Privacy Policy

Last updated: 26 March 2026

1. Who We Are

DPP Delivery is a service of Blue Dot Consulting, an Irish company (CRO: 769206), registered in Cork, Ireland. We help Irish construction product manufacturers deliver compliant Digital Product Passports under the EU Construction Products Regulation.

Blue Dot Consulting is the data controller for the personal data collected through this website. For privacy-related queries, please contact us.

2. What Data We Collect

We collect personal data that you voluntarily provide through the following forms:

Contact Form

  • Name (required)
  • Email address (required)
  • Company name (optional)
  • Phone number (optional)
  • Message (required)

Guide Download Form

  • Name (required)
  • Email address (required)
  • Company name (optional)

Newsletter Signup

  • Email address (required)

We do not collect data automatically through cookies or analytics tools at this time. If this changes, we will update this policy and implement appropriate consent mechanisms.

3. How We Use Your Data

  • To respond to your enquiry or message
  • To deliver the guide you requested
  • To send newsletter updates about DPP compliance (you can unsubscribe at any time)
  • To improve our services

We do not sell your personal data. We do not use your data for advertising.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Consent (Article 6(1)(a)) — when you voluntarily submit a form or subscribe to our newsletter. You may withdraw consent at any time.
  • Legitimate interests (Article 6(1)(f)) — to respond to business enquiries and improve our services. Our interest does not override your rights given the limited and expected nature of the data processed.

5. Third-Party Processors

Your form submissions are processed by the following third-party service:

  • Web3Forms (web3forms.com) — processes form submissions and delivers them to us via email. Web3Forms acts as a data processor on our behalf. Their privacy policy is available at web3forms.com/privacy.
  • Hosting provider — our website is hosted on infrastructure that may log access requests (IP address, timestamp, page visited) for security purposes.

We do not share your personal data with any other third parties unless required by law.

6. Data Retention

  • Contact form submissions: retained for up to 2 years, then deleted
  • Guide download details: retained for up to 2 years
  • Newsletter subscriptions: retained until you unsubscribe

7. International Data Transfers

Web3Forms may process form submissions on servers outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on the EU-US Data Privacy Framework where applicable.

8. AI & Automated Processing

DPP Delivery does not use artificial intelligence or machine learning to process your personal data. Your data is not used to train AI models. No automated decisions are made about you based on your personal data.

Blue Dot Consulting uses AI tools internally for business productivity (e.g., drafting, research, code development). These tools are governed by our internal PII & LLM Usage Policy, which prohibits sending third-party personal data to AI providers that lack a Data Processing Agreement.

9. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (“right to be forgotten”)
  • Restriction — ask us to restrict processing of your data
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us. We will respond within 30 days.

You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
www.dataprotection.ie

10. Cookies

This website does not currently use cookies for analytics or advertising. If we introduce cookies in the future, we will update this policy and implement a consent mechanism before any non-essential cookies are set.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically.