Legal · Privacy

Privacy Notice

This notice explains what happens to personal data when you use the Purpledecks website, contact us, or work with us as a client.

Last updated: 28 July 2026
On this page
01

Who we are

Purpledecks Ltd is the data controller for the personal data described in this notice. Purpledecks is a trading name of Purpledecks Ltd, which also trades as Deep Purple AI Consulting.

Company number: 513907

Registered office:

Suite 23, Redleaf House
Townspark Industrial Estate
Athlone Road, Longford
N39 KV60, Ireland

Email: privacy@purpledecks.com

Data protection contact: Brian Egan, privacy@purpledecks.com

We are not required to appoint a Data Protection Officer, given the nature and scale of what we do.

02

What this notice covers

This notice covers the purpledecks.com website, enquiries you send us, and personal data we hold about client and prospect contacts.

Deep Purple AI Consulting operates a separate website with its own privacy notice. Purpledecks Ltd is the controller for both.

This notice does not cover personal data held inside a client's own systems, which we may handle on that client's instructions while delivering work. That is governed by the agreement with the client and by a separate data processing agreement.

03

What this website does, and does not do

Worth being plain about this, because most websites are not.

This website sets no cookies. There is no consent banner because there is nothing to consent to. Nothing is stored on your device and nothing follows you to other websites.

There is no contact form. The contact link opens your own email application.

One thing on the page comes from outside our own domain, and that is the analytics script described in the next section. Fonts, images and styles are all served by us. Nothing else is fetched from anywhere else.

04

What we collect

When you visit the website

  • Analytics. We use Ahrefs Web Analytics to understand which pages are read and where readers arrive from. The script is loaded from Ahrefs, so they receive your IP address. It sets no cookies and does not identify you. It records the page viewed, the referring site, an approximate country and general device and browser information, worked out from your IP address.
  • Hosting records. Our host, Netlify, records the technical information needed to serve the site and keep it secure, including IP address, browser type and the page requested.

When you contact us

Whatever you put in your email. Usually your name, email address, company and the substance of your enquiry.

When you work with us

  • Contact name, email address, phone number, company and role
  • Correspondence relating to the engagement
  • Billing and invoicing details
  • Time and project records
  • Recordings of video meetings, where they are made. Zoom notifies everyone on the call before recording begins.

From public sources

We may look at publicly available business information when we are considering or preparing for work with an organisation. Sources are usually LinkedIn profiles and company websites. What we take is normally a name, job title, employer, professional background and a work email address or phone number.

Do you have to give us anything?

No. Nothing you send us is required by law or by contract.

But if you do not give us your contact details we cannot reply to you, and if you do not give us billing details we cannot invoice you and so cannot work with you.

05

Why we use it, and on what legal basis

What we do
Why
Legal basis
Website analytics
WhyTo understand which of our writing is read and useful
Legal basisLegitimate interest (Article 6(1)(f)). Our interest: knowing whether our work reaches anyone. No cookies, nothing stored on your device, no cross-site tracking, and no individual is identified.
Hosting and security records
WhyTo serve the website and protect it
Legal basisLegitimate interest (Article 6(1)(f)). Our interest: keeping the site running and secure.
Replying to your enquiry
WhyBecause you contacted us
Legal basisLegitimate interest (Article 6(1)(f)) where you contact us for an organisation. Our interest: answering people who ask us something. Steps taken at your request before a contract (Article 6(1)(b)) where you would be our client yourself, for example a sole trader.
Delivering an engagement
WhyTo do the work
Legal basisLegitimate interest (Article 6(1)(f)) where our client is an organisation and you are one of its people. Our interest: delivering the work we have been engaged to do. Contract (Article 6(1)(b)) where you are our client yourself.
Invoicing and financial records
WhyBecause we have to
Legal basisLegal obligation (Article 6(1)(c)). Irish tax and company law.
Looking at public business information
WhyTo prepare properly for a conversation
Legal basisLegitimate interest (Article 6(1)(f)). Our interest: knowing who we are talking to before we talk to them.
Recording client meetings
WhyTo keep an accurate record for delivery
Legal basisLegitimate interest (Article 6(1)(f)). Participants are notified before recording begins.

