Privacy Policy

Saturn Styling is the data controller for the personal information collected via this website and during service delivery.

• Trading address: Duleek, Co. Meath, Ireland
• Contact for privacy matters: saturnstyling@gmail.com

As a small business we are not required to designate a formal Data Protection Officer, but the address above reaches the person responsible for privacy matters and is monitored.

Depending on how you interact with us, we may collect:

• •Contact details — your name, email address, and phone number, provided when you book, request a quote, or contact us.
• •Vehicle details — make, model, year, size class, and registration number. The registration is used to track warranty coverage for the tint / film applied to that specific vehicle.
• •Booking & service history — the services you booked, dates, notes you provided, and photos taken before / after the job for our own quality-assurance record.
• •Payment-related data — we do not store your card number, CVC, or bank details. Payments are processed directly by our payment provider (Revolut Business); we only receive a transaction reference, the amount, and whether the payment succeeded or failed.
• •Technical / analytics data — cookies and similar technologies may collect approximate location (inferred from IP address), device and browser type, referring website, pages viewed, and interactions on the site. This category is only collected once you accept analytics/advertising cookies via the cookie banner (see §4).
• •Communications — any email or message you send us and our replies, retained so we can pick up the thread if you contact us again.

Each category above is processed under a specific legal basis. We do not use one blanket justification.

Cookies fall into two groups on this site. Essential cookies are strictly necessary for the site to function — session handling, cart/booking state, security. These are always on and cannot be disabled without breaking the site.

Non-essential cookies — analytics and advertising — are controlled by the cookie banner shown on your first visit:

• •Google Analytics 4 (measurement ID G-NE49KEYXJ5) — measures how visitors reach and use the site, entirely aggregated, so we know which pages are useful and which need work.
• •Google Ads (conversion ID AW-10792513724) — tells us which of our own paid Google ads actually led to a paying customer, so ad budget goes where it works.
• •Meta Pixel (pixel ID 1031124436624972) — tells us which of our own paid Facebook and Instagram ads actually led to a paying customer, so ad budget goes where it works. Same purpose as Google Ads above, just on Meta's advertising network. Sets cookies like _fbp only after you accept — never before.

All three (Google Analytics 4, Google Ads, and Meta Pixel) are governed by consent-first defaults: we set every tracking pixel to denied / revokedon every first visit, so no analytics or advertising cookies are set until you explicitly click "Accept All" on the banner. If you click "Reject Non-Essential", Google still receives fully anonymous, modelled signal (per its Consent Mode v2 behaviour) and Meta receives nothing at all, but no cookies or identifiers are stored on your device. Your choice is remembered so the banner does not reappear on every visit; you can change your mind by clearing site data for saturnstyling.ie in your browser, which will re-show the banner.

We share the minimum necessary personal data with the following processors, each under a data-processing agreement:

• •Revolut Business (Ireland / EEA) — processes card payments. They receive your card details directly; we never see them.
• •Resend (email delivery infrastructure) — delivers our transactional emails (booking confirmations, invoices, warranty reminders). They receive your name, email, and the content of the email.
• •Google Ireland Limited (Google Analytics 4 & Google Ads) — receives the analytics / advertising signal described in §4, once you have accepted the corresponding cookies.
• •Meta Platforms Ireland Limited (Meta Pixel — Facebook & Instagram advertising) — receives the advertising / conversion signal described in §4, once you have accepted the corresponding cookies. Data is used solely to attribute our own paid Facebook / Instagram ads to real bookings, not for cross-site profiling on our end.
• •Emergent (hosting platform) — the underlying infrastructure that runs the site. All data is stored on their systems.

We do not sell personal data. We do not share personal data with advertisers for their own independent marketing.

