Privacy Policy (Spotlightwebs)

Last updated: 1 August 2026

This Privacy Policy explains how Spotlightwebs, operated by Liliia Otchyk, collects, uses, stores and protects personal data when you visit our website, submit an enquiry or communicate with us.

Spotlightwebs is committed to processing personal data lawfully, fairly and transparently in accordance with the General Data Protection Regulation, the Irish Data Protection Act 2018 and other applicable data protection legislation.

This Privacy Policy explains how Spotlightwebs (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit our website or contact us through our forms (the “Service”). We are committed to protecting your privacy and handling personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Irish data protection law.

1. Who We Are

For the purposes of applicable data protection law, the data controller is:

Trading name: Spotlightwebs
Data controller: Liliia Otchyk
Business structure: Sole Trader
Country of establishment: Ireland
Website: https://spotlightwebs.com

Questions about this Privacy Policy or the use of your personal data may be sent to the email address above.

2. Personal Data We Collect

We collect only the information that you choose to provide when you submit a website form, request a quotation, contact us directly or engage our services.

This information may include:

  • your name;
  • your email address;
  • your telephone number, where provided;
  • your company or trading name;
  • your website address;
  • your business location;
  • details about your project;
  • information about the services you require;
  • your estimated budget or preferred timeframe;
  • the contents of your message;
  • documents, links or materials you choose to provide;
  • correspondence between you and Spotlightwebs;
  • invoice, transaction and client account information.

You are not required to provide personal data simply to browse the website, other than limited technical information that may be processed through essential website functions, server logs and approved analytics technologies.

3. Contact and Enquiry Forms

When you submit a contact or enquiry form, we may collect:

  • your name;
  • your email address;
  • your message;
  • your project or business details; and
  • any other information you voluntarily enter into the form.

The information submitted through the website may be:

  • sent to our business email address;
  • stored in the WordPress website database;
  • stored by the website hosting provider;
  • accessed through the WordPress administration area; and
  • used to respond to your enquiry or prepare a quotation.

Please do not submit sensitive personal data, passwords, financial account details or confidential third-party information through a general website contact form.

4. Technical and Website Usage Data

When you visit the website, limited technical information may be processed automatically.

Depending on your cookie preferences and website configuration, this information may include:

  • IP address or an abbreviated version of the IP address;
  • browser type;
  • device type;
  • operating system;
  • approximate geographical region;
  • pages visited;
  • date and time of visits;
  • referral source;
  • interactions with website content;
  • session duration;
  • website errors; and
  • cookie or device identifiers.

Some technical information may be recorded automatically in server logs by our hosting provider for website operation, security, troubleshooting and abuse prevention.

5. How We Use Personal Data

We may use personal data to:

  • respond to enquiries;
  • understand your project requirements;
  • prepare quotations and proposals;
  • communicate about requested services;
  • provide SEO, WordPress and digital marketing services;
  • manage projects and client relationships;
  • issue and process invoices;
  • maintain accounting and tax records;
  • provide technical support;
  • improve website functionality and usability;
  • analyse website traffic and performance;
  • protect the website against fraud, spam, misuse and security threats;
  • establish, exercise or defend legal claims;
  • comply with legal, regulatory and tax obligations; and
  • maintain internal business records.

We do not sell personal data.

We do not use personal data submitted through our forms for unrelated advertising purposes without an appropriate legal basis or consent.

We process personal data only where we have a lawful basis to do so.

Depending on the circumstances, we may rely on the following legal bases.

Taking Steps Before Entering Into a Contract

When you contact us to request information, a quotation or a proposal, we may process your information in order to take steps at your request before entering into a contract.

Performance of a Contract

When you become a client, we process the information necessary to provide the agreed services, communicate with you, manage the project and process payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

These interests may include:

  • responding to business enquiries;
  • managing client relationships;
  • maintaining business records;
  • improving our website and services;
  • preventing fraud and spam;
  • protecting website security;
  • resolving disputes; and
  • establishing or defending legal claims.

We may process and retain certain information where required to comply with tax, accounting, regulatory or other legal obligations.

We rely on consent where required, including for the use of non-essential analytics cookies.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

7. Google Analytics

We use Google Analytics to understand how visitors use our website and to improve its performance, content and usability.

