How we handle your information

Who we are

ClosedSources is an independent third-party risk practice with its registered address at 20 Harcourt Street, Dublin, D02 H364, Ireland. For the purposes of the General Data Protection Regulation (GDPR), ClosedSources is the data controller for any personal data described in this notice. You can reach us at contact@pass.closedsources.com or by post at the address above.

What this website collects

Very little. This site has no forms, no user accounts, and sets no cookies. We use Vercel Analytics, a cookie-free service that records aggregate page views and anonymised technical information such as browser type and country. It does not identify individual visitors, and we cannot trace any analytics data back to you.

If you email us

When you contact us, we receive your email address, your name if you include it, and whatever you choose to write. We use this information solely to respond to your enquiry and, if you engage us, to carry out the work you have asked for. The legal basis is our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR) and, where an engagement follows, the performance of a contract (Article 6(1)(b) GDPR).

Our email is hosted with Proton, whose infrastructure is located in the EU and Switzerland. Correspondence relating to an enquiry that does not proceed is deleted within 12 months. Records relating to an engagement are retained for as long as the engagement and our legal obligations require.

Where this site is hosted

This website is hosted by Vercel Inc., and our domain and DNS are managed through Cloudflare. Both act as processors of the limited technical data involved in serving a web page, such as IP addresses in server logs, which are retained only briefly for security and operational purposes.

Your rights

Under the GDPR you have the right to access, correct, or erase personal data we hold about you, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email us at the address above. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

Changes to this notice

If we change how this site handles personal data, we will update this notice and the date at the top of the page.