1. Who is responsible for your data?
Qila Compliance is the controller for personal data collected through this website and for direct business enquiries made through the contact details published on it.
Contact: hassan@qilacompliance.ie · +353 87 696 6990. Audit enquiries may also be sent to audit@qilacompliance.ie.
2. What information do we collect?
If you use a website enquiry form, we may collect your name, work email address, firm or organisation, telephone number if provided, practice area, firm size, the content of your enquiry and the page from which the enquiry was sent.
If you contact us directly by email, telephone or LinkedIn, we process the information you choose to provide through that channel.
Our hosting provider may also process ordinary technical information generated when a website is accessed, such as IP address, browser information, requested page and date or time, for hosting, security and operational purposes.
3. Why do we use personal data?
We use enquiry information to respond to you, arrange calls, assess whether Qila can help, prepare requested proposals or next steps and manage our business relationship.
Where your enquiry concerns services you are considering purchasing, processing may be necessary to take steps at your request before entering into a contract. We also rely on our legitimate interests in responding to professional enquiries, operating and securing the website, preventing misuse and maintaining appropriate business records. Where a legal obligation applies, we process information as necessary to meet that obligation.
We do not use website enquiry information for automated decision-making or profiling.
4. Sensitive, privileged and client information
Please do not submit special-category personal data, criminal-offence data, privileged information, client-identifying information or confidential case material through the public website. The initial review is designed so that this material is not required.
If sensitive or confidential material is sent to us inadvertently, we will limit access and handle it in a manner appropriate to the circumstances, including deletion or movement to an agreed secure channel where appropriate.
5. Service providers and recipients
The website and domain email are hosted through one.com. one.com acts as a processor for website and email data processed on our behalf under its data-processing terms. The website code does not write form submissions to an application database; completed forms are transmitted as email.
This site currently loads web fonts using the Google Fonts service. When your browser requests the font stylesheet or font files, Google receives the technical information necessary to serve that request, which can include an IP address and browser or device information. Qila does not use Google Analytics, advertising pixels or conversion tracking on this site.
We may disclose personal data where required by law or where necessary to establish, exercise or defend legal claims.
6. International transfers
Our hosting arrangement is intended to keep hosting and email processing within the European Union. Some third-party website resources, such as Google Fonts, may involve processing by providers operating internationally. Where international transfers are relevant, the applicable safeguards used by the provider govern that processing.
7. How long do we keep enquiry information?
As a working retention rule, enquiries that do not lead to an engagement are retained for up to 12 months after the last substantive contact, unless a shorter period is appropriate or a longer period is reasonably required for legal, dispute or record-keeping purposes. If an engagement follows, relevant information becomes part of the business or client record and is retained under the terms and retention rules applicable to that engagement.
Technical server logs are retained according to the operational and security settings of the hosting provider.
8. Your data protection rights
Depending on the circumstances, you may have rights to access your personal data, correct inaccurate information, request erasure, restrict processing, object to processing and receive certain information in a portable format. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
To exercise a right, contact hassan@qilacompliance.ie. We may need to verify your identity before acting on a request.
You also have the right to complain to the Irish Data Protection Commission if you believe your personal data has been handled unlawfully.
9. Security
We use proportionate technical and organisational measures intended to protect website and enquiry data, including HTTPS, restricted data collection, server-side form validation and a no-file-upload design. More information is available on our Security & Confidentiality page.
10. Changes to this notice
We may update this notice when our website, suppliers, services or legal obligations change. The date above shows the latest revision.