Skip to content
Kelvi

Prospecting privacy

How I handle your details when I email your business.

For businesses I've emailed about their website. If you're visiting kelvi.ie, the site privacy policy is the one you want.

Last updated: 15 October 2026

Don't want to hear from me? Just say so.

Reply "no thanks" to any of my emails, or email sean@kelvi.ie. That's the end of it. I stop straight away and add your address to a do-not-contact list so it doesn't happen again. You can object at any time and you don't need to give a reason. It's your right under Article 21 of the GDPR.

Who I am

Kelvi is run by me, Sean Murphy, as a sole trader. I build and look after websites for small businesses in Ireland. I'm responsible for the details described on this page (the "data controller"). You can reach me at sean@kelvi.ie, or at hello@kelvi.ie, the general address for this site.

What this page covers

Now and then I email a business whose website I think I could help with. This page explains what I record when I do that, where it comes from, why, how long I keep it and what you can do about it. It's separate from the privacy policy for visitors to kelvi.ie.

What I keep

  • Your business name.
  • The contact email and phone number your business publishes.
  • Your website address.
  • Public company details from the CRO register, where your business is a company: company name, company number, registered office and sector.
  • Short notes on what your own website shows, for example "not mobile friendly".

I don't keep Google Maps or directory data, screenshots of your website, staff names or personal notes.

Where it comes from

Either your business's own website, or the CRO open data register, published by the Companies Registration Office under a Creative Commons Attribution 4.0 (CC BY 4.0) licence.

Why I use it

To send you a small number of emails, three at most, offering to help with your website. They're about your business's own website and nothing else.

The legal basis

Under the GDPR I rely on legitimate interests (Article 6(1)(f)): one small business telling another about a service that's relevant to it, kept to a few emails, with an easy way to say no. I've written a legitimate-interests assessment that weighs this against your interests, and I'll send you a copy if you ask.

For the emails themselves, the Irish ePrivacy Regulations (S.I. 336/2011) allow an email to a company's address until it objects (Regulation 13(4)), and an email to an address a business publishes for its business use, where the email is only about that business (Regulation 13(2)).

Who else handles it

  • Google: Gmail and Google Workspace, for sending and receiving email.
  • Anthropic: Claude, an AI assistant that helps me find and check businesses and draft emails.
  • Cloudflare: website hosting, including any preview site.
  • claude.ai: the private dashboard where I track who I've contacted.

I don't sell your details, and I don't share them with anyone for their own marketing.

How long I keep it

  • If you object, or an email bounces: I keep only your email address, domain and business name on a do-not-contact list, so I never email you again. That list is kept indefinitely, for that purpose only.
  • If you don't reply: 12 months after my last email, the record is cut down to the minimum I need to avoid contacting you twice. That is deleted after 24 months.
  • Preview sites: if I've made a preview site for your business, it's deleted 30 days after I offer it unless you ask me to keep it, and within 48 hours if you ask me to take it down.

Your rights

  • Object at any time: reply "no thanks" or email sean@kelvi.ie. For direct marketing this right is absolute (GDPR Article 21).
  • Access the details I hold about you.
  • Correct them if they're wrong.
  • Erase them.
  • Restrict how I use them.

To use any of these, email sean@kelvi.ie. If you're not happy with how I've handled your details, you can complain to the Data Protection Commission at www.dataprotection.ie.