Privacy Notice

1. Who is responsible

Nemeth Advisory Limited is the controller for the website and enquiry processing described in this notice.

2. Information we collect and where it comes from

• Information you provide: first name, last name, email address, and, if supplied, your company and the project scale selected on the form.
• Enquiry correspondence: information you choose to include in emails or subsequent discussions, together with our replies.
• Enquiry administration: when your request was received, whether the guide was sent, and information needed to manage the enquiry and its retention.
• Technical information: hosting, delivery and security services may process your IP address, browser or device information, requested pages or files, timestamps, and request or error information when serving the website, handling the form or loading email images.

We receive enquiry details directly from you through the form or your correspondence. Technical information is generated when your browser or email client communicates with the relevant service. Please avoid sending sensitive personal information or information about other people unless it is needed for your enquiry and you are entitled to provide it.

Form requirements: first name, last name and email are marked as required for this form. If these fields are not completed, the form cannot be submitted. Company and project scale are optional. There is no statutory obligation to provide these details. You can also request the guide or contact us by emailing info@nemethadvisory.com without using the form.

3. Why we use information and our legal bases

Delivering the guide and handling enquiries

We use enquiry information to send the requested guide, respond to questions, coordinate the relevant service and maintain an accurate enquiry record. Our legal basis is our legitimate interest in responding to people who contact us and administering those enquiries (Article 6(1)(f) GDPR). Where a person asks us to take necessary steps towards a contract with them personally, those specific steps may instead be based on Article 6(1)(b). This contractual basis does not automatically apply to someone enquiring on behalf of a company.

Operating and protecting the service

We use necessary technical and administrative information to deliver the website and emails, check delivery failures, prevent spam and misuse, and protect records. Our legal basis is our legitimate interest in providing a reliable, secure service and safeguarding information (Article 6(1)(f)).

Legal obligations and specific disputes

Where necessary, we use information to meet applicable legal obligations, including obligations under data protection law (Article 6(1)(c)). If a specific dispute or claim arises, we may retain and use the information necessary to establish, exercise or defend legal claims, based on our legitimate interest in protecting our legal rights (Article 6(1)(f)).

We limit processing to what is necessary for these purposes and consider the effect on your rights. A request for the guide is not permission for unrelated marketing. We do not add form applicants to a mailing list or send promotional campaigns on the basis of this request.

4. Who may receive or access information

• Authorised Nemeth Advisory personnel: people who need information to handle enquiries, maintain the service or meet our responsibilities.
• Dobbin+Company Architects: relevant enquiry details may be made available to authorised personnel where necessary to review or coordinate enquiries about the Integrated Design & Viability Review collaboration. This may involve selected information being shared or permission to view relevant records. It does not give access to all enquiries, and requesting the guide alone does not automatically require your details to be shared with them.
• Service providers: Netlify provides website hosting, form handling and spam filtering; Microsoft provides email, SharePoint record storage and Power Automate workflow services. Their authorised subprocessors may handle information as needed to supply these services, including Netlify's Akismet spam filtering service.
• Necessary professional or legal recipients: professional advisers where needed for a specific matter, or public authorities where a disclosure is legally required.

Service providers processing information on our behalf are subject to data processing terms. Access and disclosures are limited to the relevant purpose. We do not sell enquiry information. You can contact us for information about recipients of your own personal data.

5. International transfers

Our providers operate internationally. Personal information may be processed outside the European Economic Area (EEA), including in the United States. European storage settings do not mean that all processing or support access is confined to the EEA.

For transfers covered by its certification, Netlify relies on the European Commission's EU–US Data Privacy Framework adequacy decision. Its data processing agreement also provides Standard Contractual Clauses for applicable transfers not covered by that framework. Microsoft's data protection addendum provides the European Commission's Standard Contractual Clauses for relevant transfers outside the EEA. Appropriate supplementary safeguards are assessed where required.

You can request information about the safeguards relevant to your data, and a copy of applicable contractual safeguards, by emailing us. Information relating to other people or confidential commercial information may be redacted where appropriate.

