Skip to content

Privacy

Updated

Privacy Policy

Last updated: 22 September 2026

Good & Able Studio respects your privacy and aims to be clear about how personal information is collected, used and protected.

This Privacy Policy explains what information we collect when you visit our website, contact us or work with us, why we use it, who may receive it and the rights available to you under data protection law.

1. Who we are

Good & Able Studio is operated by Cozmin Fatul and provides website design, development and related digital services.

For the purposes of applicable data protection law, Cozmin Fatul trading as Good & Able Studio is the data controller responsible for personal information processed through this website and in connection with client enquiries and projects.

Contact

Email: info@goodandablestudio.com
Alternative email: cozmin@goodandablestudio.com

Postal address:
Cozmin Fatul
45 Rathmines Road Upper
Dublin 6
D06 C2H9
Ireland

2. Information we collect

The information we collect depends on how you interact with us.

Enquiries

When you submit an enquiry through the website, we may collect:

  • first name;
  • last name, if provided;
  • email address;
  • company name, if provided; and
  • the information you include in your message.

Your first name, email address and message are required so that we can understand and respond to your enquiry. If you do not provide these details, you will not be able to submit the enquiry form.

Last name and company name are optional.

The form also contains a hidden website field used as a spam-prevention measure. It is not intended to collect a visitor's website address.

Client and project information

If you become a client, we may also process information necessary to manage and deliver your project, including:

  • contact details;
  • business information;
  • project requirements and specifications;
  • content, images or files supplied for the project;
  • communications and project decisions;
  • contracts, proposals and quotations;
  • billing and invoicing information; and
  • records relating to payments.

Please avoid sending sensitive or special-category personal information unless it is genuinely necessary for the project and has been discussed with us beforehand.

Technical information

When you visit the website, some technical information may be processed automatically in order to deliver, secure and maintain the site.

This can include information such as:

  • IP address;
  • browser and device information;
  • requested pages or resources;
  • request timestamps;
  • referring domain;
  • diagnostic information; and
  • security or server log information.

3. Why we use your information

We process personal information only where we have an appropriate legal basis.

Responding to enquiries

We use enquiry information to respond to you, understand what you need, discuss possible work and prepare proposals or quotations.

Where you contact us with a view to potentially entering into a contract, processing may be necessary to take steps at your request before entering into that contract.

For other general business enquiries, we may rely on our legitimate interest in responding to communications relating to Good & Able Studio and operating our business effectively.

Delivering client projects

Where you become a client, we process information where necessary to:

  • provide the services you have requested;
  • communicate about your project;
  • manage project delivery;
  • provide agreed support or warranty services;
  • manage billing and payments; and
  • administer our contractual relationship.

This processing is generally necessary for the performance of our contract with you.

Accounting and legal obligations

Certain information, particularly invoices, payment information and accounting records, may be retained where necessary to comply with tax, accounting or other legal obligations.

Website security and operation

Technical information may be processed where necessary for our legitimate interests in:

  • operating and maintaining the website;
  • protecting the website from spam, abuse and malicious activity;
  • diagnosing technical problems; and
  • maintaining the security and reliability of our services.

We consider these interests against the privacy rights and interests of website visitors.

4. Website hosting, cookies and similar technologies

The website currently uses Cloudflare infrastructure for website delivery, security and related services. Cloudflare may process technical request information required to deliver and protect the website.

Cloudflare Email Routing is also used to route website enquiries to our email inbox.

The website uses Sanity to manage and deliver website content.

We do not currently use the website to intentionally set advertising, behavioural marketing or cross-site tracking cookies.

Where cookies or similar technologies are strictly necessary for website operation, security or delivery, they may be used without consent where permitted by law.

If we introduce analytics, advertising or other non-essential tracking technologies in the future, this Privacy Policy and our consent mechanism will be updated before those technologies are used where consent is required.

You can also control or remove cookies using your browser settings.

5. Service providers

We use a limited number of third-party services to operate the website and manage communications.

