Adsha Solutions

Privacy notice

Last updated: 13 October 2026

This notice explains how Adsha Solutions uses information when you visit this website or contact us, and when we contact businesses to offer our website services. It is written to meet our duties under the EU GDPR (including Article 14), the Data Protection Acts 1988–2018 and the ePrivacy Regulations (S.I. No. 336 of 2011).

1. Who we are

We are a small Irish web design business and the data controller. We have not appointed a Data Protection Officer, as we are not required to.

2. If you contact us or request a Website Health Report

What we collect: only what you choose to send us by email or phone, normally your name, business name, town or county, phone number, email address and website (if you have one). Please don’t send anything we haven’t asked for.

Why and on what basis: to reply to you and prepare your Website Health Report (taking steps at your request before a contract, Article 6(1)(b) GDPR), and to keep a record of our correspondence (our legitimate interest in running our business, Article 6(1)(f)). If you become a customer, we use your details to deliver our services and for accounts and tax (contract and legal obligation, Article 6(1)(b) and (c)). You don’t have to give us your details, but without them we can’t reply or prepare a report.

Who sees it: our email provider and HubSpot (our CRM), as processors; see sections 7 and 8.

How long: if you don’t become a customer, we delete your enquiry and report 6 months after our last contact. Customer records are kept as set out in section 9.

Cookies and visits: this website does not set cookies and does not use advertising or cross-site tracking tools. Our hosting provider (Cloudflare) processes technical data such as IP addresses briefly to deliver and secure the site.

Measuring what works: We use Cloudflare Web Analytics, which counts page visits without cookies or identifying you. When you use a link or code from one of our letters, we count it as a total by date and source only, which tells us which of our materials work. We don’t store your IP address or link this to you. Legal basis: our legitimate interest in measuring our marketing (Art 6(1)(f)).

3. Business outreach: what we collect

We collect business information only, including: business name, business phone, business address or town, Google rating and review count, the Google Maps listing link, the business website and notes on public technical issues (for example slow loading or an expired security certificate). For limited companies (Ltd, DAC, plc) we may also hold a generic role email the company publishes itself (such as info@), where and when we found it, and the company’s status on the CRO register. We also keep records of our contact and any request to stop contact.

Some of this can count as personal data, for example where a business is run by one person. We treat it with the same care. We do not use personal, guessed or bought email addresses, personal social media profiles, or sensitive data.

4. Where it comes from

  • Google Maps / Google Business listings;
  • the business’s own website or Google listing;
  • Golden Pages business listings (trading addresses only);
  • the CRO open company register, used only to check that a limited company is active (we do not take addresses from it);
  • ComReg’s National Directory Database, checked before we phone any landline.

5. Why we use it

  • to find businesses that might benefit from a new or improved website;
  • to prepare a short, personalised website health report, hosted at a long, random web address shared only with that business;
  • to contact the business once, with possible short follow-ups;
  • to keep a suppression list so we never contact anyone again who has asked us not to;
  • to respond to questions and rights requests.

How we contact different businesses

Limited companies: we may email the generic role address they publish. Every email identifies us and includes a one-click unsubscribe link and a List-Unsubscribe header.

Sole traders, partnerships and businesses trading under a person’s name: we do not email them. We may send a posted letter, which always includes our contact details and a simple way to opt out, or phone a business landline only after checking ComReg’s National Directory Database. We do not make marketing calls to mobile numbers without consent.

Posted letters

We only send letters to the trading address a business publishes itself, on its Google listing, its own website or Golden Pages. We do not use home addresses from company records or any other source. Our legal basis is legitimate interests (Article 6(1)(f) GDPR). Each letter says where we found the address and how to opt out. You can stop our letters at any time by email (info@adshasolutions.ie), or by replying to the letter. If you opt out, we keep only your business name, address and the date on our suppression list so we don’t write again. If you don’t reply, we delete your details 6 months after our last letter. Any website mock-up we send is an original design made by us; we do not use your logo or photos.

Shane Davison personally reviews every batch of contacts before anything is sent. We do not use automated decision-making with legal or similarly significant effects.

6. Our legal basis

We rely on legitimate interests (Article 6(1)(f) GDPR) in promoting our services to businesses that may benefit, as recognised in Recital 47. We have a written Legitimate Interests Assessment; you can ask for a summary. Our electronic marketing follows Regulation 13 of S.I. No. 336 of 2011. Where we keep your details on our suppression list, it is to respect your objection.

7. Who we share it with

We never sell or rent your information. We share it only with: HubSpot, our CRM, as a processor under a data processing agreement; our email provider, Google Workspace (Google Ireland Ltd); our hosting provider (Cloudflare), which hosts this site and the report pages; professional advisers under confidentiality; and public authorities where the law requires it.

8. Transfers outside the EEA

HubSpot and some other providers are based in, or use sub-processors in, the United States or elsewhere outside the EEA. Transfers are protected by the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Contact info@adshasolutions.ie for details.

9. How long we keep it

  • Business outreach records: we review them periodically and delete them when they are no longer needed for the purposes above. Businesses we have contacted that don’t reply or become customers are removed 6 months after our last contact (email, call or letter).
  • Website enquiries and report requests that don’t lead to work: deleted 6 months after our last contact.
  • Customers: for as long as we work together, then as needed for tax and legal purposes (normally 6 years after the relevant tax year).
  • Suppression list: only the business name, the contact detail (email, phone or postal address) and the date of your request, kept indefinitely so we never contact you again.
  • Health report pages: removed when the related contact record is deleted.

10. Your rights

You can ask for access, correction, erasure or restriction, and you can object to our use of your information. You have an absolute right to object to direct marketing: we will stop straight away, no reason needed. Click unsubscribe, reply “stop”, or write to us. Contact info@adshasolutions.ie. We reply within one month and may need to confirm your identity. Where we rely on a contract (for example customer records), you may also have a right to data portability.

11. Complaints

Please contact us first. You can also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (dataprotection.ie), or the authority where you live or work.

12. Changes

The latest version is always at https://adshasolutions.ie/privacy/.