Privacy Policy
Last updated 24 October 2026
This policy explains how Canopies Direct Ireland (“we”, “us”) collects and uses personal data when you visit this website, send us an enquiry or become a customer, and the choices you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.
1. Who we are
Canopies Direct Ireland is the data controller for the personal data described in this policy. You can contact us about anything in this policy:
- Email: markhendy321@gmail.com
- Phone: 086 875 5506
- Post: 198A Shanliss Road, Santry, Dublin, Ireland
2. The information we collect
Information you give us
- Enquiries: when you use our contact form, phone or email us, we collect your name, email address, phone number, address (if you provide it), details of what you’re looking for and how you heard about us.
- Surveys, quotes and work: if we survey your property, quote or carry out work, we keep details of the property and job, measurements and photos of the area being worked on, and invoicing and payment records.
Information collected automatically
- Hosting and security logs: our hosting provider records technical information such as your IP address, browser type and the pages requested, to keep the website secure and working.
- Spam protection: when you use the contact form, Cloudflare Turnstile checks technical signals from your browser to confirm you’re not an automated bot.
- Analytics and advertising (only if you agree): if you accept these cookies, Google Analytics and Google Ads collect information about your visit, such as the pages you view, the device and browser you use, your approximate location and whether you arrived from one of our ads. See Cookies below.
We don’t ask for sensitive information (such as health data), and our website isn’t intended for children under 16.
3. How we use your information and our legal basis
| What we use it for | Legal basis |
|---|---|
| Replying to your enquiry, arranging a survey and preparing a quote | Taking steps at your request before entering into a contract |
| Carrying out and supporting the work you’ve agreed, and invoicing | Performance of our contract with you |
| Keeping accounting and tax records | Compliance with our legal obligations |
| Sending you an email to confirm we’ve received your enquiry | Our legitimate interest in letting you know your enquiry arrived |
| Protecting the website from spam, fraud and abuse, and keeping it secure | Our legitimate interest in running a safe, working website |
| Measuring how the website is used and how well our ads perform | Your consent, which you can withdraw at any time |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our business |
We don’t send marketing emails, we don’t sell your personal data, and we don’t make decisions about you using automated decision-making or profiling.
4. Who we share it with
We only share personal data where it’s needed for the purposes above. We use trusted service providers who process data on our behalf and under our instructions:
- Vercel (website hosting) and Neon (database hosting), where enquiries are stored
- Amazon Web Services (delivering emails about your enquiry)
- Cloudflare (spam protection on the contact form)
- Google (website analytics and advertising measurement, only if you consent)
- Clerk (secure sign-in to our staff-only admin area; not used for website visitors)
We may also share information with our professional advisers (such as accountants and insurers), and with public authorities or courts where the law requires it.
5. Transfers outside the EEA
Some of our service providers are based in, or use systems located in, the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework (for certified providers) or the European Commission’s Standard Contractual Clauses to make sure it stays protected.
6. How long we keep it
- Enquiries that don’t lead to work: kept for up to 2 years so we can follow up and deal with any questions, then deleted.
- Customer records: kept for 6 years after the job is finished, to meet Irish tax and accounting rules and to handle any guarantee or warranty issues.
- Analytics data: kept by Google for no more than 14 months.
7. Cookies
Cookies are small files stored on your device. We use strictly necessary cookies to make the website work. We only use analytics and advertising cookies if you agree to them in our cookie banner. You can change your choice at any time using at the bottom of every page.
| Cookie | Provider | Purpose | Type | Expires |
|---|---|---|---|---|
| cc_cookie | Canopies Direct Ireland | Remembers your cookie choices | Necessary | 6 months |
| __session, __client_uat and similar | Clerk | Keeps our staff signed in to the admin area (not set for visitors) | Necessary | Session to 1 year |
| _ga, _ga_* | Google Analytics | Tells visits apart so we can see how the website is used | Analytics (consent) | 2 years |
| _gcl_au, _gcl_aw | Google Ads | Measures whether people who click our ads go on to send an enquiry | Advertising (consent) | 90 days |
If you don’t consent, Google tags on this site run in a restricted mode that doesn’t store or read cookies on your device. You can also block or delete cookies in your browser settings.
8. Your rights
Under data protection law you have the right to:
- access the personal data we hold about you and get a copy of it
- have inaccurate data corrected
- have your data deleted, where we no longer have a valid reason to keep it
- restrict how we use your data
- receive your data in a portable format
- object to processing based on our legitimate interests
- withdraw your consent at any time, without affecting processing that happened before
To use any of these rights, contact us using the details in section 1. It’s free, and we’ll respond within one month. We may need to confirm your identity first.
9. Complaints
If you’re unhappy with how we’ve handled your data, please tell us so we can put it right. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (www.dataprotection.ie).
10. Keeping your data secure
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and sign-in protection on our admin systems, and reputable hosting providers. Only people who need your information to do their job can access it.
11. Google user data in our admin tools
Our staff use a private admin area on this website that connects to our own Google Ads account through Google’s API, with our permission. It reads advertising performance data from that account (such as spend, clicks and impressions) and lets our staff pause campaigns or change their budgets. This data relates to our own advertising account, is shown only to authorised staff, is used only to manage our advertising, and is never sold or shared with anyone else. The access token for this connection is stored securely and can be revoked at any time from the Google account’s third-party access settings.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top. Please also read our Terms of Service.