Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

OS Informatics Limited T/A rConfig
Ireland

If you have any questions about this policy or how your data is handled, you can contact us via the "Contact Us" form on the Website.

2. Information We Collect

2.1 Personal Data You Provide

We only collect personal data when you actively choose to provide it. This includes:

• Information you enter into our Contact Us form (e.g., name, email address, message).
• Any optional details you may voluntarily share with us during an enquiry.

We do not ask you for any other personal data, and we never require an account to browse the Website.

2.2 Non-Personal Data

When you browse the Website, we automatically collect certain non-personal information on an aggregated basis, including:

• IP address
• Browser type and version
• Operating system
• Pages viewed and time spent on the Website
• Date and time of visits
• Referring website (if applicable)

This information helps us maintain and improve the Website.

2.3 Analytics Data (Only With Your Consent)

If you accept analytics cookies on our banner, our analytics providers assign your browser a pseudonymous identifier and collect how you use the Website. Under GDPR that identifier is personal data, even though it does not contain your name, so we set it out here in full:

• A pseudonymous visitor and session identifier, stored in a cookie and in your browser's local storage
• Pages viewed, clicks, scroll depth, and time on page
• Browser, operating system, device type, screen size, and approximate city-level location derived from your IP address
• The referring site or search engine
• JavaScript errors your browser encounters, including the page address and a technical stack trace
• Where session replay is enabled, a reconstruction of your visit showing mouse movement, scrolling, and clicks. Text you type into form fields is masked and is not captured.

We do not use this data to build a marketing profile of you, and we do not attempt to link the analytics identifier to your name or email address.

None of this is collected until you accept, and you can withdraw at any time. Our Cookie Policy lists every provider, cookie, and retention period.

3. Legal Basis for Processing

Depending on the context, we process your personal data under one or more of the following legal bases:

• Legitimate Interests, To respond to your enquiry, operate the Website, and improve our services.
• Consent, If you choose to sign up for updates or provide optional information.
• Consent, For analytics, session replay, and any other non-essential cookies. This is required by the ePrivacy rules implemented in Ireland by S.I. No. 336/2011, and we do not rely on legitimate interests for analytics.
• Legal Obligation, Where we must retain or disclose data to comply with the law.

We do not use personal data submitted via the contact form for marketing unless you explicitly opt in.

4. How We Use Your Information

We use the personal data you provide for:

• Responding to your enquiry or request
• Following up on support or product questions
• Improving the Website and troubleshooting issues
• Any purpose you explicitly consent to

We do not sell, rent, or trade your personal data to any third parties.

5. Disclosure of Your Information

We may share your data only in the following situations:

• With trusted service providers who support our Website hosting or security (bound by GDPR-compliant contracts)
• Where required by law, regulation, or legal process
• To protect our legal rights, systems, and users

We do not disclose personal data for marketing or advertising.

Non-personal, aggregated information may be shared for statistical or analytical purposes, but it cannot identify you.

5.1 Processors We Use

The following providers process personal data on our behalf, under data processing terms that require GDPR compliance:

The analytics providers in this list run only after you accept cookies. See our Cookie Policy for the cookies each one sets.

5.2 International Transfers

Contact form submissions and product analytics are held in the European Union. PostHog, our product analytics provider, is configured to use its European Union region, and its requests are routed through our own domain.

Google and Microsoft process analytics data in the United States. Those transfers rely on the EU-US Data Privacy Framework, together with the standard contractual clauses in each provider's data processing terms. You can avoid these transfers entirely by declining analytics cookies.

6. IP Addresses

We may log your IP address for:

• Security monitoring
• Diagnosing server issues
• Understanding general usage patterns on the Website

IP addresses are not used to identify individuals unless required by law or necessary to protect the Website.

7. Cookies

The Website uses cookies to provide essential functionality and to analyse site traffic.

Non-essential cookies, including all analytics and session replay, are placed only after you accept them on our cookie banner. Until then, only strictly necessary cookies are used.

You can withdraw or change your choice at any time by selecting Cookie preferences in the footer of any page, which stops analytics collection immediately and brings the banner back. Clearing cookies in your browser has the same effect. Disabling essential cookies may affect the functionality of the Website.

Our Cookie Policy lists every cookie we set, the provider behind it, and how long it lasts.

8. Data Security

We take appropriate technical and organisational measures to safeguard your data, including:

• Secure servers and encrypted transport (HTTPS)
• Access controls and authentication
• Regular security reviews and audits
• Staff awareness and internal data protection procedures

9. Data Retention

We only keep your personal data for as long as necessary to fulfil the purpose for which it was provided.

Examples:

• Contact form enquiries: retained only until your query is resolved, plus a short period for internal record-keeping.
• Server logs: retained for security and diagnostic purposes for a limited time.

After retention periods expire, data is deleted or anonymised.

10. Your Data Protection Rights

Under GDPR, you have the following rights:

• Right of Access, Request a copy of your personal data.
• Right to Rectification, Correct inaccurate or incomplete data.
• Right to Erasure, Request deletion of your personal data.
• Right to Restriction, Limit processing in certain circumstances.
• Right to Object, Object to processing based on legitimate interests.
• Right to Data Portability, Request your data in a reusable format.
• Right to Withdraw Consent, At any time, where processing is based on consent.
• Right to Lodge a Complaint, With a supervisory authority, in our case the Irish Data Protection Commission.

To exercise these rights, contact us via the Website's "Contact Us" form. We will respond within one month, as required by GDPR.

All requests are free of charge unless manifestly unfounded or excessive.

If you are unhappy with how we have handled your personal data, you can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, at dataprotection.ie. You may also complain to the supervisory authority where you live or work.

10.1 Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal effects for you.

11. External Links

The Website may contain links to third-party websites. We are not responsible for their privacy practices or content. Please review their Privacy Policies separately.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in technology, law, or our internal practices. The "Last Updated" date will always indicate the current version.

13. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal data, please reach out via the Contact Us form on our Website.

14. Additional Documents

For more information on how we handle your data, please refer to the following documents:

• Data Processing Agreement (DPA)