Privacy Policy

1. Who we are

ConceptPlus Solutions ("ConceptPlus", "we", "us", "our") is the data controller for personal data collected through this website. We are a management consultancy based at Unit 8, The Cubes 1, Beacon South Quarter, Sandyford, Dublin 18, Ireland.

For any privacy-related question or request, contact us at support@conceptplus.ie.

2. What data we collect and why

We only collect personal data you actively give us. We do not run advertising trackers, analytics, or third-party profiling on this site.

• Contact-form submissions. When you fill out the contact form we collect your name, email address, and any optional details you choose to provide (company, phone, service of interest, message).
• Server logs. Our hosting provider records standard request logs (IP address, user agent, timestamp, requested URL) for security and reliability. These are short-lived and are not used to build user profiles.
• Admin session cookie. A single session cookie (cps.sid) is set only when an authorised administrator signs in to the back office at /admin. It is never set for ordinary visitors. See our Cookie Policy for details.

3. How we use your data and our lawful basis

• Responding to your enquiry — we use your contact-form submission to reply to you, scope possible work, and follow up. Lawful basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and/or Article 6(1)(f) (legitimate interests in operating our consultancy).
• Securing the website — we use server logs and rate-limiting to protect the site from abuse. Lawful basis: Article 6(1)(f) GDPR (legitimate interests).
• Administering the back office — the session cookie is used solely to keep an authorised administrator signed in. Lawful basis: Article 6(1)(f) GDPR (legitimate interests in running the site). This cookie is also strictly necessary for the back-office service to function.

We do not use your data for marketing or profiling, and we do not make automated decisions that produce legal or similarly significant effects.

4. Where your data is stored and who processes it

We use a small number of carefully chosen processors. Each is bound by appropriate contractual terms and, where relevant, EU-approved transfer safeguards.

• Hosting and database — the website and its PostgreSQL database are operated on Replit's managed infrastructure. Contact-form submissions are stored in the EU-hosted database.
• Email delivery — when you submit the contact form, an email notification is sent to us via Mailgun (EU region) so that we can respond to your enquiry promptly. Mailgun processes the contents of that email in the course of delivery.

5. How long we keep your data

• Contact-form submissions — kept for up to 24 months after our last meaningful contact with you, then deleted or anonymised. If your enquiry leads to an engagement, the relevant records are retained for the duration of the engagement and any applicable legal retention period.
• Server logs — retained for a short rolling window (typically up to 30 days) for security and diagnostics.
• Admin session cookie — expires automatically and is destroyed on logout.

6. Sharing your data

We do not sell your personal data and we do not share it with third parties for their own marketing purposes. We share data only with the processors named above, and only where necessary, for example with our accountants, advisors, or competent authorities where we are legally required to do so.

7. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time. To exercise any of these rights, email support@conceptplus.ie and we will respond within one month.

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Irish Data Protection Commission ( www.dataprotection.ie).

8. Security

The site is served over HTTPS. Administrator access is protected by a password, per-IP rate limiting, and per-IP lockout on repeated failed sign-in attempts. The contact form is size-limited and validated server-side. We review and update these controls as the site evolves.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be highlighted on the website where practical.

10. Contact

Questions, requests, or concerns about your personal data: support@conceptplus.ie.