Google Analytics may process information such as:

  • pages viewed;
  • time spent on the website;
  • approximate location;
  • device and browser information;
  • referral source;
  • website interactions;
  • session information; and
  • cookie or online identifiers.

Google Analytics should not be used to collect information that directly identifies you, such as your name, email address or telephone number.

Google Analytics is activated only where you have provided the required consent through our cookie consent mechanism.

You can refuse analytics cookies or withdraw your consent through the cookie settings available on the website.

We configure Google Analytics data retention for user-level and event-level information for a period of up to 14 months, after which the relevant information is deleted in accordance with the applicable Google Analytics settings.

Aggregated statistical reports that do not directly identify an individual may be retained for a longer period.

8. Google Tag Manager

We may use Google Tag Manager to manage website scripts, analytics tags and tracking technologies.

Google Tag Manager is a tag-management system. The personal data processed through it depends on the specific tools and tags that are activated through the system.

Google Tag Manager does not replace the requirement to obtain consent for non-essential analytics or advertising technologies.

Where Google Analytics or another non-essential technology is deployed through Google Tag Manager, it will be subject to the relevant cookie consent settings.

We do not intentionally use Google Tag Manager to transmit names, email addresses, telephone numbers or contact-form messages to Google Analytics.

9. Cookies

Cookies are small text files stored on your device when you visit a website.

Our website may use the following categories of cookies.

Strictly Necessary Cookies

These cookies are required for the website to function correctly, provide security, remember privacy settings or process actions specifically requested by the visitor.

Strictly necessary cookies do not normally require consent.

Analytics Cookies

Analytics cookies help us understand how visitors interact with the website, which pages are visited and how the website can be improved.

Analytics cookies are non-essential and are used only after the visitor has provided consent.

Functional Cookies

Functional cookies may remember certain choices or enable additional website features.

Where required by law, these cookies will be used only after consent has been provided.

You can accept, reject or manage non-essential cookies through the cookie banner or cookie settings available on the website.

You may also delete cookies through your browser settings. Blocking certain cookies may affect some website functions.

10. WordPress

Our website is built using WordPress.

Information submitted through website forms may be stored in the WordPress database, depending on the configuration of the contact-form plugin used on the website.

The WordPress website, its database and related backups are hosted by our hosting provider:

Hosting provider: [INSERT HOSTING PROVIDER]

WordPress administrators may access submitted enquiries only where this is necessary to respond to the enquiry, maintain the website, provide services or resolve a technical issue.

We take reasonable steps to restrict administrative access and protect the WordPress website using appropriate passwords, updates, security controls and access-management practices.

11. Website Hosting

Our hosting provider may process limited personal and technical information on our behalf for purposes including:

  • hosting the website;
  • storing the WordPress database;
  • maintaining backups;
  • processing server logs;
  • detecting security threats;
  • preventing abuse;
  • providing technical support; and
  • ensuring website availability.

The hosting provider acts as a service provider or data processor where it processes personal data on our behalf.

The location of data storage and the safeguards applied will depend on the hosting provider and hosting plan used.

12. Who May Receive Personal Data

We may share limited personal data with service providers where this is necessary to operate the website, respond to enquiries, provide services or comply with legal obligations.

Recipients may include:

  • our website hosting provider;
  • WordPress and website plugin providers;
  • Google Analytics and Google Tag Manager service providers;
  • email and communication providers;
  • cloud storage or backup providers;
  • accountants or tax advisers;
  • professional legal advisers;
  • contractors assisting with an authorised client project;
  • payment or banking providers where applicable; and
  • public authorities where disclosure is legally required.

We provide service providers only with the information reasonably necessary for the relevant service.

We do not sell, rent or trade personal data to third parties.

13. Contractors and Project Partners

Where necessary for a specific project, we may share limited client information with a trusted contractor, developer, designer, copywriter, SEO specialist or other professional service provider.

Such information will be shared only where:

  • it is necessary to deliver the agreed service;
  • the recipient has a legitimate need to access it;
  • appropriate confidentiality or data protection obligations apply; and
  • the sharing is consistent with the client agreement and applicable law.

14. International Data Transfers

Some technology providers used by our website may process or store information outside Ireland or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we take reasonable steps to ensure that an appropriate legal transfer mechanism is available.

Depending on the provider and destination, this may include:

  • an adequacy decision adopted by the European Commission;
  • Standard Contractual Clauses;
  • participation in an approved data protection framework; or
  • another legally recognised safeguard.

