Legal

Privacy Policy

This policy explains how Bond and Barrel collects and uses personal data, why we do it and the rights you have under the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988 to 2018.

Last updated: 13 October 2026

Who we are

Bond and Barrel Limited (“Bond and Barrel”, “we”, “us”) is the data controller for the personal data described in this policy. We are a private company limited by shares, registered in Ireland with the Companies Registration Office under company number 823581.

Registered office: Ratoath, Co. Meath, Ireland. VAT number: IE4822924BH.

Email: hello@bondandbarrel.ie. Phone: 085 809 1399.

We are not required to appoint a Data Protection Officer. If you have any question about this policy or your personal data, contact us using the details above.

The personal data we collect

We collect only what we need. Depending on how you deal with us, this may include:

  • Enquiries: your name, email address, phone number, company and anything you tell us in a message, email, call or the brief form on this website.
  • Clients and suppliers: business contact details, job titles, correspondence, contracts, invoices and payment records.
  • Project materials: personal data that appears in content we create or manage for clients, such as photographs, staff profiles or social media posts. For this work we usually act on our client’s behalf and follow their instructions.
  • Website usage: technical information such as your IP address, browser, device, the pages you visit and how you arrived at the site. This is collected through our hosting provider’s built-in statistics and is used in aggregated form.
  • Marketing: if you sign up for updates, your email address and your preferences.

We do not knowingly collect special category data (such as health information) and we ask you not to send it to us.

How we use your data and our legal basis

  • To reply to your enquiry and prepare a proposal. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
  • To deliver our services and manage our client relationships. Legal basis: performance of a contract, or our legitimate interest in working with the businesses that employ our contacts.
  • To invoice, keep accounts and meet our tax and company law obligations. Legal basis: compliance with a legal obligation.
  • To understand how our website is used and improve it. Legal basis: our legitimate interest in running a secure, useful website.
  • To send marketing emails. Legal basis: your consent or, for existing clients, our legitimate interest in telling you about similar services, as permitted by the ePrivacy Regulations 2011 (S.I. No. 336 of 2011). Every marketing email includes a simple way to unsubscribe.
  • To protect our legal rights. Legal basis: our legitimate interest in establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we have weighed those interests against your rights. You can object at any time (see “Your rights” below).

You are not obliged to give us your personal data. If you choose not to, we may not be able to reply to you or provide our services.

Opting out of marketing

You can opt out of marketing communications at any time by clicking “unsubscribe” in any marketing email or by emailing hello@bondandbarrel.ie with the word “unsubscribe”. We will not send unsolicited marketing to anyone who has opted out.

Who we share your data with

We never sell your personal data. We share it only where necessary with:

  • our website host and form provider, Automattic Inc. (WordPress.com), which also provides our website statistics;
  • our email, file storage and IT service providers;
  • freelance specialists, such as photographers and videographers, who work with us on client projects;
  • our accountants, auditors, legal and other professional advisers;
  • Revenue, the Companies Registration Office, An Garda Síochána or other authorities, where the law requires it.

Our service providers process personal data only on our instructions and under written agreements that protect it.

Transfers outside the European Economic Area

Some of our service providers, including Automattic Inc., are based in or have access to data from the United States. Where personal data is transferred outside the EEA, we make sure it is protected by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission’s Standard Contractual Clauses.

How long we keep your data

  • Enquiries that do not lead to work: up to 24 months from our last contact.
  • Client, contract and financial records: six years from the end of the financial year they relate to, as required by tax and company law.
  • Marketing lists: until you unsubscribe, after which we keep only what we need to respect your choice.
  • Website statistics: in aggregated form for as long as they remain useful.

When data is no longer needed, we delete it or anonymise it securely.

Your rights

Under data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased in certain circumstances;
  • restrict how we use your data;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • receive your data in a portable format where processing is based on consent or contract;
  • withdraw your consent at any time, without affecting processing that took place before you withdrew it.

To use any of these rights, email hello@bondandbarrel.ie. We will reply within one month. We may need to confirm your identity first.

We do not use automated decision making or profiling that has legal or similarly significant effects on you.

Complaints

If you are unhappy with how we handle your personal data, please tell us so we can put it right. You also have the right to lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls, secure passwords and reputable service providers. No method of transmission over the internet is completely secure, but we take care to protect your information.

Children

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16.

Cookies

For information about cookies and similar technologies on this website, see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.