Legal
Privacy notice
How we handle personal data on this website.
Last updated: 21 May 2026
What we collect
The on-site instant estimate tool runs in your browser. If you use a “share” link, your choices may appear in the page URL. We do not keep those values on a server until you contact us (for example via the form below).
Contact form
When you submit the contact form, we send a transactional email to our team via our email provider. That message may include: your name, email address, region, county, town or city (if you add it), and your message. The email includes your address as the reply-to so we can answer you. Our hosting provider (Cloudflare) can log the request, including a client IP address, for security and operations — see Server logs.
Cookie and consent
When you accept the cookie notice, we store a small flag in localStorage (key papslab_cookie_consent_v1) so the banner is not shown on every visit. This is not a third-party “tracking” cookie. You can remove it in your browser settings; the notice will reappear on your next visit.
Server logs
Cloudflare, which serves this site, keeps short-lived edge logs of HTTP requests. By default, stored fields typically include the IP address, user agent, path, and similar metadata, with retention on the order of a few days — check Cloudflare’s current documentation for exact periods and locations.
Subprocessors
We rely on the following for hosting and email. The links point to their data processing and customer DPA information.
| Service | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Cloudflare Pages | Hosting and edge delivery | Request metadata, including IP in logs | Global edge | Cloudflare DPA |
| Resend | Transactional email delivery | Form fields, reply-to | EU / US (see Resend) | Resend DPA |
What we do not collect
- No third-party web analytics and no advertising cookies.
- No social pixels, remarketing beacons, or similar marketing trackers.
- No browser fingerprinting for profiling.
- Fonts and static assets are self-hosted; we do not load fonts or third-party marketing scripts for normal browsing.
Your rights (GDPR)
Under the General Data Protection Regulation and Irish data protection law, you may have the right to access, rectify, or erase personal data we process about you, to restrict or object to certain processing, and in some cases to receive your data in a portable form. You can lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie. If you contact us from outside Ireland, UK GDPR may also apply to how we handle your request; we still respond in line with applicable law. For routine requests, email hello@papslab.com.
Retention
Messages sent via the contact form are delivered to our mailbox and may be kept for as long as we need to respond and run the business, unless you ask us to remove them. Edge logs on Cloudflare are short-lived, as described above. You can request deletion of correspondence by writing to the same address.
Changes to this policy
We update this when our stack or practices change. The last change date is shown at the top of this page.
Contact
Questions about this notice: hello@papslab.com