Privacy Policy.

1. Who We Are
   This website is operated by Yevhen Bondarenko, trading as Direct Light, a sole trader based in Ireland.

Contact: hey@directlight.ie
Address: Castletown, Co. Tipperary, Ireland

For the purposes of the General Data Protection Regulation (EU 2016/679) and the Irish Data Protection Acts 1988–2018, we are the data controller.

2. What Data We Collect
   This is an informational portfolio website. We do not operate user accounts, sell products, or run a mailing list.

We collect data through:

Contact form — When you submit our contact form, we collect your name, email address, company name, and your message. This data is sent directly to us by email. We do not store it in any external database or third-party system.
Hosting — This website is hosted on Framer. Framer may collect standard server log data (IP address, browser type, pages visited, timestamps) and set strictly necessary cookies for site functionality. No analytics or tracking cookies are used. See Framer's Privacy Policy for details.
3. How We Use Your Data
We use personal data only to:

Respond to enquiries you send us via the contact form
We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing
   Under GDPR, we process personal data on the following bases:

Consent — When you submit the contact form, you consent to the collection and processing of the data you provide.
Legitimate interest — Framer's server logs are processed to operate and secure the website.
5. Cookies
This website is hosted on Framer. No analytics or tracking cookies are used. Framer may set strictly necessary cookies for site functionality, which are exempt from consent requirements under the ePrivacy Directive.

5. Data Retention
Contact enquiries — We retain your messages in our email for as long as necessary to deal with your enquiry, then delete them.
Server logs — Retained by Framer in accordance with their privacy policy.

6. Your Rights
   Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
To exercise any of these rights, contact us at [your@email.com].

If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC):

Website: www.dataprotection.ie
Phone: +353 (0)1 765 0100 / 1800 437 737

8. Third-Party Services
Service Purpose Privacy Policy
Framer Website hosting framer.com/privacy

9. Data Transfers Outside the EEA
Framer may transfer server log data to servers outside the European Economic Area. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are in place. Refer to Framer's privacy policy for details. Contact form data remains in our email and is not transferred outside the EEA.

10. Security
    We take reasonable measures to protect personal data from unauthorised access, loss, or misuse. However, no internet transmission is completely secure.
    
    

11. Children
    This website is not directed at children under 16. We do not knowingly collect data from children.
    
    

12. Changes to This Policy
    We may update this policy from time to time. The updated version will be posted on this page with a revised date.