What we do with what you send us.

Who is responsible

Sahbis Limited, a private company limited by shares, registered in Ireland under number 821013, registered office 77 Camden Street Lower, Saint Kevin’s, Dublin 2, D02 XE80, is the data controller. Reach us at hello@sahbis.com.

What we collect

• The contact form: your name, email address, company name if you give one, and what you tell us you need. If you arrive from one of our ads or social media pages, we also note the short campaign label in the link you clicked (for example “facebook” and “christmas”), so we know which ad worked. We use it only to measure our advertising.
• The free-rebuild application at /free-rebuild: the same details, the organisation and website you name, and that you ticked the box. If you’re not chosen, we delete it 12 months after you applied. If you’re chosen, we keep it while we host your site.
• Past Digital Audit orders: we hold the website address, email and business name you gave us, and the report we made.
• Payments: Stripe tells us that you paid, the amount and your email. We never see your card details.
• The request form at /start: the groups you pick, what you tell us is not working, when you need it, and how you would like us to reach you.
• If you email us directly: your address and whatever the message contains.

This site sets no cookies and uses no tracking pixels or advertising. If you click Accept on the visit-count banner, we count your visit with Vercel Web Analytics. It is cookie-free and collects no personal data: it records the page, where you came from (such as a link in an email), your country and device type, as anonymous totals. If you click Reject, the visit counter counts nothing. You can change your choice any time with “Cookie choices” at the foot of every page. Your choice is remembered in your own browser only. Our host keeps short-lived technical logs, including IP addresses, for security — as any web host does.

The demo sites at /demos are made-up businesses. Their forms send nothing to us.

One tool stores something in your own browser. The financial summary keeps the category rules you set up, and, once you have paid, a note that the summary is unlocked, in your browser’s local storage. Both stay on your device, are never sent to us, and exist only because you asked the tool to remember them, which is why the law needs no separate consent for them. Clearing your browser’s site data removes them.

Why we use it, and on what basis

• To reply to a form or an email. Lawful basis: steps taken at your request before entering a contract, and our legitimate interest in answering enquiries.
• To see which advertising works. Lawful basis: our legitimate interest in not spending money on adverts that do not work.
• To deliver what you paid for and keep our payment records. Lawful basis: our contract with you, and our legal duty to keep accounts.

What you send us through a form or by email stays with the reply. We never add that address to marketing unless you ask us to.

A business address a business publishes itself is different. We may write to it first. The next section is where you refuse.

Marketing messages and how to opt out

Sahbis Limited may send commercial email to a business address the business publishes itself, about the services on this site. You can tell us at any time that you do not want to receive it. Write to hello@sahbis.com with the email address or the business name you want removed. You can also reply to any message we send with the word stop. There is no charge, and we do not ask you for a reason. Once you have objected, the objection is final. We record it, we stop, and we do not contact that address again. If you believe we have contacted you after an objection, write to hello@sahbis.com and we will confirm what we hold.

If we emailed you and we haven’t met

A person at Sahbis wrote to you by hand. This is why, and how to stop it.

Who we are

• Sahbis Limited, Company No. 821013, 77 Camden Street Lower, Dublin 2. We decide how your details are used.

Where we found your address

• On your business’s own website, or on a listing or profile your business keeps itself.
• Never a bought list. Never a guessed address. A person checked it before writing.

Why we wrote

• We saw a specific problem on your own website and offered a free preview of a fix.
• Our lawful basis is legitimate interest: telling a business about a problem on its own site.
• Irish rules on business email (S.I. 336/2011, reg. 13) allow this to a company’s business address.
• We write only to limited companies, say who we are, and give you a way to stop.
• One email. At most one follow-up a week later, only if you did not reply or say stop.

What we hold

• Your business name, your website address and the business email address you publish.
• The result of our automated check of your public website.
• A preview made from public information about your business: your own website, and public registers or listings. It is unlisted and shown only to you.
• An address that names a person, such as anne@yourfirm.ie, is that person’s personal data too.
• Our emails have no tracking pixels and no link tracking.
• The preview is hosted on Cloudflare, which keeps short-lived technical logs of visits (including IP address). We do not use them to follow you up.

Who else sees it

• Google Ireland (our email) and Cloudflare (hosts the unlisted preview). We sell nothing.

How long we keep it

• Previews come down within 45 days of our email. For accountancy firms, after 90 days.
• If you never reply, we delete our record of you 12 months after we wrote.
• If you reply, it becomes an enquiry, kept up to 24 months from your last contact.

How to stop

• Reply STOP, or email hello@sahbis.com. You do not need to give a reason.
• We add you to a do-not-email list the same day, and keep it for good so we never write again.
• That list holds only your address and business name.

Your rights

• You can ask to see what we hold, correct it, delete it, or restrict it. We answer within one month.
• You can object to our use of legitimate interest. Once you object, it is final.
• You can complain to the Data Protection Commission: dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Who else sees it

• Vercel Inc. — hosts this website, passes form submissions on in transit and, if you accept the banner, counts visits with Vercel Web Analytics.
• Resend — delivers form submissions to our inbox as an email.
• Google Ireland Limited — provides our email, where your message is then stored.
• Stripe Payments Europe, Limited (Ireland) takes card payments for paid tools and services. It sees your card and email. We never see your card.

When you pay us online, Stripe takes the payment and sees your card details. We never do.

The typefaces are served from our own domain, so loading a page makes no request to a font service.

Each processor above acts on our instructions. Where one sits outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses.

For US providers, the EU–US Data Privacy Framework applies. We pass your details to nobody else, and never sell them.

Dictation on our forms

Some fields on this site carry a microphone button. It uses the speech recognition built into your browser. In Chrome and Edge, your browser sends the audio to Google’s speech service; in Safari it goes to Apple’s. That happens between you and your browser’s maker, under their terms, not ours. Sahbis receives only the text that ends up in the field when you send the form. We store no audio, and the button does nothing until you press it.

The chat panel

The panel at the bottom of the screen is a scripted helper, not a person and not a model. It follows a fixed set of questions and answers. If you use it to put a request together, it keeps what you type and sends it to us as an email, exactly as the contact form does.

Our social media pages

We run pages on Instagram and Facebook (both run by Meta) and a Google Business Profile. Each has its own privacy notice, linked below.

We can see who follows, likes, messages or comments. We use your words to reply. Why: you asked, and answering is our legitimate interest.

Meta gives us page totals, like country, age group and clicks. We use them to see which posts help: our legitimate interest.

For those totals, Meta and Sahbis share responsibility. Meta handles requests about them, and its Page Insights page explains how.

Google runs our Business Profile and is responsible for its own use of your data. We see totals and reviews, and what you send us.

We keep messages up to 24 months from your last contact. We never add you to marketing from these pages unless you ask. Your rights are below.

Meta Privacy Policy · How Page Insights works · Google Privacy Policy

How long we keep it

Enquiries are kept for up to 24 months from your last contact, so we have a record of what we sent and can pick a conversation back up.

If you become a client, the relevant records are kept as long as the law requires. Ask us to delete your details sooner and we will.

Your rights

Under the GDPR you can ask us to show you the personal data we hold about you, correct it, delete it, restrict how we use it, or give you a portable copy.

You can also object to processing based on legitimate interest. Write to hello@sahbis.com and we will respond within one month.

If you are not satisfied with how we handled your information, you can complain to the Irish Data Protection Commission — dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Changes

If we change this notice we update the date at the top. If a change is significant and we hold your details, we will tell you.