Privacy Policy

1. Who we are

This website (luxurybusinesssigns.com) is operated by Luxury Business Signs Ireland ("we", "us", "our"), a signage, branding and business growth studio based in Ireland. For any privacy question you can contact us at luxurybusinesssigns@yahoo.com.

We are the data controller for the personal data collected through this website within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Irish Data Protection Act 2018.

2. What data we collect

We only collect personal data that you provide to us directly, namely:

• Identity & contact details: full name, company, email, phone number.
• Project details you submit through our proposal or signage quote forms (location, industry, budget indications, project notes, uploaded imagery of your premises, logos or artwork).
• Correspondence you send us by email, phone or through our on-site AI assistant.
• Technical data automatically generated by your browser when you visit (IP address, browser type, referring URL, timestamps) purely for security, fraud prevention and hosting log purposes.

We do not knowingly collect data from children under 16. We do not collect special categories of personal data (health, biometric, political opinions, etc.).

3. Why we use it and legal basis

• Responding to enquiries & providing quotes — legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering a contract) and Article 6(1)(f) (our legitimate interest in running our business).
• Delivering, invoicing and supporting signage / branding projects — legal basis: Article 6(1)(b) (performance of a contract) and Article 6(1)(c) (legal obligations such as Irish tax law).
• Security, error monitoring and abuse prevention — legal basis: Article 6(1)(f) (legitimate interests).
• Email delivery and one-click unsubscribe management — legal basis: Article 6(1)(f) and compliance with Article 21 GDPR / RFC 8058.

We do not send marketing emails, newsletters or promotional campaigns from this website. If we ever introduce marketing communications, we will rely on your prior opt-in consent (Article 6(1)(a) GDPR and Regulation 13 of S.I. 336/2011).

4. Who we share it with

We do not sell or rent personal data. We share it only with carefully selected processors who help us run the site and deliver our services, under written data-processing terms and appropriate safeguards:

• Hosting & database — Supabase (managed via the Lovable Cloud platform) for form submissions, uploaded files and email queue records.
• Application hosting / CDN — Cloudflare / Lovable for delivering the site.
• Email delivery — our transactional email provider used to send you quote confirmations and to notify our team.
• Professional advisers — accountants, auditors and lawyers where required by law.
• Public authorities — only where required by law (for example Revenue or a court order).

5. International transfers

Our providers may process data outside the European Economic Area (typically in the United States or United Kingdom). Where this happens, transfers are protected by the European Commission's Standard Contractual Clauses, adequacy decisions (UK, and — where applicable — the EU-US Data Privacy Framework), and additional technical measures such as encryption in transit and at rest.

6. How long we keep it

• Enquiry & quote data: up to 24 months from last contact.
• Customer project files and correspondence: 7 years to meet Irish tax record-keeping obligations.
• Email delivery / suppression records: retained for as long as needed to honour unsubscribe requests.
• Server & security logs: up to 90 days.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to rectify inaccurate or incomplete data.
• Ask us to erase your data ("right to be forgotten").
• Restrict or object to processing based on our legitimate interests.
• Data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

To exercise any of these rights, email us at luxurybusinesssigns@yahoo.com. We will respond within one month.

8. Security

We use industry-standard technical and organisational measures including TLS 1.2+ encryption on every page, encrypted storage at the database layer, strict row-level security policies, least-privilege access controls, and regular security scanning.

9. Cookies

We use only cookies and local storage entries that are strictly necessary for the site to function (security, load balancing, form-state and session integrity). We do not run Google Analytics, Google Tag Manager, Meta Pixel or any advertising or cross-site tracking cookies. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page will always reflect the latest version.