• Netlify Data Processing Agreement and Netlify's Data Privacy Framework entry.
• Netlify subprocessors and locations.
• Microsoft Products and Services Data Protection Addendum.

6. How long we keep information

Enquiries that do not become a client relationship: we retain the enquiry record and relevant correspondence for no longer than 12 months from the last substantive contact about that enquiry, then delete them. Automated guide delivery, routine system activity or promotional contact does not restart this period. Earlier deletion may be appropriate if the information is no longer needed.

Temporary submission copies: Netlify form submissions are normally removed within 30 days after we have checked that the request was correctly transferred and processed. If there is an unresolved delivery or transfer problem, the relevant copy may be kept while that problem is resolved, subject to the enquiry retention limit.

Technical records: delivery, workflow and security records are kept only for the period needed to operate, check and protect the service, taking account of the relevant provider's retention settings and whether an incident needs investigation. We limit personal information in these records and do not extend their retention for unrelated purposes.

If an enquiry becomes a client matter, the records needed for that matter are handled under the applicable client information and retention arrangements, which we explain when the relationship is established. This does not justify keeping every duplicate enquiry record.

A specific legal obligation, complaint or legal claim may require limited information to be kept for longer. We document the reason and review it; an exception does not permit indefinite retention of all enquiry details.

Deleted information may remain temporarily in restricted recovery copies, backups or provider recovery systems until the relevant recovery or overwrite cycle ends. These copies are not used for ordinary enquiry handling. If information is restored, applicable deletion and restriction requirements are reapplied.

7. Cookies and website resources

We do not use advertising cookies, analytics cookies, social media tracking pixels or other non-essential tracking technologies on this website. The current website does not set visitor cookies or use browser local storage for its features. Fonts and website images are served as website files rather than being embedded from Google Fonts or social media platforms.

Our hosting and form services still process the technical information needed to serve requests and check for abuse, as described above. Before introducing any non-essential cookies or similar tracking, we will explain their use and obtain any consent required. Optional tracking will not be activated before the necessary consent.

8. Emails, images and links to other websites

The requested guide email may contain linked logos loaded from our Netlify-hosted image files. Depending on your email client's settings, opening the email may cause your client or its image proxy to request those files. That request may involve technical information such as an IP address and request time. We do not add recipient-specific tracking identifiers or tracking pixels to measure email opens. You can manage remote image loading in your email client.

Links to Dobbin+Company Architects, LinkedIn and other external websites take you to services with their own privacy arrangements. Their handling of information after you follow a link is explained in their own notices. Our site does not embed a LinkedIn tracking widget.

9. Security and automated processing

We use proportionate technical and organisational measures to protect information, including encrypted website connections and controlled access to enquiry records and administration tools.

The system automatically processes requests, filters suspected spam, stores enquiry details and sends the guide. We do not use these operations to make decisions producing legal or similarly significant effects on you, or to profile you for marketing. If a request appears not to have arrived or the guide is not delivered, please contact us so we can check it.

10. Your rights and how to contact us

Subject to the conditions and exceptions in data protection law, you may request:

• access to your personal information and information about its use;
• correction of inaccurate information;
• erasure of information where the conditions for deletion apply;
• restriction of processing in the circumstances provided by law;
• data portability where processing is automated and based on consent or a contract. This right does not generally apply to enquiry processing based on legitimate interests.

Contact info@nemethadvisory.com or write to our registered office. You do not need to use legal terminology or complete a special form. We may ask for proportionate information to verify your identity where needed to protect your data.

We respond without undue delay and normally within one month of receiving a request. If a lawful extension of up to two further months is necessary because of the complexity or number of requests, we will tell you within the first month and explain why. Requests are normally free of charge, subject to the limited exceptions in law.

You may complain to the Irish Data Protection Commission or another competent supervisory authority, including the authority where you habitually live or work. You do not have to contact us before making a complaint.

11. Changes and other services

This notice covers website visits, guide requests and related enquiries. Client engagements and other activities may need additional, specific information about their processing.

We keep this notice under review and display its revision date. If we intend to use your information for a new purpose, we will provide the relevant information before that use and establish the appropriate legal basis. Updating this notice does not, by itself, authorise a new use of your data.