Privacy Policy

Last updated: 15 October 2026 · Plain English, no small print.

We're an IT and cybersecurity company, so we take your data as seriously as our clients' systems. This policy explains what personal data we collect through our website and when you deal with us, why we use it, who we share it with, how long we keep it, and your rights.

1. Who we are

CastCom is the trading name of MCPCREPAIRS Ltd., trading as Castleknock Computers, a company registered in Ireland (CRO 397296) with its registered office at 70 Belfry Hall, Citywest, Dublin 24, D24 XD34.

We are the data controller for the personal data described in this policy. We have not appointed a Data Protection Officer, as we are not required to, but you can contact us about anything in this policy at info@castcom.ie or on 01 820 0739.

2. What this policy covers

This policy covers people who visit our website, contact us, use our free tools, book a call, or are a contact at a business we work with or might work with.

It does not cover data inside our clients' systems. When we manage a client's computers, email or backups, we act as a data processor on the client's instructions, under a written data processing agreement with that client. If your data is held by one of our clients, please contact them first.

3. What we collect and why

When	What we collect	Why	Legal basis
You contact us or fill in a form (contact, quote, discovery questionnaire)	Name, company, role, email, phone, number of computers, details of your IT setup, and your message	To reply, understand your needs and prepare a quote	Steps before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f))
You book a call or Security Health Check	Name, email, phone, company and the time you choose	To arrange and hold the meeting or assessment	Steps before a contract (Art. 6(1)(b))
You use our free tools (cyber risk quiz, email spoofing check)	Your answers or the domain you check. If you ask for a report: your email address	To show your result, email your report and follow up about it	Your request (Art. 6(1)(b)) and legitimate interest in following up (Art. 6(1)(f)). Answers aren't stored unless you ask for the report.
You use live chat	Your messages, any details you give us, and technical data such as the pages you visited and your approximate location	To answer your question	Legitimate interest (Art. 6(1)(f)). Chat cookies are only set with your consent (see our Cookie Policy).
You refer a business to us	Your details, plus the name and contact details of the business you refer	To contact the referred business and pay any referral reward	Legitimate interest (Art. 6(1)(f)). You confirm the person knows we'll be in touch.
You browse our website	Pages visited, device and browser type, approximate location, and how you arrived	To understand how the site is used and improve it (Google Analytics)	Your consent (Art. 6(1)(a)), given through our cookie banner
You or your business become a client	Contact details of your staff, support requests, billing details and contract records	To deliver our services, support you, invoice and keep proper records	Performing our contract (Art. 6(1)(b)) and legal obligations such as tax and company law (Art. 6(1)(c))

We don't ask for sensitive ("special category") data such as health information. Please don't send it to us through our forms or chat.

4. Marketing emails

We send occasional emails with security tips, guides and news about our services. We only send them:

if you've asked to receive them, for example by ticking a box or downloading a guide; or
to existing clients, about services similar to those they already use.

Every email has an unsubscribe link, and you can also just reply "stop". We'll never sell or rent your details to anyone.

We only share personal data with trusted providers who help us run the business. Each one is bound by a contract to protect it and to use it only on our instructions:

Zoho: our CRM, forms, bookings, email campaigns and accounts. Our Zoho account is hosted in the EU.
Microsoft: email and documents (Microsoft 365).
Google: website analytics (Google Analytics), only if you consent.
Cloudflare: website hosting and security.
Our team and contractors: some of our team work remotely from Poland and Ukraine under written contracts with confidentiality and data-protection terms.
Professional advisers such as our accountants, solicitors and insurers, where needed.
Authorities, such as Revenue, An Garda Síochána or a court, where the law requires it.

If our business is ever sold or restructured, data may pass to the new owner under the same protections.

6. Transfers outside the EU

We keep data within the European Economic Area (EEA) where we can. Where data is accessed from or sent outside the EEA, we make sure it stays protected:

Ukraine: a member of our team works from Ukraine. Access is protected by the European Commission's Standard Contractual Clauses in their contract, and by our security controls (company-managed device, encryption, multi-factor sign-in).
Google (Analytics) and Cloudflare: data may be processed in the US under the EU-US Data Privacy Framework and Standard Contractual Clauses.
Other providers: where a provider may process data outside the EEA, we rely on an adequacy decision or Standard Contractual Clauses.

7. How long we keep it

Data	How long
Enquiries, quotes, quiz and spoofing-check reports, referrals, for people who don't become clients	12 months after our last contact, then deleted
Client contract, billing and accounting records	For the contract, plus 6 years to meet tax and company-law requirements
Support tickets and chat transcripts	For the contract, plus 12 months after it ends
Marketing email list	Until you unsubscribe
Website analytics	14 months in Google Analytics

8. Your rights

Under data protection law you have the right to:

Access: get a copy of the data we hold about you
Correct anything that's wrong or incomplete
Delete your data where we no longer have a reason to keep it
Restrict how we use it while a concern is looked into
Object to us using it based on legitimate interests. You can always object to marketing, and we'll stop.
Portability: receive data you gave us in a common format
Withdraw consent at any time, for example to analytics cookies, without affecting what happened before

To use any of these rights, email info@castcom.ie. It's free, and we'll reply within one month. We may ask you to confirm your identity first.

If you're unhappy with how we've handled your data, please tell us so we can put it right. You also have the right to complain to the Data Protection Commission: www.dataprotection.ie.

9. How we protect it

We use the same protections we sell: multi-factor sign-in on every account, encrypted and centrally managed devices, endpoint protection, email filtering, access only for staff who need it, and regular backups. If a breach ever puts your rights at risk, we'll notify the Data Protection Commission within 72 hours and tell you where the law requires it.

10. Other things you should know

No automated decisions. Our quiz gives you an automatic score, but it's for your information only. We don't make decisions about you based solely on automated processing.
Business audience. Our services are for businesses. Our website isn't aimed at children, and we don't knowingly collect their data.
Cookies. See our Cookie Policy for details of the cookies we use and how to control them.
Changes. We'll update this policy when how we use data changes, and show the date at the top.

11. Contact us

MCPCREPAIRS Ltd. T/A Castleknock Computers (CastCom)
70 Belfry Hall, Citywest, Dublin 24, D24 XD34
Email: info@castcom.ie · Phone: 01 820 0739