSL encryption for data transmission
Secure server infrastructure and regular security updates
Access controls and authentication measures
Regular security audits and assessments
Employee training on data protection

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including:

Vercel (United States): Website hosting
Stripe (United States): Payment processing
Google Analytics (United States): Website analytics (only with consent)
Meta (United States): Marketing analytics (only with consent)

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where the European Commission has determined equivalent data protection standards
Service providers certified under the EU-U.S. Data Privacy Framework where applicable

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: