Privacy Policy
How Canavan Digital collects, uses and protects your personal data. Last updated 23 September 2026.
1. Who we are
Canavan Digital is a digital marketing agency based in County Donegal, Ireland. For the purposes of the General Data Protection Regulation (GDPR), Canavan Digital is the data controller for the personal data collected through this website.
You can contact us about anything in this policy by email at info@canavandigital.com or by phone at +353 86 353 9488.
2. What we collect
We collect only what we need to reply to you, deliver work you have bought and meet our legal obligations. Depending on how you use the site, this can include:
- Contact details: your name, email address, phone number and business name when you fill in an enquiry form, our lead capture form, a booking form or the checkout.
- Enquiry and project details: what you tell us about your business, your goals and the services you are interested in, including anything you type into our AI recommendation tool or upload for a screenshot review.
- Order details: what you buy, what you paid and your invoice or order reference. Card details are entered directly into Stripe and never touch our servers.
- Booking details: the time you choose for a call and anything you tell us when booking.
- Usage data: pages visited and actions taken on the site, collected only if you accept analytics cookies.
- Marketing preferences: whether you have agreed to hear from us by email.
3. Why we use it and our lawful basis
- To respond to your enquiry or quote request, on the basis of taking steps at your request before entering a contract.
- To deliver services you have bought, take payment and provide support, on the basis of performing our contract with you.
- To keep accounts and tax records, on the basis of our legal obligations under Irish law.
- To follow up on enquiries and quotes, on the basis of our legitimate interest in running and growing our business. You can ask us to stop at any time.
- To send marketing emails, only with your consent. Every marketing email includes a way to opt out.
- To measure and improve the website, only with your consent through the cookie banner.
4. Who processes your data
We use a small number of trusted providers to run this website and our business. Each acts as a data processor under a contract that protects your data, or as an independent controller for their own legal obligations:
- Lovable Cloud hosts this website and stores our website database (enquiries, quotes, orders and bookings). Data is hosted on secure cloud infrastructure within a managed EU/US compliant environment.
- Stripe processes card payments. Your card details go directly to Stripe; we never see or store full card numbers. Stripe may transfer data outside the EEA under Standard Contractual Clauses.
- GoHighLevel is our customer relationship management (CRM) system. Enquiry and customer contact details may be synced there so we can manage follow-ups and your project. GoHighLevel may process data outside the EEA under Standard Contractual Clauses.
- AI services power our recommendation and screenshot review tools. What you type or upload is sent to the AI provider solely to produce your result and is not used to train models.
We do not sell your personal data, and we do not share it with anyone else except where the law requires it.
5. How long we keep it
- Enquiries and quotes that do not lead to work: up to 24 months, so we can follow up and understand demand, then deleted or anonymised.
- Client records, orders and invoices: kept for the duration of our work together and for 6 years afterwards, to meet Irish tax and accounting rules.
- Marketing consent records: kept until you withdraw consent, so we can prove consent was given.
- Analytics data: kept for up to 14 months, then deleted or anonymised.
6. Your rights
Under GDPR you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct anything that is wrong or incomplete.
- Ask us to delete your data, where we have no legal reason to keep it.
- Object to or restrict how we use your data, including follow-ups and marketing.
- Withdraw consent at any time, without affecting anything done before you withdrew it.
- Ask for your data in a portable format.
To use any of these rights, email info@canavandigital.com. We will respond within one month.
7. Cookies
This site uses essential cookies and storage to keep things working, and optional analytics only if you accept them. Full details are on our Cookie Policy.
8. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or at dataprotection.ie.
9. Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Significant changes will be flagged on the site.
