Privacy Policy.

1. Who We Are

This website is operated by BOSS – Bowes Office Support Services (“BOSS”, “we”, “us” or “our”), a sole trader business based in Dublin, Ireland, run by Karen Bowes. For the purposes of data protection law, BOSS is the data controller for the personal data described in this policy.

If you have any questions about this policy or how your data is handled, contact karen@bossdublin.com.

2. What Personal Data We Collect

We only collect personal data that you choose to give us. This currently happens in two ways:

• When you submit the enquiry form on our Contact page, we receive your name, email address, phone number (if provided), the package you’re interested in, and any message you include.
• When you email or call us directly, we receive whatever contact details and information you share with us.

We do not currently use analytics or advertising cookies on this website, so we do not collect browsing behaviour data about visitors through this site directly. Section 5 below explains this in more detail.

3. How We Use Your Data

We use the personal data you provide to:

• Respond to your enquiry and discuss your administrative support needs;
• Prepare quotations or proposals if you’re interested in a service package;
• Deliver our Services if you become a Client, in accordance with our Terms & Conditions;
• Keep reasonable business, accounting and tax records where you become a paying Client;
• Meet our legal and regulatory obligations.

We do not sell, rent or trade your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

We rely on the following legal bases under the General Data Protection Regulation (GDPR) to process your personal data:

• Consent — when you voluntarily submit the enquiry form on our website.
• Legitimate interest — responding to business enquiries and maintaining our client relationships.
• Contract — where processing is necessary to provide Services you’ve engaged us for.
• Legal obligation — where we’re required to keep certain records, for example for tax purposes.

5. Cookies & Similar Technologies

This website does not currently use analytics, advertising or tracking cookies. No cookie consent banner is shown because, at present, nothing on the site requires your consent to run.

A small number of technical services are used to run the site, described below. If we introduce analytics tools that use cookies in future (such as Google Analytics), we will update this policy and add a cookie consent mechanism before any such cookies are set.

Google Fonts — this site loads typefaces from Google Fonts (fonts.googleapis.com). This involves a request to Google’s servers to deliver the font files; Google’s current practice for this service does not involve tracking cookies. See Google’s own Privacy Policy for more information.

Google Search Console — we use Search Console to understand how this website appears in Google Search results (for example, which search terms bring visitors to the site). Search Console does not set cookies on your device or track your individual browsing activity — it works from data Google already collects through its normal search indexing.

6. Who We Share Your Data With

We use a small number of trusted service providers (data processors) to help run this website and our business. We don’t share your data with anyone beyond what’s needed to operate these services:

• Netlify — our website hosting provider, which also processes submissions from our enquiry form. Netlify may store this data on servers outside Ireland/the EEA, under its own data protection safeguards. See Netlify’s Privacy Policy for details.
• Google — for font delivery (Google Fonts) and search performance reporting (Search Console), as described in Section 5.

Where required by law, we may also disclose personal data to regulatory or law enforcement bodies.

7. Data Retention

We keep enquiry data for as long as reasonably necessary to respond to you and follow up on your enquiry, and for a reasonable period afterwards in case you get back in touch. Where you become a paying Client, we retain records for as long as necessary to provide the Services and to meet our legal, accounting and tax obligations, typically in line with Irish statutory retention periods.

If you’d like your data deleted sooner, contact us and we’ll action this unless we’re required to retain it by law.

8. Data Security

We take reasonable technical and organisational measures to protect the personal data we hold from unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work with reputable service providers (see Section 6) who maintain their own security standards.

9. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Request erasure of your data, subject to any legal retention requirements;
• Restrict or object to certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent at any time, where consent is the legal basis for processing.

To exercise any of these rights, email karen@bossdublin.com. You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie if you believe your data has been mishandled.

10. Children’s Privacy

This website and our Services are intended for business use and are not directed at children. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time, for example if we introduce new tools such as analytics. Material changes will be reflected by an updated “Last updated” date at the top of this page.