Privacy Policy.

Who we are.

Initiate Digital is a digital studio based in County Wexford, Ireland. We trade as Initiate Digital and were formed through the 2025 merger of Initiate and Lemon Logic. For the purposes of this policy and EU GDPR, Initiate Digital is the data controller responsible for any personal information you share with us through our website, email, or phone.

You can reach us at hello@initiate.ie, by phone at (053) 910 3579, or at our registered address in Wexford, Ireland.

What we collect.

We try to collect the minimum information we need to do our job, and nothing more. Specifically:

• Contact information you give us — your name, email address, phone number and company, when you submit a contact form, book a discovery call, or email us directly.
• Project information — anything you share about your business, goals or current setup while we're scoping or delivering a project.
• Newsletter information — your email address, if you subscribe. Nothing else.
• Technical and security information — Cloudflare may process your IP address, browser and device signals, and request metadata to deliver and protect the site and validate contact-form submissions. Separate website-usage analytics are collected only if you accept analytics cookies (see Cookies & tracking below).
• Cookie data — see section 04 for the full breakdown.

We do not knowingly collect information from anyone under 16. If you believe a child has shared information with us, contact us and we'll delete it.

How we use it.

We use your information for the purpose you shared it for, and nothing else. Specifically:

• To reply to your enquiry, scope your project, or deliver work you've hired us for.
• To send you the occasional newsletter, if you've subscribed. You can unsubscribe at any point with one click.
• To protect the contact form and website from spam, fraud and automated abuse.
• To improve our website, by understanding which pages are useful and which aren't.
• To meet our legal obligations, like tax and accounting records.

We do not sell your information to anyone. We don't use it to build advertising profiles. We don't share it with third parties except as listed in section 05.

Cookies & tracking.

Our website uses a small number of cookies. Because the site is a static website with no logins or shopping cart, the only cookies we set are analytics cookies from Google Analytics 4 — and only after you accept them on the banner shown on your first visit. Nothing loads from Google until you say yes.

Cloudflare Turnstile is used as a necessary security service on the contact form, independently of your optional analytics-cookie choice. It is used to distinguish legitimate submissions from automated abuse, not for advertising.

You can change your analytics choice at any time using the Cookie settings link in the footer, or read the full breakdown in our Cookies Policy.

Who we share it with.

We work with a small number of trusted third-party processors who help us run the studio. These are:

• Google — Google Analytics, to understand how the site is used (only with your consent).
• Cloudflare — to host, deliver and secure the website, including Turnstile verification for contact-form submissions.
• Brevo — to deliver website enquiries to our inbox as transactional email.
• Calendly — when you book a discovery call with us.
• Our accountant — for invoicing and tax compliance.
• Payment providers — if and when you pay us for work delivered.

Each processor has its own privacy policy and a data-processing agreement with us. We never share your information with anyone else for marketing or any other purpose.

How long we keep it.

We keep your information only as long as we need it. Specifically: enquiries that don't lead to a project are deleted after 12 months. Active client records are kept for the length of our relationship plus seven years (the statutory limit for tax records in Ireland). Newsletter subscriptions are kept until you unsubscribe.

Your rights under GDPR.

Under EU GDPR, you have several rights over your personal information:

• The right to know what we hold about you.
• The right to ask us to correct anything that's wrong.
• The right to ask us to delete your information (with some legal exceptions for tax records).
• The right to ask us to stop processing your information.
• The right to take your data with you to another provider.
• The right to complain to the Data Protection Commission (dataprotection.ie) if you're not happy with how we've handled your information.

To exercise any of these rights, email us at hello@initiate.ie with the subject line “Data request”. We'll respond within 30 days.

Security & storage.

We take reasonable steps to protect your information. Data is encrypted in transit (HTTPS / TLS), our systems are accessed with two-factor authentication, and backups are encrypted at rest. Where possible, we host data in EU data centres. We have an incident-response procedure and will notify both you and the Data Protection Commission within 72 hours of any breach that affects you.

International transfers.

Some of our processors (notably Google) are based outside the EU. Where data is transferred outside the EU, we rely on Standard Contractual Clauses approved by the European Commission, plus the EU–US Data Privacy Framework where it applies, so your information keeps equivalent protection.

Changes to this policy.

We may update this policy from time to time. Material changes will be flagged on our website and, for active clients and newsletter subscribers, by email. The current version and its effective date are always shown at the top of this page.

Contact us.

If you have any questions about this policy or how we handle your data, get in touch — we're happy to explain anything in plain English.