Privacy Policy

1. Who We Are

MDH Construction is a construction company operating in Ireland and the UK. For the purposes of data protection law, MDH Construction is the "data controller" of the personal data described in this policy, meaning we determine the purposes and means of processing that data.

Our website, mdhconstruction.ie, is a static portfolio site used to showcase our completed and ongoing construction projects and to allow prospective clients and partners to contact us regarding our services.

2. What Personal Data We Collect

We keep the personal data we collect to the minimum necessary to operate our website and respond to enquiries. Depending on how you interact with us, we may collect the following categories of data:

We do not knowingly collect any special category data (such as health information, religious beliefs, or racial or ethnic origin) through our website, and we ask that you do not include such information in any contact form submission.

3. How We Collect Your Data

• Directly from you — when you complete and submit our contact form to make an enquiry about our construction services.
• Automatically — through basic, privacy-conscious analytics tools that record general visit statistics (such as page views and referral source) to help us understand how our website is used. We do not use advertising pixels, cross-site tracking, or third-party marketing cookies.

4. Why We Use Your Data and Our Legal Basis

Under GDPR, we must have a valid legal basis for every use of personal data. The table below sets out our purposes and the corresponding legal basis for each.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Cookies and Analytics

Our website uses minimal, privacy-conscious analytics tracking to help us understand general visitor numbers and behaviour, such as which pages are most viewed. This may involve the use of a small number of essential or analytics cookies or similar technologies.

We do not use advertising cookies, third-party marketing pixels, or tools that build detailed behavioural profiles of individual visitors. Where analytics cookies are not strictly necessary for the website to function, we will seek your consent in line with applicable ePrivacy and cookie laws before they are set, and you may withdraw that consent at any time through your browser settings or any cookie banner provided on our site.

You can control or disable cookies at any time through your browser settings. Please note that disabling cookies may affect certain features of the website, though our core content will remain accessible.

6. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share limited personal data with the following categories of recipients, only where necessary:

• Service providers — such as our website hosting provider, email provider, or analytics provider, who process data on our behalf and are bound by appropriate data processing terms.
• Professional advisors — such as accountants, solicitors, or insurers, where necessary for the operation of our business.
• Regulatory or legal authorities — where required by law, regulation, or a valid legal process, such as a court order.

Any third party that processes personal data on our behalf is required to implement appropriate technical and organisational measures to protect that data and to process it only in accordance with our instructions.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

• Contact form enquiries that do not lead to a business relationship are typically retained for up to 12 months, after which they are securely deleted, unless you request earlier deletion.
• Data relating to clients with whom we enter a contract is retained for the duration of the contract and for a period afterwards as required by Irish and UK tax, accounting, and construction industry record-keeping obligations (typically up to 7 years).
• Basic website analytics data is retained only in aggregate or for a limited rolling period sufficient to identify usage trends.

8. How We Protect Your Data

We take appropriate technical and organisational measures to protect the personal data we hold against unauthorised access, alteration, disclosure, or destruction. These measures include restricting access to personal data to those who need it, using secure and reputable third-party hosting and email providers, and reviewing our data handling practices periodically.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights Under GDPR

If you are located in Ireland, the UK, or the European Economic Area, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten") — to request that we delete your personal data, where applicable.
• Right to restrict processing — to request that we limit how we use your data in certain circumstances.
• Right to data portability — to request that we provide your data in a structured, commonly used, machine-readable format, or transmit it to another controller.
• Right to object — to object to our processing of your data where it is based on legitimate interest.
• Right to withdraw consent — where processing is based on consent (such as certain analytics cookies), to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint — with a supervisory authority, as set out in Section 14 below.

To exercise any of these rights, please contact us using the details in Section 14. We will respond to your request within one month, as required by GDPR, and may extend this period by a further two months for particularly complex requests, in which case we will inform you of the extension and the reasons for it.

10. How to Request Deletion of Your Data

If you have submitted an enquiry through our contact form or otherwise provided us with personal data, you may request that we delete it at any time by emailing us at the address in Section 14, using the subject line "Data Deletion Request".

Please include enough information (such as your name and the email address you used to contact us) to allow us to locate your data. We will action valid deletion requests without undue delay, except where we are required to retain certain data to comply with a legal obligation, to establish or defend legal claims, or where retention is otherwise permitted or required by law (for example, records relating to a signed construction contract that must be kept for tax purposes).

Where deletion is not possible for these reasons, we will inform you of this and explain which data must be retained and why.

11. Children's Privacy

Our website and services are directed at businesses and adult members of the public and are not intended for children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so that we can delete it.

12. International Data Transfers

Where any of our service providers (such as hosting, email, or analytics providers) are located outside Ireland, the UK, or the European Economic Area, we will ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, or a recognised adequacy decision, to ensure your data continues to receive an appropriate level of protection.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Contact Us and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a concern about how we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:

• Ireland: Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — www.dataprotection.ie
• United Kingdom: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom — www.ico.org.uk