S&R Paint Legal
Privacy Policy
How S&R Paint collects, uses and protects your personal data, under the EU GDPR and the Irish Data Protection Act 2018.
Last updated September 14, 2026
At S&R Paint (“we”, “our”, or “us”), we are committed to safeguarding your personal data and respecting your privacy in compliance with the General Data Protection Regulation (EU GDPR) and the Irish Data Protection Act 2018.
This Privacy Policy explains how we collect, process, store, and protect your personal information when you visit our website (https://srpaint.ie) or engage our painting and decorating services.
Data Controller Information
The data controller responsible for your personal data is:
- Business Name: S&R Paint
- Principal Contact: Serghei Radu
- Email: serghei.radu@srpaint.ie
- Telephone: +353 85 747 4730 / +353 89 447 1230
- Operating Areas: Dublin, Wicklow, Bray, Greystones, Kilcoole, Celbridge (Kildare), and surrounding areas in Ireland.
Information We Collect and How We Collect It
We collect personal information through two main channels: directly from you when you contact us, and automatically via website technology.
A. Information You Provide Voluntarily
- Quotation & Contact Forms (WPForms): When you submit an inquiry through our contact or quote request forms, we collect your first and last name, phone number, email address, property location/address, and any project notes you submit.
- Direct Communication: Phone calls, SMS, WhatsApp messages, or emails sent to our contact numbers/inbox.
B. Information Collected Automatically
- Device & Usage Data: When you browse our site, we collect technical data such as your IP address (anonymised), browser type, operating system, referring URL, pages viewed, time spent on pages, and interaction events.
- Cookies & Tracking Identifiers: Collected via Google Analytics 4 (Google Site Kit) subject to your cookie consent choices.
Lawful Basis and Purpose of Processing
Under Article 6 of the GDPR, we process your data on the following legal grounds:
| Purpose | Category of Data | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Providing quotes, site consultations & carrying out painting contracts | Name, phone, email, project address | Performance of a contract / Steps prior to entering a contract |
| Answering general website inquiries and customer service requests | Contact details, message contents | Legitimate interest (to respond to customer inquiries) |
| Website analytics, user behaviour analysis & site optimisation | Anonymised IP, device info, analytics events | Consent (via Cookie Consent Banner) |
| Spam protection & website security | Form metadata, IP address | Legitimate interest (preventing abuse and securing server integrity) |
| Accounting, invoicing & tax compliance | Invoices, client details, payment records | Legal obligation (Irish Revenue and statutory accounting rules) |
Third-Party Data Processors
We do not sell, rent, or trade your personal data. We only share data with trusted third-party service providers bound by strict confidentiality and data protection agreements:
- Google Analytics 4 / Google Site Kit (Google Ireland Limited): Used for aggregated website performance tracking. IP addresses are anonymised, and Google Signals / Consent Mode v2 logic is applied. Data is retained for up to 14 months before automated deletion.
- Automattic / Akismet: Analyses form submissions and comments to detect and block malicious spam.
- WP Mail SMTP / Email Relay Providers: Handles reliable transactional and notification email delivery for website quote requests.
- Trustindex.io / Google Reviews: Embeds verified customer feedback and testimonial widgets.
- Hosting & CDN (LiteSpeed / Server Provider): Processes server request logs and caching for site speed and security.
International Data Transfers
Where third-party service providers (e.g., Google, Automattic) process data outside the European Economic Area (EEA), such transfers are governed by EU Standard Contractual Clauses (SCCs) or adequacy decisions ensuring equivalent data protection.
Data Retention Periods
- Contact & Quotation Inquiries (Non-clients): Retained for up to 12 months from the date of inquiry, after which they are securely deleted.
- Client & Project Records (Executed Contracts): Retained for up to 7 years in compliance with Irish statutory tax, accounting, and Revenue requirements.
- Web Analytics Data: Retained for up to 14 months within Google Analytics before automated purging.
Your Data Protection Rights Under GDPR
Under European data protection law, you hold the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where no statutory retention obligation applies.
- Right to Restriction of Processing: Request that we temporarily halt processing under certain circumstances.
- Right to Data Portability: Request transfer of your data to another controller in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Revoke your cookie or analytics consent at any time without penalty.
To exercise any of these rights, please contact us at serghei.radu@srpaint.ie.
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland:
- Website: www.dataprotection.ie
- Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
Changes to This Policy
We reserve the right to update this Privacy Policy as our business practices and regulatory obligations evolve. Updates will be posted directly to this page with an amended “Last Updated” date.