Last updated: 10 July 2026

1. About this privacy policy

This privacy policy explains how Stacks Creative Ltd collects, uses, stores and shares personal data.

It also explains the rights you may have under the General Data Protection Regulation, the Data Protection Act 2018 and other applicable Irish data protection and electronic communications laws.

This policy applies when you:

• Visit stacks.ie or another website or online portal operated by us.
• Contact us or submit an enquiry.
• Request an audit, consultation, guide, lead magnet or other resource.
• Become a client or work for one of our clients.
• Apply to work with us or join our creator network.
• Supply goods or services to us.
• Interact with us through email, social media, advertising platforms or other communications.
• Have your information processed by us while we provide services to one of our clients.

2. Who we are

Stacks Creative Ltd, trading as Stacks, is a Dublin-based e-commerce and customer acquisition agency.

Our services include paid advertising, creative strategy, user-generated content, conversion rate optimisation, landing pages, email marketing, social media marketing and performance reporting.

Our contact details are:

Stacks Creative Ltd
13 Adelaide Road
Dublin 2
D02 P950
Ireland

Email: info@stacks.ie
Website: stacks.ie

For the personal data covered by this policy, Stacks Creative Ltd will normally be the data controller unless this policy explains otherwise.

3. When we act on behalf of clients

As part of our services, we may access or process personal data controlled by our clients. This can include customer, prospect, website visitor, advertising audience, mailing-list and e-commerce transaction data.

In these circumstances, we will normally act as a data processor and process the information only:

• On the documented instructions of the relevant client.
• For the purpose of providing our agreed services.
• In accordance with our contract or data processing agreement with that client.
• Subject to appropriate confidentiality and security obligations.

The client remains responsible for determining why the personal data is processed and for providing the appropriate privacy information to the individuals concerned.

Depending on the activity and platform involved, Stacks, the client and a relevant advertising or technology platform may each have separate or overlapping data protection responsibilities.

4. Personal data we collect

The information we collect depends on how you interact with us.

Contact and business information

This may include:

• Your name.
• Job title or role.
• Company or organisation.
• Business address.
• Email address.
• Telephone number.
• Social media profile or username.
• Details contained in communications with us.

Enquiry and lead information

When you request a consultation, audit, guide or other resource, we may collect information such as:

• Your website address.
• Your business sector.
• Revenue range.
• Advertising budget or current advertising activity.
• Marketing platforms currently used.
• Services you are interested in.
• Business goals, challenges and timelines.
• Answers submitted through an enquiry, qualification or application form.
• Notes created during calls or correspondence with you.

Client and project information

When you or your organisation becomes a client, we may process:

• Contract and account information.
• Project briefs and marketing plans.
• Campaign data.
• Advertising account identifiers and access permissions.
• E-commerce, analytics and reporting information.
• Brand assets, photographs, videos, audio and creative content.
• Feedback, approvals and project communications.
• Information relating to your employees, contractors, customers or creators where necessary to provide our services.

Billing and financial information

This may include:

• Billing address.
• Purchase orders.
• Invoices and payment records.
• Bank account details.
• Tax or VAT information.
• Information required for accounting, fraud prevention or credit control.

We generally do not directly store complete payment-card details where payment is processed through a third-party payment provider.

Website and device information

When you use our website or online services, we may collect:

• IP address.
• Device and browser type.
• Operating system.
• Approximate location derived from an IP address.
• Referring website.
• Pages viewed and links selected.
• Date, time and duration of visits.
• Form interactions and downloads.
• Cookie identifiers and similar online identifiers.
• Advertising and campaign attribution information.

Creator, contractor and supplier information

If you apply to join our creator network or provide services to us or our clients, we may collect:

• Contact details.
• Portfolio, social media and professional information.
• CV or work history.
• Rates and availability.
• Bank, tax and payment information.
• Photographs, videos, voice recordings and other content featuring you.
• Agreements, usage permissions, releases and consent records.
• Information needed to assess your suitability for a project.

Recruitment information

If you apply for a role with Stacks, we may process:

• Your CV and employment history.
• Qualifications and skills.
• Contact details.
• Interview notes.
• References.
• Salary expectations and availability.
• Any other information you provide as part of your application.

Special-category personal data

We do not normally need to collect special-category personal data, such as information about health, ethnicity, religion, political beliefs or sexual orientation.

Where it is genuinely necessary, we will only process such information where an appropriate legal basis and an additional condition under Article 9 of the GDPR applies. This may include your explicit consent.

Please avoid providing sensitive personal information unless we have specifically requested it.

5. How we obtain personal data

We may obtain information:

• Directly from you.
• From your employer or organisation.
• From one of our clients.
• Through forms, booking systems and online portals.
• From publicly available professional websites and social media profiles.
• From referrals, business partners or service providers.
• From advertising, analytics, e-commerce and social media platforms.
• Through website cookies and similar technologies.
• During calls, meetings, events or project delivery.

Where we obtain your information from another source, we will provide any information required under applicable data protection law unless an exemption applies.