These currently include:

Cloudflare
Used for website infrastructure, security, content delivery, Workers and email routing.

Google / Gmail
Used to receive, send and manage email communications, including website enquiries.

Sanity
Used as the website content management platform and to deliver website content.

These providers may process limited personal or technical information when providing their services.

We do not sell your personal information.

We may also disclose personal information where required by law, regulation, court order or another binding legal requirement, or where reasonably necessary to establish, exercise or defend legal claims.

6. International data transfers

Some of the technology providers we use operate internationally and may process information outside Ireland or the European Economic Area.

Where personal data is transferred outside the EEA, we rely on the safeguards applicable to the relevant provider and service, which may include:

  • a European Commission adequacy decision;
  • the European Commission's Standard Contractual Clauses;
  • an approved data-transfer framework; or
  • another legally recognised transfer mechanism.

For example, Cloudflare and Sanity provide contractual mechanisms for international transfers, including Standard Contractual Clauses where required.

You can contact us if you would like further information about the safeguards applying to a particular service.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to legal and regulatory requirements.

Enquiries that do not become projects

Enquiry information that does not result in a project will normally be retained for up to 12 months after our last communication, unless there is a legitimate reason to retain it for longer.

Project information

Project working information and files containing personal data will normally be retained during the project and any agreed warranty or support period.

Where they are no longer reasonably required, ordinary project working files containing personal information may be deleted approximately 30 days after the relevant project or warranty period has ended, unless continued retention is necessary for support, contractual, security or legal reasons.

Accounting and business records

Invoices, transaction records and other information required for accounting or tax purposes may be retained for at least six years, or for any longer period required by applicable law.

Technical information and backups

Technical logs, security information and backup copies may remain with our service providers for the periods required by their normal security, backup and deletion processes.

When information is no longer required, it will be deleted, anonymised or allowed to expire through the relevant service's normal deletion process, as appropriate.

8. Marketing communications

Submitting an enquiry does not automatically subscribe you to a marketing list.

We do not currently use enquiry information to send general promotional email campaigns simply because someone contacted us.

If we introduce a newsletter or other electronic marketing service, we will use personal information for that purpose only where permitted by applicable law and will provide an appropriate way to unsubscribe or object.

9. Automated decision-making and profiling

We do not currently use personal information collected through this website to make decisions about individuals solely through automated processing, and we do not carry out behavioural profiling for advertising purposes.

10. Where information comes from

Most personal information we process is provided directly by you when you:

  • submit an enquiry;
  • communicate with us by email or another agreed method;
  • request a proposal or quotation; or
  • become a client and provide information required for your project.

Certain technical information is generated automatically when your browser or device communicates with the website and its infrastructure providers.

Where a client provides personal information relating to another person as part of a project, the client is responsible for ensuring that they are entitled to provide that information to us.

11. How we protect information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

We also aim to limit access to personal information to the services and people who reasonably require it for the relevant purpose.

No online service or method of electronic storage can guarantee absolute security, but we take reasonable measures appropriate to the nature of the information we process.

12. Your data protection rights

Depending on the circumstances and the legal basis for processing, you may have the right to:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete certain personal information;
  • ask us to restrict how information is used;
  • object to certain processing;
  • receive certain information in a portable format; and
  • withdraw consent where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Some rights are subject to legal conditions and exceptions. For example, we may need to retain information where required by law even if you request its deletion.

To exercise a data protection right, contact:

info@goodandablestudio.com

We may ask for information necessary to verify your identity before responding to a request.

You also have the right to raise a concern or lodge a complaint with the Data Protection Commission (DPC) in Ireland.

Information about the DPC and how to make a complaint is available at www.dataprotection.ie.

13. Third-party websites

Our website may contain links to websites or services operated by other organisations.

We are not responsible for the privacy practices of third-party websites. If you follow an external link, you should review the privacy information provided by that organisation.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, technology providers or data-processing practices change, or where an update is required to reflect changes in applicable law.

The Last updated date at the top of this page identifies the most recent version.