Privacy Notice
This notice explains how personal data is processed when you visit appointdpo.com or make an enquiry through this website. We have tried to write it the way we would advise our clients to write theirs: plainly, completely, and without padding.
1. Who we are
Sovy Trust Solutions Limited, a company registered in Ireland (CRO no. 610835) with its registered office at St Gall's House, St Gall Gardens South, Milltown, Dublin 14, D14 Y882, is the data controller for personal data processed through this website.
Contact: contact@appointdpo.com
2. What we collect and why
Enquiry form
When you submit the contact form, we process the information you provide: your name, email address, organisation name, the jurisdiction you selected, and anything you write in the message field.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and preparing a proposal | Steps at your request prior to entering into a contract — Article 6(1)(b) GDPR |
| Recording the enquiry in our client relationship system and following up | Legitimate interests — Article 6(1)(f) GDPR: operating and developing our professional practice |
Providing this information is not a statutory or contractual requirement, but we cannot respond to an enquiry we have not received.
Technical data
Our hosting provider processes standard server logs (IP address, browser type, pages requested, timestamps) for the purposes of operating, securing, and debugging the website. Legal basis: legitimate interests — Article 6(1)(f) GDPR.
3. Where your data goes
We use a small number of service providers (processors) to operate this website and handle enquiries:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting and serverless infrastructure | EU edge network; US parent — transfers safeguarded by the EU–US Data Privacy Framework and Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Transactional email delivery of enquiry notifications | Sending infrastructure in the EU (Ireland); US parent — transfers safeguarded by Standard Contractual Clauses |
| Netim SARL | Domain registration and mailbox hosting for contact@appointdpo.com | France (EU) |
| Supabase | Database infrastructure for our client relationship system | EU (Ireland region) |
We do not sell personal data, and we do not share it with third parties for their own marketing purposes.
4. How long we keep it
- Enquiries that lead to an engagement: retained as part of the client record for the duration of the engagement and for 7 years thereafter, in line with professional record-keeping obligations.
- Enquiries that do not lead to an engagement: retained for up to 24 months from last contact, then deleted.
- Server logs: retained by our hosting provider for short operational periods per their standard schedules.
5. Your rights
Under the GDPR you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interests. To exercise any of these rights, email contact@appointdpo.com. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Data Protection Commission (Ireland) — dataprotection.ie — but you may complain to the authority in your own member state.
6. International visitors
If you contact us from outside the EU/EEA, your data is processed in the EU as described above. If you are in the UK, the equivalent rights under the UK GDPR apply, and the Information Commissioner's Office is your supervisory authority.
7. Changes to this notice
If we change how we process personal data through this website, we will update this notice and revise the version number and date above. We do not water down commitments retroactively.