Retention periods are enforced automatically by a nightly job — they are not just written down here:

• •Cancelled, no-show, or unpaid bookings: deleted after 12 months. No invoice was issued, so there is no ongoing legal reason to keep the record.
• •Paid bookings and their invoices: retained for 7 years — the retention period required by Irish Revenue for financial records — then anonymised. Your name, email, phone, and free-text notes are replaced with tokens; the financial row itself (amount, VAT, date) survives so tax/accounting continuity is preserved.
• •Unconverted quote requests: deleted after 18 months if they do not lead to a booking.
• •Marketing consent + email address (if you opted in): kept while your consent is active. Withdrawing consent removes you from the list within one working day.
• •Website analytics events (Google Analytics 4): retained per Google's own configuration (default 2 months for user-level data, 14 months for aggregate reports; adjustable in the GA4 property settings).

You have all of the following rights over your personal data. To exercise any of them, email saturnstyling@gmail.com stating clearly which right(s) you want to exercise:

• •Right of access (Art 15) — a copy of the personal data we hold about you, and a description of how it is used.
• •Right to rectification (Art 16) — correction of anything inaccurate or out of date.
• •Right to erasure (Art 17) — deletion, subject to the legal retention obligations described in §6 above (we cannot delete a paid invoice within its 7-year Revenue retention window, but we can anonymise it).
• •Right to restriction of processing (Art 18) — we stop using your data for anything beyond storage while a dispute or verification is resolved.
• •Right to data portability (Art 20) — receive the data you provided to us in a structured, commonly used, machine-readable format (JSON or CSV).
• •Right to object (Art 21) — object to processing based on legitimate interest (§3), including for direct marketing.
• •Right to withdraw consent (Art 7(3)) — at any time, for anything relying on consent (cookies, marketing emails). Withdrawal does not affect the lawfulness of any processing already carried out.

Response timeframe: we will respond within one month of receiving your request, as required by GDPR Article 12(3). For complex or numerous requests we may extend this by up to two further months, in which case we will tell you within the first month why the extension is needed. There is no fee unless a request is manifestly unfounded or excessive.

If you are not satisfied with how we have handled a request or with any aspect of our data processing, you have the right to lodge a complaint with the Irish supervisory authority:

You can also lodge a complaint with the supervisory authority in the EU member state where you live or work, if different from Ireland.

Our service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16, and we would not ordinarily enter a service contract with a minor for vehicle work — the vehicle owner would be an adult. If you believe a child has provided us with personal data in error, please contact us and we will delete it promptly.

We do not use personal data to make automated decisions that produce legal effects or similarly significant effects on you within the meaning of GDPR Article 22.

Where we run promotional draws (for example, our weighted-random or single-winner promotion campaigns), the outcome of the draw — for instance a percentage discount or a free add-on — is determined by an automated random draw rather than a human decision, but the resulting outcome is a benefit applied to a booking that you have chosen to enter. It does not deny a service, alter your legal status, or produce a similarly significant negative effect. On that basis we treat these draws as outside the scope of Article 22. If you would prefer not to participate in an active promotion, you can complete a booking without opting in.

How the draw actually works, in plain language: when you book during an active promotion, an entry is automatically created for you and a randomised process selects an outcome from the campaign's prize table. Outcomes range from small discounts — the most common result — up to larger prizes that appear rarely, because the odds are weighted so rarer prizes come up less often than everyday ones. The mechanism is entirely additive: the worst possible outcome is no additional discount, in which case you simply pay the price you already agreed at checkout. You are never charged more than the booking price you confirmed as a result of the draw. The specific odds and the full list of possible outcomes for a given campaign are kept server-side and not published, both to preserve the fairness of the draw and to prevent gaming the entry mechanism; the general terms for the campaign you entered are displayed on our Current Promotion Terms page while that campaign is live.

We may update this policy from time to time — for example, if we add a new integration, change a retention period, or respond to a regulatory update. The date at the top of the page is the last-updated date. For material changes that affect how your data is processed (e.g. a new category of recipient, a new legal basis), we will make reasonable efforts to notify existing customers by email in advance before the change takes effect.

Any privacy question or request:

saturnstyling@gmail.com

This policy sets a strong compliance floor but is not a substitute for tailored legal advice. If you are relying on this document for a specific compliance decision, please consult a qualified solicitor.