Privacy Policy
Effective Date: 31st March 2026
Website: www.workflows.ie
Data Controller: Shepherd & Flock Ltd. t/a workflows
Contact Email: sales@workflows.ie
1. Introduction
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use this website, submit information via our contact form, engage with us online (including any future webstore), or interact with us in the course of our offline business activities.
We are committed to protecting your privacy and handling your personal data in accordance with applicable Irish law, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018.
By using this website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Contact Form Submissions
- Full name
- Business or organisation name
- Email address
- Area of interest
- Purpose of your enquiry
2.2 Direct Email Communications
If you contact us directly by email, we may collect:
- Your name
- Email address
- Any other personal data you include in your correspondence
2.3 Business and Commercial Interactions (Online & Offline)
Where you engage with us as part of our business activities (including online sales or direct offline interactions), we may collect:
- Contact details (name, email, phone number where provided)
- Company details and role
- Transaction or enquiry history
- Information relevant to the provision of our products or services
We do not intentionally collect special category (sensitive) personal data.
3. How We Collect Your Data
We collect personal data directly from you when you:
- Complete and submit the contact form on our website
- Confirm acceptance of our terms and conditions via the mandatory checkbox
- Send us an email directly
- Engage with us as a customer, supplier, or business contact (online or offline)
- Use any future webstore or online services provided via the website
4. Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
4.1 Responding to Enquiries
To respond to your queries or requests submitted through the contact form or via email.
Legal basis:
- Article 6(1)(b) GDPR – Pre-contractual steps
- Article 6(1)(f) GDPR – Legitimate interests
4.2 Providing Products and Services (Online & Offline)
To deliver products, services, or information requested by you, including through any future webstore or B2B engagement.
Legal basis:
- Article 6(1)(b) GDPR – Performance of a contract
4.3 Business Relationship Management
To manage relationships with customers, partners, and suppliers, including maintaining communication records.
Legal basis:
- Article 6(1)(f) GDPR – Legitimate interests in operating and developing our business
4.4 Record-Keeping, Compliance and Administration
To comply with legal obligations and maintain appropriate business and financial records.
Legal basis:
- Article 6(1)(c) GDPR – Legal obligation
- Article 6(1)(f) GDPR – Legitimate interests
5. Consent and Acknowledgement
Before submitting the contact form, you are required to confirm that:
- You accept the terms and conditions of the website
- You consent to the use of your submitted information for the purpose of handling your enquiry
This consent is obtained through a mandatory checkbox and forms part of our lawful basis for processing under Article 6(1)(a) GDPR, where applicable.
You may withdraw your consent at any time by contacting us.
6. Data Storage and Hosting
- Your data is stored on servers located within the European Union
- We ensure that all hosting providers and service providers comply with GDPR requirements
- Personal data may be processed using trusted third-party service providers acting on our behalf under appropriate data processing agreements
- We do not transfer your personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place
7. Data Retention
We retain your personal data only for as long as necessary for the purposes outlined in this policy, including:
- Responding to enquiries
- Managing business relationships
- Fulfilling contractual obligations
- Complying with legal and regulatory requirements
Retention periods may vary depending on the nature of the interaction, but personal data will not be kept longer than necessary.
8. Data Sharing
We do not sell, rent, or trade your personal data.
We may share your personal data with:
- Service providers (e.g., hosting providers, IT services, payment processors where applicable)
- Professional advisers (e.g., legal, accounting) where necessary
- Regulatory or legal authorities where required by law
All third parties are required to respect the security of your personal data and to treat it in accordance with the law.
9. Your Rights Under GDPR
Under Irish and EU data protection law, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent
To exercise any of these rights, please contact us at:
sales@workflows.ie
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Secure hosting within the EU
- Access controls and authentication measures
- Encryption and secure data transmission where appropriate
However, while we take reasonable and industry-standard precautions, no system can be completely secure. Accordingly:
- We cannot guarantee the absolute security of information transmitted via the internet
- Users share information at their own risk
- We are not liable for unauthorised access beyond our reasonable control
11. Cookies and Tracking
This website uses cookies to enhance functionality, improve user experience, and analyse website usage.
Full details of the cookies we use, their purpose, and how you can manage your preferences are set out in our Cookie Policy, which is available to view on this website.
12. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland:
Website: https://www.dataprotection.ie
Email: info@dataprotection.ie
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business operations (including the introduction of new services such as a webstore). Updates will be posted on this page with a revised effective date.
14. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
David McCormack | Shepherd & Flock Ltd.
Email: sales@workflows.ie