Privacy Policy

Who we are

Done Right (DoneRight.ie) is the trading name of Monterra, SL, a company registered in Andorra at Carrer de l'Aigueta 19, 1r Pis, 3a Porta, Andorra la Vella AD500, Andorra. The business is run by Niall Doherty from Slieverue, Co. Kilkenny, and works with small businesses across the south of Ireland.

Monterra, SL is the data controller for everything described on this page. If you want to ask about any of it, or you want your information deleted, email niall@doneright.ie or ring 087 4843489. It comes to Niall either way.

What we collect

• The enquiry form. Your name, email address, phone or WhatsApp number, and whatever you write in the message box. Those four fields are the whole form — there are no hidden ones.
• If you ring, email or WhatsApp us. Your number or email address, and whatever is in the conversation.
• Analytics. Which pages you looked at, roughly where in the world you are, your device and browser, how you found the site, and what you clicked. This is Google Analytics, described in its own section below.
• Server logs. Our host records standard web request logs, including IP addresses, to serve the site and to block attacks on it.

We do not ask for and do not want sensitive information — health, finances, anything about your identity. Please do not put anything like that in the message box.

Why we collect it, and on what basis

• To answer your enquiry and quote for the work. That is the entire point of the form, and the basis is that you asked us to — steps taken at your request before a contract, Article 6(1)(b).
• To see which pages are doing their job, and to keep the site up. Our legitimate interests, Article 6(1)(f): running a website we can improve and defend. You can object to this — see your rights, below.
• To keep our own books. Once you become a customer, invoices and records are kept because tax law says to.

We do not send marketing email off the back of an enquiry. If we ever run a mailing list you will have to ask to be on it, and every message will have a one-click way off.

Cookies and analytics

This site runs Google Analytics 4, which sets cookies in your browser (_ga and _ga_*) so that a second visit can be told from a first one. They last up to two years.

There is no cookie banner on this site, which means those cookies are set when you arrive rather than after you have agreed to them. We would rather say that straight out than pretend otherwise. If you would prefer not to be counted, any of these works:

• Install Google’s Analytics opt-out browser add-on, which switches it off everywhere, not just here.
• Block or clear cookies for this site in your browser settings.
• Use a private or incognito window, which throws them away when you close it.

What we do not do with it: Google Signals, ads personalisation and data sharing with Google’s advertising products are all switched off on our property, and there is no advertising or retargeting pixel anywhere on this site. We use analytics to count visits and see which pages lead to enquiries. That is all it is for.

Videos. The home and portfolio pages show our latest YouTube videos. Until you press play, nothing loads from YouTube: the pictures are served from this site. When you do press play, the video plays in YouTube’s privacy-enhanced player (youtube-nocookie.com), and from then on YouTube, which is Google, handles that playback under its own privacy policy and may store information in your browser to do it.

Who else sees your information

Nobody buys it, because we do not sell it, rent it, swap it or hand it to anyone for their own marketing. It does pass through the companies whose tools we use to run the business, each of which acts on our instructions under a contract:

• HighLevel (United States) — our CRM. Enquiries from the form land here, and this is where we keep track of who we are talking to.
• Cloudflare — hosting and content delivery for the site itself, and the source of the server logs above.
• Google — Google Analytics, and YouTube if you play one of our videos, both as described above.
• Our email and phone providers — they carry the conversation, the same way the postman carries a letter.

We would also hand something over if the law required it, which has never happened.

Where your information goes

Monterra, SL is registered in Andorra. Andorra holds an adequacy decision from the European Commission — granted in 2010 and reconfirmed by the Commission’s review in January 2024 — which means personal data can move from the EU to us with no extra safeguard needed.

HighLevel is in the United States. That transfer rests on its data processing agreement with us, which incorporates the European Commission’s standard contractual clauses, and on its self-certification under the EU–US Data Privacy Framework. Cloudflare serves this site from whichever of its locations is nearest you — for an Irish visitor, Dublin — under equivalent terms.

How long we keep it

• An enquiry that does not turn into work: 24 months, then it is deleted.
• Customer records: seven years after the last invoice, because that is what tax and accounting rules require.
• Analytics: 14 months, which is the retention we have set in GA4.
• Server logs: our host’s own short retention, measured in days.

Ask us to delete you sooner and we will, except where the tax rules above apply.

Your rights

Under the GDPR you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• stop or restrict what we are doing with it;
• hand it to you, or to someone else, in a portable format;
• stop processing it where we are relying on legitimate interests — which covers the analytics.

Email niall@doneright.ie. It is free, we will come back to you within a month, and if we cannot tell it is really you we will ask before handing anything over.

If you want to complain

Tell us first — most of what goes wrong is something we can fix the same day. If that does not settle it, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28. Because Monterra, SL is registered in Andorra, the Andorran Data Protection Agency is open to you as well.

Changes to this page

When what we do changes, this page changes, and the date at the top changes with it. We do not quietly rewrite it.