Privacy notice

Last updated January 2026.

Who is responsible for your data

This site is operated by domcloud, established in Ireland at Youghals House, Clonakilty, Co. Cork, Ireland. We are the data controller for the personal data described here, under the EU General Data Protection Regulation and the Irish Data Protection Act 2018. [TO CONFIRM: add the registered entity name and tax or company registration number — GDPR Art. 13 requires the controller to be identifiable, and the trading name alone may not be enough]

For anything in this notice, contact support@domcloud.app.

What we collect, and why

When you send an enquiry

The contact form collects your name, email address, and message, and optionally your company and phone number plus which service you’re asking about. We use this solely to reply to you and, if you become a client, to carry out the work.

Our lawful basis is legitimate interests — you contacted us asking for a reply, and responding is what you would expect. If you’d rather we deleted the enquiry after replying, just ask.

Technical information sent with your enquiry

We also record your browser’s user-agent string, the page that referred you, any campaign parameters in the link you followed, and a one-way salted hash of your IP address. We use these to prevent spam and abuse of the form.

We do not store your IP address itself. The hash cannot be reversed to recover it, and it is only ever compared against other hashes.

Analytics and session recordings

We use analytics to understand which pages are useful. It loads on every visit, and we do not ask you first. Our lawful basis is legitimate interests — understanding how the site is used so we can improve it — rather than your consent. You can object to that at any time by writing to us, and you can stop it yourself by blocking the script or browsing privately. See our cookie notice for exactly what is stored.

This includes session recordings — a reconstruction of your visit showing mouse movement, scrolling and clicks, which we use to find pages that confuse people. Every input is masked before transmission, so anything you type into a form is replaced with asterisks and never reaches us or PostHog. We do not use recordings to identify individuals, and we do not link them to an enquiry you send us.

How long we keep it

• Enquiries that don’t become work: [TO CONFIRM: retention period — 24 months is a reasonable default], then deleted.
• Client records: kept for the duration of the engagement and then for as long as we’re legally required to keep financial records.
• Analytics data: retained by our analytics provider per their settings.

Who else processes it

We keep this list short on purpose. We share personal data only with providers who help us operate the site and reply to you:

• Cloudflare — serves the website. The pages are static files, so nothing you type passes through them.
• Render — runs the application that receives your enquiry. Hosted in Virginia, United States.
• Supabase — the database your enquiry is stored in, on AWS in us-east-1, United States.
• Resend — sends us the notification email containing your enquiry.
• PostHog — analytics and session recordings, on every visit. PostHog processes this data in the United States.
• Stripe — payments, if you become a client. Card details go directly to Stripe and never reach us; we see only the billing name, email and the outcome of the payment.

We do not sell your data, and we do not share it for advertising.

Transfers outside the EEA

Enquiries you send us are stored in the United States. The application that receives them runs in Virginia and the database sits in AWS us-east-1, so an enquiry leaves the European Economic Area as soon as you send it, and it is worth saying plainly rather than leaving you to infer it from a list of suppliers.

Analytics data, including session recordings, goes to PostHog, also in the United States. That transfer happens on every visit, whether or not you ever send us an enquiry.

[TO CONFIRM: confirm the transfer safeguard relied on for each of these — the standard route is the EU Standard Contractual Clauses in each provider’s data processing agreement, which must be accepted with Render, Supabase and PostHog before the contact form or analytics is switched on]

Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it’s wrong;
• delete it;
• restrict or object to how we use it;
• transfer it to someone else.

Email support@domcloud.app and we’ll respond within one month. If you’re unhappy with how we’ve handled it you can complain to the Data Protection Commission, though we’d rather you told us first so we can fix it.

Changes

If we change this notice we’ll update the date at the top. Material changes affecting existing clients will be emailed rather than quietly published.