Privacy Policy

Last updated: 27 October 2026

1. Data controller

The operator of this website and the controller of your personal data is Vavo ([Full Name], Dublin, Ireland). Contact: contact page.

2. What data we collect

• Contact form: your name, email address, subject and message. The form content is sent to us by email and is not stored in a database or any other record system.
• Email and WhatsApp: the information and phone number you share when you write to us by email or WhatsApp.
• Technical logs: our hosting infrastructure may keep standard server logs such as IP address, browser information and access time for security and operation.
• Form security: to prevent abuse, your IP address is kept only in server memory for a short period (at most a few hours). The security code (CAPTCHA) is generated on our own server and no third-party service is used.

3. Why we use it (legal basis)

• To reply to your enquiry and prepare information or quotes (steps prior to entering a contract and legitimate interests).
• To keep the website secure and working correctly (legitimate interests).
• To meet our legal obligations.

We do not use your data for marketing without your explicit consent.

4. How long we keep it

We keep it until your enquiry is resolved and for a reasonable period afterwards (generally no more than 12 months). A longer period may apply if a legal retention obligation exists. When the period ends, your data is deleted or anonymised.

5. Who we share it with

We do not sell your data. We share it only with providers needed to deliver the service (such as hosting and email infrastructure) and with authorities where legally required. Where a provider processes data outside the European Economic Area, appropriate safeguards required by the GDPR are sought.

When you click the WhatsApp button you are taken to WhatsApp, and WhatsApp's own privacy policy applies from that point.

6. Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw consent. To exercise these rights, use the contact form.

If you have a complaint, you can contact Ireland's supervisory authority, the Data Protection Commission (DPC): dataprotection.ie.

7. Security and changes

We take reasonable technical and organisational measures to protect your data. This policy may be updated from time to time; the current version is always available on this page.