Where we rely on legitimate interest we have considered whether your rights outweigh ours and concluded they do not, given how little data is involved and the business context.

06

Who else handles it

We do not sell personal data.

The following providers handle personal data on our instructions. We have data processing agreements with each of them.

Provider
What for
Where
Netlify Inc.
What forWebsite hosting
WhereUS
Ahrefs Pte Ltd
What forWebsite analytics
WhereSingapore
Google LLC (Google Workspace)
What forEmail, files, calendars
WhereUS
Attio Ltd
What forClient and prospect records
WhereUK
Zoom Video Communications Inc.
What forClient video meetings
WhereUS
Harvest (Iridesco LLC)
What forTime tracking and invoicing
WhereUS
Cloudflare Inc.
What forContent delivery and protection, via Netlify
WhereUS

We also share personal data with our accountants and other professional advisers where needed, and with legal authorities where required by law. Our accountants act as data controllers in their own right rather than on our instructions, so their own privacy notice governs what they do with it.

Our engineers and long-term contractors work under written agreements carrying confidentiality and data protection obligations.

07

Sending data outside the EEA

Some of our providers are outside the European Economic Area. Where that happens we rely on:

Mechanism
Providers
European Commission adequacy decision
ProvidersAttio (UK)
EU-US Data Privacy Framework
ProvidersNetlify, Google, Zoom, Cloudflare
Standard Contractual Clauses
ProvidersAhrefs (Singapore), Harvest (US), and as a fallback for any provider not certified under the Framework or where the Framework ceases to be available

You can ask us for a copy of the Standard Contractual Clauses we rely on. Email privacy@purpledecks.com.

08

How long we keep it

What
How long
Enquiries that do not become work
How longUp to 2 years, then deleted
Prospect records, including business information from public sources, where no work follows
How longUp to 2 years, then deleted
Client records other than meeting recordings, including financial records
How long7 years after the engagement ends, for Irish tax purposes and to cover the limitation period for claims
Client meeting recordings
How longDeleted within 12 months, or earlier if the client asks
Website analytics
How longFor as long as we run the analytics project. If we close it, the data goes with it.
Hosting records
How longOur host keeps these only as long as needed to deliver and secure the website. We do not access or analyse them.
09

Your rights

Under the GDPR you can ask us to:

  • Give you a copy of the personal data we hold about you
  • Correct it if it is wrong or incomplete
  • Delete it, where we no longer need it or where you successfully object
  • Restrict how we use it
  • Send it to you in a machine-readable format

Your right to object

You have the right to object at any time to our use of your personal data where we rely on legitimate interest. Most of what we do sits on that basis, so this right covers most of this notice.

If you object, we will stop, unless we can show compelling grounds to continue that override your interests.

Email privacy@purpledecks.com. We will confirm who you are and reply within one month.

10

Automated decisions

We do not make automated decisions about you and we do not profile you.

11

Children

This website is aimed at businesses. We do not knowingly collect personal data from anyone under 16. If you think we have, email privacy@purpledecks.com and we will delete it.

12

Links to other sites

Our website links to other sites, including LinkedIn. We are not responsible for what they do with your data. Read their notices.

13

Security

We protect personal data with measures appropriate to what we hold. That includes two-factor authentication, access restricted to those who need it, encrypted storage, and written data protection terms with everyone who works with us.

No transmission over the internet is completely secure, and we cannot guarantee absolute security.

14

Changes

We update this notice when what we do changes. The date at the top tells you when it last changed.

15

Complaints

Tell us first, at privacy@purpledecks.com, and we will try to sort it out.

You also have the right to complain to the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
www.dataprotection.ie

16

Contact

privacy@purpledecks.com

Purpledecks Ltd
Suite 23, Redleaf House
Townspark Industrial Estate
Athlone Road, Longford
N39 KV60, Ireland