Skip to main content
Webnua.
Privacy

Privacy policy

Written to be read. Every section has the formal wording and a plain-English line saying what it actually means for you.

Last updated 1 March 2026privacy@webnua.com
The short version
We collect what we need to reply to you and run your account — nothing speculative.
We never sell your data, and we do not share it for anyone else’s advertising.
Your clients’ enquiry data belongs to your practice. We only process it for you.
Ask us to delete anything and we will, usually within a few days and always within a month.
01

Who we are

Webnua provides websites, local search, reputation management and enquiry follow-up to professional practices in Ireland and the United Kingdom. For information you give us directly — an audit request, a message, a signed agreement — Webnua is the data controller.

For enquiries submitted by members of the public through a client’s website, that client’s practice is the controller and Webnua acts as processor on their instructions. Section 4 covers that in full.

02

What we collect

CategoryWhat that means
You gave usName, work email, phone, practice name and town — from an audit request, contact form or signed agreement.
Account recordsCorrespondence, approvals, reports issued, and billing records we are legally required to keep.
Site usagePages visited, referring source and approximate region, with IP addresses truncated. Only where you have accepted analytics cookies.
Publicly availableYour Google Business Profile, your existing website and your public review history, used to prepare a Visibility Audit.
In plain English
If you ask for an audit we look at what is already public about your firm. We do not buy lists and we do not scrape anything private.
03

Why we use it, and our lawful basis

PurposeLawful basis
Replying to your enquiry and preparing your auditLegitimate interests
Delivering the service you have signed up forContract
Invoicing, accounts and tax recordsLegal obligation
Understanding which pages of our own site are usefulConsent
Occasional email to existing clients about the serviceLegitimate interests
In plain English
Asking for an audit gets you one reply and one follow-up a week later. It does not put you on a mailing list, and there is nothing to unsubscribe from.
04

Your clients' data

When someone fills in a form on a website we run for your practice, that information belongs to your practice. We hold it so the enquiry reaches you, so follow-up can be sent where you have enabled it, and so it can be counted in your monthly report. We act only on your documented instructions under a Data Processing Agreement signed before go-live.

We do not use it for our own purposes. Not for analytics, not to train models, and never to market to your prospects or clients. Because people enquiring with an accountancy practice often volunteer financial detail unprompted, enquiry content is confidential by default and visible only to the people working your account.

In plain English
Your enquiries are yours. We are holding them on your behalf, and you can have them exported or deleted whenever you ask.
05

Who we share it with

A short list of processors who help us deliver the service: hosting and platform infrastructure, an email delivery provider, an SMS gateway where you have enabled text follow-up, Google for your Business Profile, and analytics. Each is bound by contract to process data only on our instructions. The current register, with regions, is published on our compliance page.

Beyond that, we share only where the law requires it, or with our accountants and legal advisers where genuinely necessary. We do not sell personal data, and we do not share it with data brokers or for third-party advertising.

In plain English
Nobody buys your details from us, because we do not sell them.
06

How long we keep it

Enquiries that never became clients24 months, then deleted
Client account recordsDuration of the agreement, plus 12 months
Invoices and accounting records6 years, as required by law
Your clients’ enquiry dataAs you instruct; 24 months by default
Backups30 days on a rolling cycle
In plain English
Deleted means deleted from live systems immediately, and out of backups within thirty days.
07

Your rights

Under the GDPR and the Irish Data Protection Act 2018 you can ask us to do any of the following. There is no charge, and we respond within one month.

Access
A copy of everything we hold about you.
Correction
Fix anything inaccurate or incomplete.
Erasure
Delete it, where we have no legal duty to keep it.
Portability
Receive it in a machine-readable format.
Objection
Object to processing based on legitimate interests.
Withdraw consent
At any time, without affecting what came before.

Email privacy@webnua.com. If a request concerns data we hold as processor for one of our clients, we will pass it to that practice and help them action it.

08

International transfers

Websites, enquiry data and backups are held in EU regions. Two services — Google Business Profile and analytics — involve transfer to the United States. Those transfers rely on Standard Contractual Clauses together with the EU–US Data Privacy Framework, and analytics is configured with IP truncation so that no directly identifying data is transmitted.

09

Contact and complaints

Privacy questions go to privacy@webnua.com and are answered by a person, not a ticket queue. If you are unhappy with how we have handled something, you are entitled to complain to the Data Protection Commission (dataprotection.ie) or, in the UK, the Information Commissioner’s Office (ico.org.uk) — though we would appreciate the chance to put it right first.

If we change this policy materially, we will say so on this page and email existing clients before it takes effect.