Legal
Privacy notice
How PapsLab handles personal data on this website.
Last updated: 2 Oct 2026
Who is responsible
PapsLab is the controller for personal data sent through this website. It is a one-person practice. Privacy requests go to [email protected]. A postal address is not published on this site.
Why the data is used
A message is used to reply and, if you go ahead, to prepare the job you asked about. That is steps toward a contract, and a legitimate interest in answering a message you chose to send. Edge logs are kept so the site can run and stay secure, which is also a legitimate interest. There is no marketing list and personal data is not sold.
What is collected
The site has no analytics, no advertising pixels, and no on-site estimate tool. Personal data is collected only when you send a message or when standard hosting/security logs are created.
Contact form
When you submit the contact form, PapsLab sends one transactional email to [email protected] via the email provider listed below. That message includes your name, email address, the topic you picked and the message itself. Your address is the reply-to, so the reply can go back to you. Cloudflare, which hosts the site, can log the request, including a client IP address, for security and operations — see Server logs. If the anti-spam check is shown, Cloudflare Turnstile also processes browser and request signals to verify the submission is legitimate.
Server logs
Cloudflare, which serves this site, keeps short-lived edge logs of HTTP requests. By default, stored fields typically include the IP address, user agent, path, and similar metadata, with retention on the order of a few days — check Cloudflare’s current documentation for exact periods and locations.
Subprocessors
PapsLab relies on the following for hosting and email. The links point to their data processing and customer DPA information.
| Service | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Cloudflare Pages | Hosting and edge delivery | Request metadata, including IP in logs | Global edge | Cloudflare DPA |
| Cloudflare Turnstile | Anti-spam verification on the contact form | Browser/request signals needed to verify the challenge | Global edge | Cloudflare DPA |
| Resend | Transactional email delivery | Form fields, reply-to | EU / US (see Resend) | Resend DPA |
What is not collected
- No third-party web analytics and no advertising cookies.
- No social pixels, remarketing beacons, or similar marketing trackers.
- No browser fingerprinting for profiling.
- Fonts and static assets are self-hosted; no fonts or third-party marketing scripts are loaded for normal browsing. The contact form may load Cloudflare Turnstile only for anti-spam verification.
Your rights (GDPR)
Under the General Data Protection Regulation and Irish data protection law, you may have the right to access, rectify, or erase personal data PapsLab processes about you, to restrict or object to certain processing, and in some cases to receive your data in a portable form. You can lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie. If you get in touch from outside Ireland, UK GDPR may also apply to how your request is handled; requests are still answered in line with applicable law. For routine requests, email [email protected].
Retention
Messages sent via the contact form are delivered to [email protected] and may be kept for as long as needed to respond and do the work, unless you ask for them to be removed. Edge logs on Cloudflare are short-lived, as described above. You can request deletion of correspondence by writing to the same address.
Changes to this policy
This notice is updated when the stack or practices change. The last change date is shown at the top of this page.
Contact
Questions about this notice: [email protected]