Appify Digital Privacy Policy

1. Who we are

This website is operated by Appify Ltd., trading as Appify Digital, Ashfield, Tullamore, Co. Offaly, R35 KX60, Ireland ("Appify", "we", "us"). We are the controller of the personal data described in this policy. You can contact us about privacy at hello@appify.digital.

2. Information we collect

2.1 Information you give us

• Contact and quote forms: your name, email address, phone number (optional), your message and any project details you choose to share.
• Email, phone and WhatsApp: whatever you send us when you contact us directly.

2.2 Information collected automatically

• Technical data such as IP address, browser type, device and operating system, which our hosting and security providers process to deliver the site and protect it from abuse.
• Where you arrived from (for example an ad click ID or campaign tag, the page you landed on and the referring site). This is kept in your browser for the session and only sent to us if you submit a form, so we know which campaign brought the enquiry.
• If you accept cookies: how you use the site (pages viewed, clicks, time on page), collected by the analytics and advertising tools listed in section 5.

3. How we use it and why

• To respond to your enquiry and provide a quote, and to manage our relationship with you. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in running our business.
• To protect the site from spam and abuse (bot checks, rate limiting). Legal basis: legitimate interest.
• To understand how the site is used and measure our advertising. Legal basis: your consent, which you can withdraw at any time (see section 5).
• To comply with legal obligations, such as accounting and tax records. Legal basis: legal obligation.

We do not sell your personal data.

4. Who we share it with

We use trusted service providers that process data on our behalf under contract:

• Railway: website hosting.
• Cloudflare: network delivery, security and the Turnstile bot check on our forms.
• Google Workspace (Gmail): delivering form submissions to our team by email.
• HubSpot: our customer relationship management (CRM) system, where enquiries are recorded.
• Discord: internal notifications to our team about new enquiries.
• GeoJS: looking up your country from your IP address to show the right WhatsApp contact number.
• Calendly and WhatsApp: if you choose to book a call or message us through them, their own privacy policies apply.
• Google Analytics, Google Ads, Hotjar and Reddit: only if you accept cookies (see section 5).

Some of these providers are based outside the European Economic Area, mainly in the United States. Where data is transferred outside the EEA it is protected by an adequacy decision (such as the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

5. Cookies and similar technologies

We only use analytics and advertising cookies if you click Accept on our cookie banner. If you click Reject or make no choice, these tools are not loaded, or in Google's case run in a cookieless mode that does not store or read cookies on your device. You can change your choice at any time using the Cookie settings link at the bottom of every page.

• Strictly necessary (always on): Cloudflare security and Turnstile bot-check cookies, and a small entry in your browser that remembers your cookie choice.
• Google Analytics (with consent): measures visits and how the site is used. Cookies: _ga, _ga_*.
• Google Ads (with consent): measures which ads lead to enquiries. Cookies: _gcl_*.
• Hotjar (with consent): heatmaps and anonymised session recordings that help us improve page layouts. Cookies: _hj*.
• Reddit (with consent, on our advertising landing pages only): measures the results of our Reddit ads. Cookies: _rdt_*.

Analytics and advertising cookies usually last between one day and two years. You can also delete cookies in your browser settings.

6. How long we keep it

• Enquiries that don't lead to a project: up to 2 years after our last contact, then deleted.
• Client records: for the duration of the project and up to 7 years after, as required for accounting and legal purposes.
• Analytics data: up to 14 months in Google Analytics, and as set by each provider for the other tools.
• Server logs: kept for a short period for security and debugging.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our use of your data;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting earlier use.

To exercise any of these rights, email hello@appify.digital. We will reply within one month. You also have the right to complain to the Data Protection Commission in Ireland (dataprotection.ie).

8. Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure, but we work to protect your information.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it last changed.

10. Contact us

For any questions about this policy or your personal data, contact us at hello@appify.digital or write to Appify Ltd., Ashfield, Tullamore, Co. Offaly, R35 KX60, Ireland.