Longboard Digital

Last updated: 7 November 2026

This policy explains what personal data Longboard Digital collects, why we use it, how long we keep it and what your rights are. We’ve tried to keep it short and in plain English. If anything is unclear, email us at talkto@longboard.digital.

Who we are

Longboard Digital is a local marketing agency based in Dublin, Ireland, run by Heloisa Castro and Rui Antunes. We are the data controller for the personal data described in this policy.

• Email: talkto@longboard.digital
• Phone: +353 85 803 7566

We are a small business and are not required to appoint a Data Protection Officer. Any privacy question goes to the email above.

What data we collect and why

1. When you contact us. If you use our contact form, email, phone or WhatsApp, we collect what you send us: usually your name, business name, area or Google Maps link, Instagram handle, email, phone number and your message. We use it to reply, prepare your free comparison and, if you go ahead, a proposal. Legal basis: taking steps at your request before entering into a contract (GDPR Article 6(1)(b)) and our legitimate interest in answering enquiries (Article 6(1)(f)).

2. When you are our client. We keep the contact and billing details we need to deliver the service, invoice you and meet our tax and accounting obligations. To manage your Google profile, Instagram or ads, you give us access as a manager; the accounts stay in your name. Legal basis: performing our contract with you (Article 6(1)(b)) and legal obligations (Article 6(1)(c)).

3. When we contact your business first. We sometimes write to local businesses we think we can help, using contact details the business publishes itself, such as its website or Google profile. We only write to business addresses, about your business, and every message tells you how to stop hearing from us. We keep only your name, role, business name, business email and business phone, plus where we found them and what we sent. Legal basis: our legitimate interest in offering our services to businesses (Article 6(1)(f)), in line with the Irish ePrivacy Regulations (S.I. 336/2011). If you ask us to stop, we stop for good.

4. When you visit our website. Our website and its service providers collect technical data such as your IP address, browser, device and the pages you visit. Some of this is needed for the site to work and stay secure. With your consent, we also use analytics and marketing tools to understand how the site is used. See “Cookies” below.

5. Photos and videos we take. When we shoot at a client’s business, people may appear in photos or videos. We agree with the client how these are used, and we remove an image if someone in it asks us to.

Who we share it with

We never sell your data. We share it only with the services we use to run the business, and only what each one needs:

• Our website host and email providers, to run the site and send and receive email
• Google (Analytics, Tag Manager, Business Profile and Ads), Meta (Instagram, Facebook and WhatsApp) and Mailchimp, when you use those services with us or consent to their cookies
• Our accountant and the Irish Revenue Commissioners, for invoices and tax

Some of these providers are based outside the European Economic Area, mainly in the United States. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

How long we keep it

• Enquiries that don’t become work: up to 12 months after our last contact
• Businesses we contacted that did not reply: deleted within 12 months
• Client records and invoices: 6 years after the end of the year they relate to, as Irish tax law requires
• “Do not contact” requests: we keep only your email address on a suppression list, so we can keep respecting your request

Cookies

Cookies are small files your browser stores. Strictly necessary cookies keep the site working and secure and don’t need consent. Analytics and marketing cookies, such as Google Analytics, Google Tag Manager and the Meta Pixel, are only used with your consent, which you can give or withdraw at any time through the cookie settings on our site or in your browser. Embedded content, such as videos from Vimeo or YouTube and our Instagram feed, may set its own cookies when it loads.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the data we hold about you
• correct anything that’s wrong
• delete your data
• restrict or object to how we use it, including stopping all marketing at any time
• send your data to you or another company in a common format
• withdraw any consent you gave, without affecting what happened before

Email talkto@longboard.digital. We reply within one month. If you’re not happy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie, although we’d appreciate the chance to sort it out first.

Security

We keep data in secure, password-protected accounts with two-step verification where available, and limit access to the two of us and the providers listed above.

Changes to this policy

If we change this policy, we’ll update it here and change the date at the top.