Legal
Privacy Policy
Last updated: 9 August 2026. This policy explains how Bastian Works handles personal information in connection with bastianworks.com.
1. Overview
This policy explains what personal information Bastian Works collects when you visit this website, fill in a form, chat with one of our AI assistants, message us on WhatsApp, or engage us for a project, and how that information is used, stored, and protected. It applies to bastianworks.com and to any related correspondence.
2. Who we are
Bastian Works is a website and digital services studio based in Dublin, Ireland, operated by Sebastian. For the purposes of data protection law, Bastian Works is the "data controller" for the personal information described in this policy. You can reach us at the email below.
3. Information we collect
Depending on how you interact with us, we may collect: your name, email address, and phone number; the content of messages you send us through the Contact form, the Get Estimate calculator, our on-site chat assistants, or WhatsApp; details about your project (business type, budget range, package selected); and basic technical data collected automatically by our hosting provider, such as IP address, browser type, and pages visited, for security and performance purposes.
We do not collect payment card details through this website — no payments are processed on bastianworks.com itself.
4. How we collect it
We collect information directly from you when you submit a form, use the estimate calculator, message an AI assistant, email us, or contact us on WhatsApp. Basic technical data is collected automatically as part of normal website hosting. If you accept cookies via the banner on this site, we also collect aggregated, cookieless analytics data about how the site is used (see Section 10).
5. Why we use it
We use your information to: respond to your enquiry and prepare estimates or proposals; deliver and support projects and Care Plans you've engaged us for; send service-related communication (for example, project updates or invoices); keep basic business records for accounting and legal purposes; and understand, in aggregate, how the website is used so we can improve it. Our legal basis for this processing is either that it's necessary to take steps at your request before entering into a contract, that it's necessary to perform a contract with you, that we have a legitimate business interest in responding to enquiries and improving our website, or, for optional analytics cookies, your consent.
We do not use your information for advertising, and we do not sell or rent it to third parties.
7. International transfers
Some of the service providers listed above may process data outside Ireland or the European Economic Area, including in the United States. Where that happens, we rely on providers that offer appropriate safeguards, such as the EU Standard Contractual Clauses or an equivalent legally recognised transfer mechanism.
8. How long we keep it
We keep enquiry and chat data for as long as reasonably needed to respond to it and follow up, and no longer than 24 months if it doesn't turn into a project. For clients, we keep project and invoicing records for as long as the engagement lasts, plus any additional period required by Irish tax and accounting law (generally up to 6 years). You can ask us to delete information sooner, subject to any legal obligation we may have to keep it.
9. How we protect it
We use reputable, security-conscious service providers, restrict access to personal information to what's needed to respond to you or deliver a project, and use encrypted connections (HTTPS) throughout this website. No method of transmission or storage is ever completely secure, but we take reasonable, industry-standard steps to protect your information against loss, misuse, and unauthorised access.
11. Your rights
Under Irish and EU data protection law (GDPR), you have the right to: access the personal information we hold about you; ask us to correct inaccurate information; ask us to delete your information; restrict or object to certain processing; and receive your information in a portable format, where technically feasible. Where processing is based on consent (such as analytics cookies), you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, contact us using the details in Section 14 — we'll respond within one month.
12. Children's privacy
This website and our services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time, for example if we start using a new service provider or a law changes. The "Last updated" date at the top of this page reflects the most recent revision. If a change is significant, we'll take reasonable steps to make it clear on this website.
14. Contact and complaints
For any privacy-related question or request, email us using the address below. If you're not satisfied with how we've handled your information, you also have the right to lodge a complaint with Ireland's Data Protection Commission (the DPC), the supervisory authority for data protection.