Privacy Policy

Last Updated: April 7th, 2025

1. Introduction

Savicost ("we," "our," or "us") is a cost control consultancy based in Ireland, specializing in helping businesses reduce overheads by securing better utility deals. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 2018–2024 (Ireland).

2. Information We Collect

We collect and process the following types of data:

Personal Data

• Contact Information: Name, email address, phone number, business address.
• Business Details: Company name, utility suppliers, contract terms, billing history.
• Financial Data: (If applicable) Payment details for service fees.

Automated Data (Website Usage)

• Cookies & Tracking Technologies: See our Cookie Policy.
• Log Data: IP address, browser type, pages visited, time spent on site.

3. How We Use Your Data

Purpose	Legal Basis
Providing cost control services (negotiating utility deals)	Contractual necessity
Communicating with you (service updates, offers)	Legitimate interest
Improving our website & services	Legitimate interest
Compliance with legal obligations (e.g., tax records)	Legal obligation
Marketing (if consent given)	Consent

4. Data Sharing & Third Parties

We may share your data with:

• Utility Suppliers & Brokers (to negotiate better rates on your behalf).
• Payment Processors (if applicable, for invoicing).
• IT & Cloud Service Providers (under strict GDPR-compliant agreements).
• Legal & Regulatory Authorities (if required by law).

International Transfers:
We do not transfer data outside the EU/EEA unless necessary, in which case we ensure adequate safeguards (e.g., Standard Contractual Clauses).

5. Data Retention

We retain data only as long as necessary:

• Client records: 6 years (for tax/compliance purposes).
• Marketing data: Until consent is withdrawn.
• Website analytics: Up to 26 months (anonymized where possible).

6. Your Rights Under GDPR

You have the right to:

• Access – Request a copy of your data.
• Rectification – Correct inaccurate data.
• Erasure – Request deletion (where applicable).
• Restriction – Limit processing under certain conditions.
• Portability – Receive your data in a structured format.
• Object – Opt out of direct marketing.
• Withdraw Consent – At any time (where processing is consent-based).

7. Data Security

We implement measures including:

• Encryption (SSL for data transfers).
• Access controls (staff training, restricted databases).
• Regular security audits.

8. Complaints

If unsatisfied with our handling of your data, you may lodge a complaint with the:

Irish Data Protection Commission (DPC)
Website: https://www.dataprotection.ie