Privacy Policy
How we collect, use and protect personal data, and your rights.
Full text
Last updated 6 November 2026
1. Who we are
This policy explains how Nostra Technologies Limited (“Nostra”, “we”, “us”) collects, uses and protects personal data. We are registered in Ireland under company number (CRO) 430981, at 20D Beckett Way, Park West Business Park, Dublin 12, D12 T6P6. For the personal data described here, we are the data controller.
It covers people who visit nostra.ie, contact us, complete one of our free assessments, sign up for updates, apply for a job, or work for one of our clients or suppliers. When we handle data inside a client’s systems while providing our services, we do so on the client’s instructions under our contract with them, and that contract governs it.
Questions about this policy or your data: email privacy@nostra.ie.
2. What we collect, why, and for how long
| When | What we collect | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|---|
| You contact us (contact form, email or phone) | Name, work email, phone, company, company size, your message | To reply, and to follow up on what you asked about | Legitimate interests, or steps you asked for before a contract | 2 years after our last contact, unless you become a client |
| You complete a free assessment | Name, work email, company, your answers, score and result | To show and email you your results, and to offer help if you want it | Legitimate interests | 2 years after you complete it |
| You tick “I’d like to receive occasional updates” | Name and email | To send occasional news and updates from Nostra | Consent | Until you unsubscribe or withdraw consent |
| You or your organisation become a client or supplier | Business contact details, correspondence, contract and billing records | To provide and manage our services, and to keep proper records | Contract, and legal obligations (for example tax) | For the contract, then 6 years |
| You apply for a job | Your application, CV and interview notes | To assess your application | Steps you asked for before a contract, and legitimate interests | Up to 3 years, so we can contact you about future roles; tell us if you’d prefer we delete it sooner |
| You browse nostra.ie | IP address, browser and device type, pages requested, date and time | To deliver the site, keep it secure and fix problems | Legitimate interests | A limited period in our hosting provider’s server logs |
| You send a form | A coded (hashed) version of your IP address | To stop spam by limiting how many forms one connection can send | Legitimate interests | One hour |
| You accept analytics cookies | Pseudonymous usage data (a random identifier, pages visited) | To understand how the site is used and improve it | Consent | Up to 14 months, as set out in our Cookie Policy |
Where we rely on legitimate interests, we have checked that our use is what you would reasonably expect and doesn’t override your rights. You can object at any time (see section 7).
We also keep records for longer where the law requires it, or where we need them to establish, exercise or defend a legal claim.
3. Cookies
We keep cookies to a minimum. We remember your cookie choice in your browser, and we use analytics only if you agree. We don’t use advertising, remarketing or social media tracking cookies. Our Cookie Policy lists exactly what we use and explains how to change your choice at any time through Cookie settings.
4. Who we share it with
We don’t sell personal data. We share it only with service providers that process it for us, under contracts that require them to protect it and use it only on our instructions:
- SiteGround: hosts this website and its server logs.
- SMTP2GO: delivers the emails sent from our contact form and assessments.
- Microsoft: provides our email and business systems (Microsoft 365), where enquiries and client records are kept.
- Google Ireland Limited: provides Google Analytics, only if you accept analytics cookies.
- Our recruitment platform provider: receives applications made through our careers portal.
We also share data with professional advisers, such as accountants, lawyers and insurers, where needed; with a buyer or investor if our business is sold or restructured; and with the Gardaí, regulators or courts where the law requires it.
5. Transfers outside the EEA
Some of our providers, or their support teams, are based outside the European Economic Area. When personal data is transferred outside the EEA, we make sure it stays protected by relying on an EU adequacy decision (for example, for New Zealand, or the EU–US Data Privacy Framework for certified US companies), or on the European Commission’s standard contractual clauses. Email privacy@nostra.ie for details of the safeguards that apply.
6. Keeping it secure
We are certified to ISO 27001:2022, the international standard for information security. Data sent to and from nostra.ie is encrypted using HTTPS. Access to personal data is limited to the people who need it for their work.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you, and get a copy of it.
- Correct data that is wrong or incomplete.
- Delete your data, where we no longer have a reason to keep it.
- Restrict how we use your data, for example while we check a complaint.
- Object to our use of your data based on legitimate interests. You can always object to direct marketing, and we will stop.
- Move data you gave us to another organisation, in a common electronic format (data portability).
- Withdraw consent at any time, where we rely on it. This doesn’t affect what we did before you withdrew it.
We don’t make decisions about you that have legal or similarly significant effects using automated processing alone. The score in our free assessments is calculated automatically from your answers, for your information only.
To use any of these rights, email privacy@nostra.ie. We may ask you to confirm your identity first, to protect your data. We will reply within one month, and there is normally no charge.
8. Marketing
We send marketing updates only if you have asked for them, or, as the law allows, about similar services to existing clients. Every email includes a link to unsubscribe, or you can email privacy@nostra.ie at any time.
9. Children
Our website and services are for businesses. They are not aimed at children, and we don’t knowingly collect personal data from anyone under 18.
10. Complaints
If you are unhappy with how we have handled your personal data, please tell us at privacy@nostra.ie so we can try to put it right. You also have the right to complain to the Data Protection Commission, Ireland’s data protection authority, at any time.
11. Changes to this policy and contact
We update this policy when the way we use personal data changes. The date at the top shows when it was last revised. If we make an important change, we will tell people affected where we can.
Questions about this policy or your data: email privacy@nostra.ie, or write to Nostra Technologies Limited, 20D Beckett Way, Park West Business Park, Dublin 12, D12 T6P6.