Privacy notice

Last updated: 22 October 2026

Who is responsible?

The person operating CraicWeb decides how website enquiries are used. For privacy requests, email hello@craicweb.com. Company formation is not a prerequisite for being responsible for personal data.

What we use and why

• Enquiries: your name, email, project requirements and correspondence, to answer you and prepare a proposal. The basis is taking steps at your request before a contract (Article 6(1)(b) GDPR); for general business correspondence, our legitimate interest in answering relevant enquiries (Article 6(1)(f)).
• Optional AI chat: messages you submit and generated replies, to help you explore services and draft an enquiry you requested. The basis is taking steps at your request before a contract. Do not submit passwords, payment details, sensitive personal information or confidential client data. You can email us instead.
• Security: the hosting service receives technical request information such as IP address and browser details. Our application temporarily uses IP addresses and session identifiers to limit abuse. The basis is our legitimate interest in keeping the service secure.
• Theme memory: optional storage of your selected day/night theme, only with your consent. Essential storage supports your requested chat and records your privacy choice.

You choose whether to contact us or use AI. Without an email address we cannot reply by email. We do not use this site for advertising profiling or automated decisions with legal or similarly significant effects.

Forms and the AI assistant

The standard brief form prepares a message in your own email application. It does not send that message automatically. The AI assistant sends chat messages to OpenAI through our server when you submit them. Your name, email and reviewed brief are emailed to CraicWeb through Hostinger only when you choose “Send enquiry”. The contact fields added at that stage are not separately submitted to OpenAI, unless you previously typed them into the chat.

AI can make mistakes. Pawel confirms the scope, price and timeline. Messages are not public, but do not use the chat for confidential or sensitive material.

Providers and international processing

• Hostinger: website hosting and enquiry email delivery/storage. See Hostinger’s privacy policy.
• OpenAI: generates replies for the optional assistant. Our application requests store:false. OpenAI states that API data is not used for model training by default; abuse-monitoring logs may be retained for up to 30 days, subject to its exceptions. See OpenAI API data controls.
• Google Fonts: the main website requests fonts from Google’s servers, which receive your IP address and request information. See Google Fonts privacy information. These requests are for displaying the website, not an analytics integration.

Providers may process data outside the European Economic Area. Their applicable data-processing terms and transfer safeguards, such as standard contractual clauses where relevant, govern those transfers. The operator still needs to confirm the account-specific processing locations and contractual safeguards; no EEA-only processing is promised by this interim notice. Contact us for information about the safeguards applicable to your enquiry.

How long information is kept

• The chat session expires one hour after it starts. Server-memory records are removed when expired records are next checked by an API request, or on a server restart. Chat history is cleared after a successfully submitted enquiry. The approved brief remains in the enquiry email.
• Application abuse-prevention counters expire after their time window, up to 24 hours, and are removed on a subsequent API request or restart. Hostinger may separately maintain security logs and backups under its service terms.
• Enquiry emails are retained while responding and discussing your project. A fixed mailbox deletion schedule and the retention of any later contract/accounting records are still to be confirmed by the operator. You can request deletion of an enquiry that is no longer needed; applicable legal obligations or a dispute may require retention.
• Cookie choices and optional theme memory last up to 180 days in this browser, or until cleared. See the cookie policy.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Use “Cookie settings” for theme memory or email hello@craicweb.com for other requests. We may need to verify your identity and normally respond within one month, subject to the GDPR’s permitted extensions.

You can complain to the Irish Data Protection Commission, or your relevant local supervisory authority.

External links and updates

LinkedIn and portfolio links open third-party websites with their own privacy practices. We do not embed their tracking widgets. This notice will be updated when the operator details, services or processing arrangements change.

Language preference

When you use the language switch, the browser stores your choice in local storage as craicweb-language so we can show the language you requested. It remains until you change the choice or clear browser storage. Without a saved choice, the homepage uses your browser language: Polish for Polish, English otherwise. This is not used for tracking.