Privacy Policy

1. Who we are

This website, disabilitydayservices.com, is operated by Byte Byte ("we", "us", "our"). For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Acts 1988–2018, Byte Byte is the data controller for personal data processed through this site.

You can reach us about anything in this policy at hello@bytebyte.ie.

2. What we collect, why, and on what legal basis

2.1 Email correspondence

There is no contact form on this site. If you want to reach us, you email us directly at hello@bytebyte.ie. In that case we process whatever you choose to put in your email — typically your name, your email address, and the content of your message — for the sole purpose of reading it and replying to you.

We do not store your message in a database, add you to a mailing list, or use your address for anything other than our reply and any follow-up on the same subject. Your email is held in our ordinary email account, and is subject to the privacy practices of our email provider as well as your own.

Legal basis: our legitimate interests (Article 6(1)(f) GDPR) in responding to people who contact us, and, where your message concerns a request or enquiry you have initiated, the steps taken at your request under Article 6(1)(b).

Please do not include special category data in your email — in particular details about health, disability, or care needs, whether your own or someone else's. We do not need it in order to help you, and ordinary email is not a secure channel for it.

2.2 Analytics

We use Google Analytics 4 to understand how many people use the site and which pages are useful, so we can improve it. This is configured with Google Consent Mode: analytics storage is set to denied by default, and no analytics cookies are set unless and until you press “Accept” on the cookie banner. If you decline, or simply ignore the banner, analytics stays off.

Analytics data is aggregated and is not used to identify you personally. We have not enabled Google advertising features, and we do not use this data for advertising or profiling.

Legal basis: your consent (Article 6(1)(a) GDPR), withdrawable at any time (see section 6).

2.3 Server logs and hosting

The site runs on Google Cloud Run in the europe-west1 region (Belgium). Like any web server, it generates technical logs which may briefly include IP addresses, request paths, timestamps, and error traces. These are used only to keep the service running securely and to debug faults.

Legal basis: our legitimate interests (Article 6(1)(f)) in operating a secure, working service.

2.4 Maps

Map tiles, geocoding, and directions are provided by Google Maps. When the map loads, your browser contacts Google directly, and Google may process your IP address and device information under its own privacy policy. If you use the “near me” feature, your browser asks your permission before sharing your location. That location is used in your browser to calculate distances — we do not store it.

3. What we do not do

• We do not sell, rent, or trade your personal data. To anyone. For any reason.
• We do not use your data for advertising, profiling, or automated decision-making.
• We do not track you across other websites.
• We do not require you to create an account, and we do not ask for one.
• We do not knowingly collect data from children.

4. Who we share it with

We share personal data only with the service providers ("processors") that make this site work. Note that the service listings themselves are held in a cloud database (MotherDuck), but that database holds no personal data about site visitors.

The processors are:

• Google Cloud Platform — hosting and infrastructure.
• Google Analytics & Google Maps — as described above.

We may also disclose data where we are legally required to do so, or where necessary to establish, exercise, or defend legal claims.

International transfers. Some of these providers are based in, or process data in, the United States. Where data is transferred outside the European Economic Area, it is done under safeguards recognised by the GDPR, such as the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

5. How long we keep it

• Email correspondence: kept for as long as needed to deal with your query and to keep a record of what was reported, and in any event no longer than 24 months, after which it is deleted.
• Analytics data: retained according to the retention period configured in Google Analytics, and held in aggregated form.
• Server logs: retained on a short rolling basis by our hosting provider for operational and security purposes.

You can ask us to delete your data sooner at any time — see below.

6. Your rights under the GDPR

You have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted ("the right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a portable, machine-readable format.
• Object — object to processing carried out on the basis of legitimate interests.
• Withdraw consent — for analytics, at any time and without affecting processing already carried out. Clear this site's data in your browser and the cookie banner will appear again so you can change your answer.

To exercise any of these rights, email hello@bytebyte.ie. We will respond within one month, free of charge. We may need to ask you for information to verify your identity first.

7. Your right to complain

If you are unhappy with how we have handled your personal data, you can lodge a complaint with the Irish supervisory authority:

Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
www.dataprotection.ie

We would appreciate the chance to address your concern first, but you are entitled to go straight to the DPC.

8. Security

We take reasonable technical and organisational measures to protect your data, including transport encryption (HTTPS), input validation and sanitisation, rate limiting, and access controls on the database. No method of transmission or storage over the internet is completely secure, however, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised, and material changes will be reflected there.