Further information about a relevant transfer mechanism may be requested by contacting us.

15. How Long We Keep Personal Data

We retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected, including legal, tax, accounting and dispute-resolution requirements.

Unless a longer period is required or justified:

  • general enquiries may be retained for up to 24 months after the last meaningful communication;
  • unsuccessful quotations and related correspondence may be retained for up to 24 months;
  • active client and project records may be retained for the duration of the client relationship;
  • contracts, invoices, payment information and relevant accounting records may be retained for at least six years where required for Irish tax and accounting purposes;
  • contact-form entries stored in WordPress may be deleted when they are no longer needed;
  • server and security logs may be retained according to the hosting provider’s retention schedule;
  • website backups may temporarily retain deleted information until the backup is overwritten;
  • Google Analytics user-level and event-level data may be retained for up to 14 months; and
  • information connected to a legal dispute may be retained until the issue and any applicable limitation period have concluded.

We may retain anonymised or aggregated information that no longer identifies an individual.

16. Data Security

We use reasonable technical and organisational measures designed to protect personal data from:

  • unauthorised access;
  • accidental loss;
  • alteration;
  • misuse;
  • disclosure; and
  • destruction.

Measures may include:

  • access controls;
  • strong passwords;
  • secure website connections;
  • WordPress and plugin updates;
  • website backups;
  • anti-spam and security controls;
  • limited administrative access; and
  • secure service providers.

No website, email system or internet transmission can be guaranteed to be completely secure. You should avoid sending highly sensitive or confidential information through an ordinary contact form or unencrypted email.

17. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the right to:

  • be informed about how your personal data is used;
  • request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable;
  • complain to a supervisory authority; and
  • receive information about appropriate safeguards used for international transfers.

These rights are not absolute and may depend on the circumstances and legal basis for processing.

To exercise a right, contact:

Email: [INSERT BUSINESS EMAIL]

We may request sufficient information to confirm your identity before responding.

We will respond without undue delay and normally within one month, subject to any extension permitted by law for complex or numerous requests.

18. Complaints

Please contact us first if you have concerns about how your personal data has been handled. We will review the concern and attempt to resolve it.

You also have the right to raise a concern or submit a complaint to the Irish supervisory authority:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Email: info@dataprotection.ie

Making a complaint does not affect any other legal or administrative remedy available to you.

19. Children’s Personal Data

Our website and services are intended primarily for businesses and adults seeking professional digital services.

We do not knowingly collect personal data directly from children.

If you believe that a child has submitted personal data through the website, please contact us so that we can review and, where appropriate, delete the information.

The website may contain links to third-party websites or platforms.

Spotlightwebs is not responsible for the privacy, security or content practices of third-party websites.

Visitors should review the privacy policy of each external website before submitting personal data.

21. Automated Decision-Making

We do not use information submitted through our contact forms to make decisions based solely on automated processing that produce legal or similarly significant effects.

22. Marketing Communications

We do not automatically add individuals who submit an enquiry to a marketing mailing list.

Where we introduce optional marketing communications, we will use an appropriate legal basis and provide a clear method to unsubscribe.

Service-related messages, project communications and responses to enquiries are not marketing communications.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

  • our website;
  • the services we provide;
  • the technologies we use;
  • our business practices; or
  • applicable legal requirements.

The updated version will be published on this page with a revised “Last updated” date.

Material changes may also be communicated through the website or directly to affected individuals where appropriate.

24. Contact Us

For questions, requests or concerns relating to this Privacy Policy or your personal data, contact:

Spotlightwebs
Operated by Liliia Otchyk
Website: https://spotlightwebs.com

Helpful third-party privacy/controls links (for your policy page)

Google Privacy Policy: https://policies.google.com/privacy
How Google uses cookies: https://policies.google.com/technologies/cookies
Google Ads Settings: https://adssettings.google.com/authenticated
Google Analytics opt-out add-on: https://tools.google.com/dlpage/gaoptout
Meta (Facebook) Privacy Policy: https://www.facebook.com/privacy/policy/
Meta help on interest-based ads: https://www.facebook.com/help/164968693837950
Meta ad preferences help: https://www.facebook.com/help/568137493302217
Your Online Choices (EU): https://www.youronlinechoices.eu/
Contact Form SPOTLIGHT
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.