LIMITED | IRELAND
Legal
Privacy Policy
Last updated 5 October 2026
This notice explains what personal data Xerxes Limited collects through this website, why we collect it, how long we keep it, and the rights you have over it. It covers this website only. If we process your data under a separate contract as a service provider, that agreement governs instead.
Data controller: Xerxes Limited, a company registered in Ireland under number 681600, with its registered office at 77 Camden Street Lower, Dublin 2, D02 XE80.
Contact for data protection: mail@xerxes.ie or +353 1 969 2222.
1. What we collect and why
We only collect personal data that you give us directly. We do not buy contact lists, and we do not build profiles of visitors.
| What | When | Why | Lawful basis |
|---|---|---|---|
| Name, email address, phone number, and whatever you write in the message field | When you submit the contact form | To answer your enquiry and, if it leads somewhere, to scope and quote the work | Steps taken at your request prior to entering a contract, and our legitimate interest in responding to enquiries |
| Name, email address, phone number, CV or supporting documents | When you apply for a role | To assess your application | Steps taken at your request prior to entering a contract |
| IP address, browser type, pages visited, referring page | Automatically, in standard server logs | To keep the site running, diagnose faults and detect abuse | Our legitimate interest in operating a secure website |
We do not ask for special category data, and we would ask you not to include health, financial or other sensitive details in a contact message. If you send us a CV, please include only what is relevant to the role.
2. How long we keep it
- Enquiries that do not become projects: 24 months from your last contact with us, then deleted.
- Enquiries that become projects: for the life of the engagement and 7 years afterwards, which is the period Irish company and tax law requires us to retain business records.
- Job applications: 12 months from the close of the role, unless you ask us to keep your details on file for longer.
- Server logs: typically 30 days, longer only where we are investigating a specific security incident.
3. Who else sees your data
We do not sell your personal data, and we do not share it for anyone else's marketing. We do use a small number of service providers who process data on our behalf under written agreements:
- Our hosting provider, which stores this website and its server logs.
- Our email provider, through which enquiries reach us.
- Google Fonts, which serves the typefaces on this site. Your browser requests font files from Google's servers, and that request discloses your IP address to Google. If you would rather it did not, a content blocker will stop it, and the site will fall back to a system font.
We may also disclose data where we are legally required to, for example in response to a valid court order or a lawful request from a regulator.
4. Transfers outside the EEA
Our hosting and email are provided within the European Economic Area. Where a provider processes data outside the EEA, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision covering that country. You can ask us which providers apply and on what basis.
5. Cookies
This website does not set advertising or analytics cookies and does not track you across other sites. If we add analytics in future, this notice will be updated first and you will be asked for consent before any non-essential cookie is set.
6. Your rights
Under the General Data Protection Regulation and the Data Protection Act 2018, you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where we have no overriding reason to keep it;
- object to, or ask us to restrict, how we use it;
- receive data you gave us in a portable format;
- withdraw consent at any time, where consent is what we relied on.
Email mail@xerxes.ie and we will respond within one month. There is no charge for a reasonable request.
7. Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain directly to the Irish supervisory authority:
Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
www.dataprotection.ie
8. Security
This site is served over HTTPS. Access to enquiry data is limited to the people who need it to respond to you. No system is perfect, and we would rather say that plainly than claim otherwise.
9. Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. Material changes affecting people already on our list will be notified by email.