If your site collects personal data through a contact form, analytics or a booking widget, your privacy notice should match that processing. It should identify your organisation, explain what you collect and why, state the legal basis, say who receives the data and how long you keep it, and explain people's data protection rights.
Check three things:
- Every form makes it clear where its data goes.
- The notice names the tools you actually use.
- People can contact you to exercise their rights, including requesting deletion where it applies.
This is a practical starting checklist, not a complete compliance review or legal advice. If you are unsure, read the Data Protection Commission's guidance for small organisations or ask a solicitor.
Want a second pair of eyes on your site? Write to macd@macd.ie.
Source: https://dataprotection.ie/en/dpc-guidance/guidance-for-smes