1. Who we are
Truevine Innovations is the data controller responsible for your personal data.
Contact: info@truevineinnovations.ie
Address: Greystones, Wicklow, Ireland
We do not have a Data Protection Officer. For any privacy-related queries, contact us at the address above.
2. What personal data we collect
We collect personal data only when you submit our contact form. That data is:
- Name (required)
- Email address (required)
- Business or organisation name (optional)
- Service of interest (required — selected from a list)
- Your message (required — free text)
We use analytics cookies (Google Analytics 4) only when you have given your consent. We do not collect payment information, health data, or any other special category data.
3. How we use your data
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and, where relevant, entering into a contract for our services | Art. 6(1)(b) GDPR — processing necessary for steps taken at your request prior to entering a contract |
| Protecting our contact form against automated spam and abuse using Google reCAPTCHA v3 | Art. 6(1)(f) GDPR — legitimate interests (preventing misuse of our systems). reCAPTCHA analyses browser behaviour and IP address. Our interest in keeping the form secure is balanced against the limited nature of the data processed. |
| Measuring anonymous website usage via Google Analytics 4 to understand how visitors use the site | Art. 6(1)(a) GDPR — consent. You may withdraw consent at any time via the Cookie settings link in the footer. |
4. Who we share your data with
We share your data only with the processors listed below. We do not sell your data or share it with third parties for marketing.
| Processor | Purpose | Location |
|---|---|---|
| Resend | Transactional email delivery — forwards your form submission to our inbox | USA (EU–US Data Privacy Framework) |
| Google Firebase | Hosts the cloud function that processes form submissions | EU (europe-west1 — Belgium) |
| Google reCAPTCHA v3 | Spam and bot detection on the contact form | USA (EU–US Data Privacy Framework) |
| Google Analytics (Google LLC) | Website analytics — page views, session data, anonymised device info. Only active when you have consented. | USA (EU–US Data Privacy Framework) |
5. International transfers
Resend and Google (reCAPTCHA) are based in the United States. Transfers to these processors are made on the basis of the EU–US Data Privacy Framework adequacy decision (Commission Implementing Decision of 10 July 2023), under which the European Commission has determined that the US provides an adequate level of protection for personal data transferred to certified organisations.
Form submissions are processed by our Firebase Cloud Function hosted in Belgium (europe-west1) and do not leave the EU except where passed to Resend for delivery as described above.
6. How long we keep your data
We retain form submissions in our email inbox for a maximum of 24 months from the date of receipt, or until the enquiry is resolved — whichever is sooner. After that period, submissions are deleted.
We do not store your data in any database. Your information lives only in our secure business email system.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data in certain circumstances (Art. 17)
- Restrict how we process your data (Art. 18)
- Object to processing based on legitimate interests (Art. 21)
- Data portability where processing is based on consent or contract and carried out by automated means (Art. 20)
To exercise any of these rights, email us at info@truevineinnovations.ie. We will respond within 30 days (Art. 12(3)).
Where processing is based on legitimate interests, you may object at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
8. Right to complain
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
21–25 Canal Road, Dublin D06 W4E2, Ireland
www.dataprotection.ie
We would welcome the opportunity to address any concern directly before you contact the DPC.
9. Cookies we use
We only set analytics cookies when you have given your consent. You can change your preference at any time using the Cookie settings link in the footer.
| Cookie name | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique users (Google Analytics) | 2 years |
_ga_* | Session state for this GA4 property | 2 years |
10. Changes to this notice
We may update this notice from time to time. The date at the top of this page shows when it was last revised. Material changes will be announced on this page.