Privacy Policy.

Who We Are

Verdas Technology ("Verdas", "we", "us", or "our") is an IT managed services, compliance, and consultancy company operating under the laws of the Republic of Ireland. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and any applicable Irish data protection legislation.

Verdas Technology acts as the Data Controller for personal data collected through our website, services, and communications. Our contact details are:

Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity Data — your full name, job title, and company name
• Contact Data — email address, phone number, and postal address
• Communication Data — messages you send us via our contact form, email, or WhatsApp
• Technical Data — IP address, browser type and version, time zone, operating system, and device information collected automatically when you visit our website
• Usage Data — information about how you navigate and interact with our website, including pages visited, time spent, and referral sources
• Cookie Data — data collected via cookies and similar tracking technologies (see our Cookies section below)
• Client Account Data — for clients using our managed services, we may process additional business and operational data as part of delivering those services under a separate Data Processing Agreement
• Marketing Preferences — your preferences for receiving communications from us

We do not knowingly collect data from individuals under the age of 18. Our website and services are directed at business professionals only.

How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted via our contact form or direct communications
• To provide, manage, and improve our IT services and consultancy offerings
• To send service-related communications, updates, and notifications
• To send marketing communications where you have opted in or where we have a legitimate interest to do so
• To analyse website usage and improve our website's functionality and content
• To comply with legal and regulatory obligations
• To detect and prevent fraud, security breaches, or misuse of our services
• To conduct business administration, invoicing, and record keeping

We will never sell your personal data to third parties or use it for purposes incompatible with those listed above.

Legal Basis for Processing

Under GDPR, we are required to identify a lawful basis for processing your personal data. We rely on the following legal bases:

• Contract — processing is necessary to perform a contract with you or to take steps at your request before entering a contract
• Legitimate Interests — processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and preventing fraud, provided these interests are not overridden by your rights
• Legal Obligation — processing is necessary to comply with a legal or regulatory obligation
• Consent — where we rely on your consent (e.g. for marketing emails or non-essential cookies), you have the right to withdraw that consent at any time

Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Service Providers — trusted third-party providers who assist in operating our website and delivering our services (e.g. cloud hosting, email platforms, CRM tools). These parties are contractually bound to process data only on our instructions and in compliance with GDPR.
• Professional Advisors — lawyers, accountants, auditors, or insurers where necessary for our business operations
• Regulatory Authorities — the Data Protection Commission (DPC) or other bodies where we are legally required to disclose information
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections

Where we transfer personal data outside of the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and help us understand how our site is used. Cookies are small text files stored on your device when you visit a website.

We use the following types of cookies:

• Essential Cookies — necessary for the website to function correctly. These cannot be disabled.
• Analytics Cookies — help us understand visitor behaviour and improve our website (e.g. Google Analytics). These are only set with your consent.
• Marketing Cookies — used to track visitors across websites to display relevant advertising. These are only set with your consent.
• Functional Cookies — remember your preferences and settings to improve your experience on return visits.

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website.

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Our standard retention periods are:

• Contact form enquiries — up to 2 years from the date of enquiry, or longer if a business relationship follows
• Client records — for the duration of the contract plus 7 years, in accordance with Irish tax and company law
• Marketing data — until you withdraw consent or unsubscribe
• Website analytics data — typically up to 26 months, in line with standard analytics platform settings
• Legal and compliance records — as required by applicable law, which may be up to 10 years

When data is no longer required, it is securely deleted or anonymised.

Your Data Protection Rights

Under GDPR, you have the following rights in relation to your personal data:

• Right of Access — you can request a copy of the personal data we hold about you
• Right to Rectification — you can ask us to correct inaccurate or incomplete data
• Right to Erasure — you can request that we delete your personal data where there is no compelling reason for us to continue processing it
• Right to Restrict Processing — you can ask us to limit how we use your data in certain circumstances
• Right to Data Portability — you can request a copy of your data in a structured, machine-readable format
• Right to Object — you can object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority, at www.dataprotection.ie or by post to: 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Restricted access controls and role-based permissions
• Regular security assessments and vulnerability testing
• Staff training on data protection and information security
• Secure data storage with reputable, GDPR-compliant cloud providers
• Incident response procedures in the event of a data breach

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify affected individuals without undue delay.

Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

Contact Our Data Protection Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch:

• Security Lead: Malaki Sommers
• Email: malaki.sommers@verdastechnology.com
• Phone: +353 (85) 151-7413
• Website: verdastechnology.com

We aim to respond to all privacy-related enquiries within 5 business days.