6. How and why we use personal data

Responding to enquiries

We use personal data to:

• Respond to questions and enquiries.
• Arrange consultations and meetings.
• Assess whether our services may be suitable.
• Prepare audits, proposals, quotations and recommendations.
• Take steps requested by you before entering into a contract.

Our legal bases may include taking steps at your request before entering into a contract and our legitimate interests in responding to genuine business enquiries and developing our business.

Guides, audits and downloadable resources

When you request a guide, audit, report, webinar or other resource, we may use your information to:

• Deliver the requested material.
• Administer and confirm your request.
• Understand which businesses are interested in our services.
• Assess whether our services may be relevant to your business.
• Contact you where that follow-up was clearly explained when your details were collected.

Depending on the circumstances, we rely on steps taken at your request before entering into a contract, our legitimate interests in managing genuine business enquiries, or your consent.

Where consent is legally required for electronic direct marketing, we will request that consent separately.

Providing services to clients

We process information to:

• Enter into and administer client contracts.
• Develop and implement marketing strategies.
• Create and manage advertising campaigns.
• Produce and manage creative content.
• Source and manage creators.
• Carry out conversion optimisation and website work.
• Manage email marketing and customer-retention activity.
• Produce analytics, dashboards and reports.
• Communicate with clients, their employees and their service providers.
• Manage access to relevant platforms and accounts.

Where the client is an individual, this may be necessary to perform our contract with them.

Where we deal with employees or representatives of a client, we generally rely on our legitimate interests in delivering and administering the services agreed with that client.

Where we process personal data solely on a client’s instructions, the client determines the applicable legal basis.

Client customer and advertising data

While providing advertising, e-commerce, email marketing, analytics or conversion services, we may access information relating to our clients’ customers, prospects and website users.

This information may include online identifiers, purchase activity, website interactions, advertising engagement, mailing-list data and audience information.

We normally process this data as a processor acting on the relevant client’s instructions. Clients are responsible for ensuring that the information has been collected and shared lawfully.

Managing suppliers, contractors and creators

We use personal data to:

• Assess potential suppliers and creators.
• Arrange and administer projects.
• Issue briefs and contracts.
• Manage content usage rights.
• Arrange payments.
• Communicate about current and potential opportunities.
• Meet accounting, tax and legal obligations.

Our legal bases include performing a contract, taking steps before entering into a contract, complying with legal obligations and our legitimate interests in managing our supplier and creator network.

Recruitment

We process applicant information to assess applications, communicate with candidates, conduct interviews and make hiring decisions.

We rely on steps taken before entering into an employment contract and our legitimate interests in managing recruitment and selecting suitable candidates.

Marketing our services

We may use your business contact information to tell you about relevant Stacks services, resources, events or developments.

We will send electronic marketing only where permitted under applicable data protection and electronic communications laws. Depending on the circumstances, this may be based on:

• Your consent.
• An applicable existing-customer exception.
• Another lawful basis permitted for the relevant communication and recipient.

You can unsubscribe from marketing emails at any time by using the unsubscribe option included in the message or by contacting info@stacks.ie.

We may retain a limited suppression record after you unsubscribe so that we can respect your request and avoid contacting you again for marketing purposes.

Website operation and improvement

We use website and device data to:

• Operate and secure our website.
• Troubleshoot technical issues.
• Prevent fraud, spam and misuse.
• Understand how visitors use the website.
• Measure campaign and website performance.
• Improve content, navigation and user experience.
• Attribute enquiries to relevant campaigns.
• Deliver or measure advertising where you have consented.

Strictly necessary processing is based on our legitimate interests in operating and protecting our website.

Where cookies or similar technologies require consent, we rely on your consent.

Legal, compliance and security purposes

We may process personal data to:

• Maintain appropriate business records.
• Comply with tax, accounting and regulatory obligations.
• Establish, exercise or defend legal claims.
• Enforce our contracts and terms.
• Investigate suspected fraud, misuse or security incidents.
• Protect our business, clients, team members and other individuals.
• Respond to lawful requests from courts, regulators or public authorities.

Our legal bases include compliance with legal obligations and our legitimate interests in protecting our business and legal rights.

7. Cookies and similar technologies

Our website may use cookies, pixels, tags and similar technologies.

Some technologies are strictly necessary for the website to operate and do not require consent.

Other technologies, including certain analytics, advertising, personalisation and social media technologies, will only be activated where you have provided the required consent.

You can accept, reject or manage non-essential technologies through the cookie settings made available on our website. Withdrawing consent will not affect processing carried out before the withdrawal.

More detailed information about the technologies used, their providers and their duration should be provided through our cookie notice or cookie settings.

8. Who we share personal data with

We may share personal data with appropriate third parties where necessary, including:

• Website hosting and technology providers.
• Cloud storage, email and productivity providers.
• Customer relationship management and form providers.
• Scheduling and video-conferencing providers.
• Project management and reporting platforms.
• Advertising, analytics and social media platforms.
• E-commerce and email marketing platforms.
• Payment, banking and accounting providers.
• Contractors, creators and production partners.
• Professional advisers, including accountants, auditors, insurers and solicitors.
• Clients where information relates to work being performed for that client.
• Regulators, courts, law-enforcement bodies and public authorities where required.
• A purchaser, investor or adviser in connection with a proposed sale, merger, restructuring or transfer of our business.

