Privacy Policy

Last updated 15 August 2026

Lexfield Digital Systems ("Lexfield", "we", "us") respects your privacy. This policy explains, in plain English, what personal data this website collects, why, and what your rights are. We collect remarkably little, and we treat what we do collect the way we advise our clients to treat theirs.

Who we are

Lexfield Digital Systems is a private company registered in Ireland, based in Co. Cork. We provide consultancy for ISO/IEC 27001, ISO/IEC 42001, ISO 22301 and SOC 2 readiness. For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, Lexfield is the data controller for the personal data described in this policy.

What we collect, and why

We only collect personal data you choose to give us:

• Contact form: your name, email address and message, so we can respond to your enquiry.
• Cost calculator: your first name, work email, company website and your answers, so we can follow up on the indicative estimate shown to you.
• Checklists: your name and work email when you activate a checklist, along with your progress, so the checklist works for you and any follow-up conversation starts from where you actually are. This is explained at the point of activation.
• Client engagements: the business contact details and records needed to scope, agree and deliver consultancy work, processed under our contract with your organisation.

That is the whole list. We run no analytics or tracking on this website, we do not operate a mailing list, we do not send marketing emails and we never buy contact data. The legal bases for the processing above are the steps you ask us to take before entering a contract, the performance of that contract, and our legitimate interest in responding to people who contact us.

Cookies and local storage

This website sets no cookies, which is why you have not seen a cookie banner. If you activate a checklist, your ticked items are stored in your own browser's local storage on your device so your progress survives a page reload; you can remove it at any time by clearing your browser data for this site.

Who processes data on our behalf

Like almost every website, we rely on a small number of service providers: a hosting provider that serves the website, a form processing service that delivers form submissions to our mailbox, and a provider for our domain and email routing. Each acts only on our instructions, under contracts that protect your data. Some providers process data outside the European Economic Area; where they do, transfers are protected by recognised safeguards such as the European Commission's standard contractual clauses. Details of the specific providers we use are available on request through the contact form.

Sharing

We do not sell or rent personal data, full stop. We share it only with the processors above, with third parties you ask us to work with, or where the law requires it.

How long we keep it

Enquiries, calculator submissions and checklist activations are kept for up to 24 months after our last contact with you, then deleted. Records connected to a client engagement are kept for up to seven years where contractual, tax or accounting obligations require it.

Security

We apply the discipline we consult on: minimal collection in the first place, encryption in transit, access limited to the people who need it, and reputable providers underneath it all.

Your rights

Under the GDPR and the Data Protection Act 2018 you have the right to access a copy of your personal data, to have inaccurate data corrected, to have your data erased where we have no continuing reason to hold it, to restrict or object to processing, and to data portability in certain circumstances. We do not make any automated decisions about you.

To exercise any of these rights, use the contact form and we will respond promptly. If you believe we have not handled your data properly and we have been unable to resolve it with you, you have the right to complain to the Data Protection Commission at dataprotection.ie.

Changes to this policy

We will update this policy when our services or the law change, and the date at the top always tells you when that last happened.

Questions

Questions about this policy are welcome: reach us through the contact form.