Privacy Policy

Last updated: 10 September 2026

1. Who is responsible for your information

Smartceutix Technologies Ltd operates Smartceutix Studios and Smartceutix Labs and is the controller of personal data collected through this website and our initial business enquiries. Our contact address is North Point House, Suite 3D, New Mallow Road, Cork, T23 AT2P, Ireland. For privacy questions or to exercise your rights, email info@smartceutix.com.

This notice covers our informational website and initial communications. A commissioned service or a separately released Labs product may need additional privacy information. Where we process personal data on a client's instructions, the client determines the purposes of that processing and a separate data-processing agreement applies.

2. Information we receive

• Enquiries: your name, email address, message and other information you choose to send, together with our correspondence.
• Technical information: hosting and delivery services receive information needed to handle a request, such as an IP address, request time, requested resource, browser information and error or security events.
• Website preferences: your cookie choices, the notice version and the time of your choice, plus a session flag used to avoid replaying the introductory animation.

The contact form identifies required fields. Without your email address and sufficient information about your enquiry, we may be unable to reply. Please do not include passwords, payment details, health information or other sensitive or confidential material in an initial message. We do not request these details through the contact form.

3. Why we process information and our legal bases

• Responding to a request for our services: where you ask us to take steps before entering into a contract with you, we process the necessary information under Article 6(1)(b) GDPR.
• Other business communications: we rely on our legitimate interests in responding to enquiries and managing business relationships, under Article 6(1)(f), after considering the impact on the person concerned. This includes communications with someone acting for an organisation.
• Operating and securing the website: we rely on our legitimate interests in delivering a reliable website, investigating faults and preventing abuse. Device storage that requires consent is handled separately through the cookie controls.
• Legal obligations and claims: we retain or disclose information where required by applicable law, under Article 6(1)(c), or where necessary for our legitimate interest in establishing, exercising or defending legal claims.

Submitting an enquiry does not subscribe you to marketing. This website does not offer newsletter registration or advertising tracking in this release. We do not use enquiry information for decisions based solely on automated processing that produce legal or similarly significant effects.

4. Analytics and cookies

Optional analytics are disabled in this release. If analytics are introduced, we will update the notice with the provider, information collected, retention and transfer arrangements before enabling them. Where consent is required, analytics will load only after an affirmative choice. Refusing optional cookies does not prevent you from reading the site or contacting us.

Our Cookie Policy explains browser storage and how to change your choice. An IP address may be processed to deliver a web page even when analytics are off; “no analytics” does not mean that no technical information is processed.

5. Who may receive information

Access to enquiries is limited to people authorised to handle them for Smartceutix. Service-provider categories include website hosting and form processing, business email and IT support. The public website uses Webflow for hosting and its configured native forms. Our email service handles messages sent to our published email address and form notifications when enabled.

The current design requests font styles and font files from Google Fonts. Loading these resources sends technical request information, including an IP address, to Google. We use them to display the site's typography; they are separate from Google Analytics. See Google Fonts privacy information.

Customer-relationship tools and connected automations may also handle enquiries and follow-up as part of our business communication workflow. They must be limited to the information needed for that purpose and included in our provider and transfer review.

We may also share relevant information with professional advisers, courts, regulators or law-enforcement bodies where legally required or necessary to protect legitimate rights. We do not sell enquiry information. Providers acting on our instructions must be subject to appropriate contractual and security requirements.

6. International processing

Some service providers operate internationally, so information may be processed outside the European Economic Area. Where a restricted transfer occurs, we must use an applicable adequacy decision or appropriate safeguards, such as European Commission Standard Contractual Clauses, together with supplementary measures where needed. These safeguards do not remove all international-transfer risks. Contact us for information about the arrangements applicable to your data and how to obtain a copy of relevant safeguards, subject to necessary redactions.

7. How long information is kept

Enquiry correspondence is kept while the enquiry is active and subsequently only while reasonably needed for relevant follow-up, evidence of the communication or a legal obligation. In deciding when to delete it, we consider whether the enquiry has concluded, whether further contact is reasonably expected, whether a client relationship has begun and whether a specific dispute or legal requirement justifies keeping a record. An enquiry that leads to a contract may become part of that contract's records.

Technical records are kept for the operational, security and troubleshooting period applicable to the relevant service, not indefinitely for an unrelated purpose. Backup copies follow the provider's backup cycle and should not be restored to active use after a valid deletion without applying that deletion again. Our cookie choice expires after 180 days; the introductory-animation flag lasts for the browser tab's session. We can explain the retention criteria applicable to a particular enquiry on request.

8. Your rights

Subject to the conditions in the GDPR, you can request access to your information, correction, erasure or restriction of processing. You may have a right to receive information you provided in a portable format where processing is automated and based on consent or contract.

You can object, on grounds relating to your particular situation, to processing based on legitimate interests. If processing is based on consent, you can withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal. If we ever send direct marketing, you may object to it at any time.

Email info@smartceutix.com with your request. We may request proportionate information to confirm your identity. We normally respond within one month. If a permitted extension is needed because a request is complex or numerous, we will explain it within that first month. Requests are normally free of charge, subject to the GDPR's exceptions.

You may complain to the Irish Data Protection Commission or another competent supervisory authority, including in the country where you live or work. You do not have to contact us first.

9. Security, children and external websites

We use appropriate technical and organisational measures proportionate to the information and risks. No website, email or transmission method can be guaranteed completely secure. Contact us if you believe information has been exposed or sent in error.

This is a business-services website, not a service directed at children. Please contact us if you believe a child has provided information that should be removed. External links take you to independent websites whose privacy practices we do not control.

10. Changes

We update this notice when our practices or relevant requirements change. The date above identifies the version. Material new purposes or optional tracking will be explained before they are introduced, with a new consent request where required.