Who we are
This privacy policy explains how Swyft Software Ltd ("Swyft Software", "we", "us", "our") collects, uses, shares and protects personal data when you visit swyftsoft.com or contact us through it.
Swyft Software Ltd is a company registered in Ireland, with its registered office at 77 Lower Camden Street, Dublin 2, D02 XE80, Ireland. We are the data controller for the personal data described in this policy.
Each of our products has its own privacy policy covering the data the product handles, for example the Swyft Signature privacy policy. This policy covers this website only.
We follow the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Data Protection Acts 1988 to 2018, the ePrivacy Regulations (S.I. No. 336 of 2011) and any law that replaces them.
What we collect
- When you contact us: your name, email address, your organisation if you give it, what your message is about, the message itself, and the country your request came from (worked out by our hosting provider from your IP address, not stored separately).
- When you visit: the technical details every website receives, such as your IP address, browser, device, the pages you request and when. Our hosting provider's firewall and logs use these to keep the site secure and working.
- Analytics, only if you agree: how you use this website, such as the pages you read, measured by Google Analytics through Google Tag Manager.
- Advertising, only if you agree: if we switch on advertising on this website, Google AdSense may measure and, where you allow it, personalise the adverts you see.
- Your preferences: your cookie choices and whether you chose the light or dark theme.
We do not ask for, and ask you not to send, special category data such as health information through the contact form.
Why we use it, and our lawful basis
| Purpose | Lawful basis under the GDPR |
|---|---|
| Replying to your message and keeping a record of it | Legitimate interest (Article 6(1)(f)): answering the people who contact us. If you are asking about becoming a customer, steps before a contract (Article 6(1)(b)). |
| Keeping the website and contact form secure, including spam and abuse checks | Legitimate interest (Article 6(1)(f)): protecting our systems and the people who use them. |
| Analytics cookies | Consent (Article 6(1)(a)), which you can withdraw at any time. |
| Advertising cookies, if advertising is switched on | Consent (Article 6(1)(a)), which you can withdraw at any time. |
| Meeting legal obligations, such as answering a regulator | Legal obligation (Article 6(1)(c)). |
We do not sell your personal data, and we never add people who contact us to a mailing list.
Who we share it with
We use a small number of trusted providers to run this website. Each one processes personal data for us under a data processing agreement or equivalent terms, and only for the service it provides.
- Microsoft (Azure): hosting, the web application firewall and security logs. In the EU (the Netherlands).
- Cloudflare: DNS for our domain and Turnstile, the check on our contact form that tells people from automated scripts without tracking cookies.
- Resend: delivering the contact form emails, from the EU (Ireland).
- Google: Google Tag Manager and Google Analytics, only if you accept analytics cookies. If advertising is switched on and you accept advertising cookies, Google AdSense, for which Google acts as an independent controller under Google's privacy policy.
We may also share personal data if the law requires it, or to protect our rights, our customers or the public.
International transfers
Some of these providers are based in, or may access data from, the United States. Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework where the provider is certified under it, or on the European Commission's Standard Contractual Clauses, in line with Chapter V of the GDPR.
How long we keep it
- Contact form messages: up to two years from your last message, unless they lead to a contract, when our product or contract records apply.
- Security and access logs: a short period, normally no more than 90 days.
- Google Analytics data: 14 months.
- Your cookie choice: six months, then we ask again.
- Your theme choice: in your own browser until you clear it.
How we protect it
The website runs on Microsoft Azure in the EU, reached only through Azure Front Door with a web application firewall. Outbound traffic passes through a firewall with an allow list, secrets are kept in Azure Key Vault, and everything is encrypted in transit. You can read more on our trust and security page.
No website can be perfectly secure, but we work hard to protect your data and will tell you and the Data Protection Commission without delay if a breach puts your data at risk.
Your rights
You have the right to access, correct, erase, restrict, object to and move your personal data, and to withdraw consent at any time. See your data rights for how to use them.
Cookies
We only use cookies that are strictly necessary, unless you agree to analytics or advertising cookies. Our cookies policy lists them all.
Children
This website is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows the latest version. If a change is significant, we will say so on this page.
Contact and complaints
To ask about this policy or to use your rights, please use our contact form and choose "A privacy or data request".
You also have the right to complain to the Data Protection Commission, the supervisory authority in Ireland, at dataprotection.ie or 21 Fitzwilliam Square South, Dublin 2, D02 RD28.