We require service providers acting as processors to protect personal data, maintain confidentiality and process the information only for agreed purposes.

We do not sell personal data.

9. International transfers

Some of our service providers, clients, contractors or technology platforms may process personal data outside Ireland or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will use an appropriate transfer mechanism where required. This may include:

• A European Commission adequacy decision.
• European Commission-approved Standard Contractual Clauses.
• Binding Corporate Rules.
• Another transfer mechanism permitted under applicable data protection law.

Where appropriate, we will also assess whether supplementary contractual, organisational or technical safeguards are required.

You may contact us for further information about the safeguards relevant to your personal data.

10. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.

Our usual retention approach is:

• General enquiries and potential-client information: Normally up to 24 months after the last meaningful interaction, unless you become a client, consent to ongoing communications or there is another reason to retain it.
• Client contracts and project records: For the duration of the engagement and generally for up to six years afterwards.
• Invoices, payment and tax records: Generally for at least six years or for a longer period where required by law or an ongoing enquiry.
• Creator, contractor and supplier records: For the duration of the relationship and generally for up to six years afterwards.
• Unsuccessful job or creator applications: Normally for up to 12 months unless you agree to longer retention for future opportunities.
• Marketing information: Until you unsubscribe, withdraw consent, object or the information is no longer reasonably current.
• Marketing suppression records: For as long as reasonably necessary to honour your opt-out.
• Cookie and analytics information: For the periods stated in our cookie settings or the relevant provider information.
• Client-controlled personal data: In accordance with the client’s instructions and our agreement with that client.

We may retain information for longer where required in connection with legal proceedings, regulatory enquiries, unresolved disputes or another legal obligation.

Information may also be anonymised so that it can no longer identify an individual. Anonymised information may be retained and used for statistical, analytical and business purposes.

11. Data security

We use appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access.
• Accidental loss.
• Improper use or disclosure.
• Unauthorised alteration.
• Destruction or damage.

Measures may include access controls, secure authentication, staff confidentiality obligations, appropriate contractual protections, software updates, backups and security monitoring.

Access to personal data is limited to people and service providers who reasonably require it for their role.

No internet transmission or storage system can be guaranteed to be completely secure. However, we take reasonable steps appropriate to the nature and sensitivity of the information involved.

12. Automated processing and advertising audiences

Advertising and analytics platforms may use automated systems to analyse activity, measure advertising performance, create audience groups or infer likely interests.

Where these technologies are deployed through our website, we will request consent where required.

Stacks does not ordinarily make decisions about individuals that produce legal or similarly significant effects based solely on automated processing in its own controller activities.

Where we operate advertising or audience tools on behalf of a client, the relevant client’s privacy policy should explain the processing for which that client is responsible.

13. Your data protection rights

Depending on the circumstances, you may have the right to:

• Be informed about how your personal data is processed.
• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data.
• Request restriction of processing.
• Receive certain information in a structured, commonly used and machine-readable format.
• Have certain information transferred to another controller.
• Object to processing based on legitimate interests.
• Object at any time to the use of your personal data for direct marketing.
• Withdraw consent where processing is based on consent.
• Raise a concern with the Data Protection Commission.

These rights are not absolute and may be subject to legal conditions and exemptions.

To exercise a right, contact info@stacks.ie and describe your request. We may need to request additional information to confirm your identity.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

14. Complaints

We encourage you to contact us first if you have a concern about how we process your personal data.

You also have the right to raise a concern or make a complaint to the Irish Data Protection Commission:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Further information is available from dataprotection.ie.

If you live or work in another European Economic Area country, you may also be entitled to contact the supervisory authority in that country.

15. Third-party websites and platforms

Our website may contain links to third-party websites, social media platforms, booking tools and other services.

Those third parties operate under their own privacy policies and may act as independent data controllers. We are not responsible for how an external service processes personal data outside the activities for which Stacks is responsible.

We recommend reviewing the relevant privacy information before providing personal data to a third party.

16. Children

Our website and services are intended primarily for businesses and adults.

We do not knowingly collect personal data from children through our website. If you believe a child has provided personal data to us without appropriate authorisation, please contact info@stacks.ie.

17. Changes to this policy

We may update this privacy policy where our services, technology, business practices or legal obligations change.

The updated version will be published on this page and the “last updated” date will be amended. Where a change is material, we may also provide an additional notice where appropriate.

18. Contacting us

Questions, concerns and data protection requests can be sent to:

Email: info@stacks.ie

Post:
Stacks Creative Ltd
13 Adelaide Road
Dublin 2
D02 P950
Ireland

‍

Heading 2

Heading 3

Heading 4

Heading 5

Heading 6

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

1. Item 1
2. Item 2
3. Item 3

Unordered list

• Item A
• Item B
• Item C

Text link

Bold text

Emphasis

^Superscript

_Subscript