Privacy policy

Who I am

Jack Cassidy, sole trader, Gorey, Co. Wexford, Ireland (“I”). Contact: jackcassidy.healthchecks@gmail.com. I am the data controller for the information below.

What I collect, and why

• Businesses I contact: business name, website, town/county, sector, the business contact email address published on the business’s own website or a public listing, where I found it, and the results of a public check of the website and email settings. Lawful basis: legitimate interests (telling a business about a verifiable security problem and offering help). Only published business addresses are used.
• Clients: contact details, the work agreed, your written authorisation, a log of changes made, and payment records. Lawful basis: performing our contract, and legal obligations (tax records).
• This website: no cookies, no analytics, no tracking. Fonts are loaded from Google Fonts.

Emails

Emails I send do not contain tracking pixels or tracked links. Every first email includes an easy way to opt out (reply “no thanks”), and opt-outs are honoured immediately and permanently.

Who processes data for me

Google (email), GitHub (private, access-controlled storage of my records), Cloudflare (this website) and Stripe (payments). Some of these may process data outside the EEA under the EU’s standard contractual clauses.

How long I keep it

Businesses that never respond are deleted after 12 months. Client and payment records are kept for 6 years for Revenue purposes. If you opt out, I keep only your web address on a do-not-contact list so you are never contacted again.

Your rights

You can ask to see, correct or delete your data, or object to it being used. Email me and I will act within 30 days (usually much sooner). You can also complain to the Data Protection Commission at dataprotection.ie.