PHSDAI TRANSFORMATION
[ + ]  PRIVACY / PLAIN LANGUAGE

Privacy notice.

This notice explains how Esme Consulting Ltd, trading as Phased AI, handles personal data when you visit this website, contact us, book a call or subscribe to updates.

LAST REVIEWED: 2 SEPTEMBER 2026

[ 00 -9 ]

/01  Who is responsible

Esme Consulting Ltd, trading as Phased AI, is the controller for the personal data described in this notice.

Registered address
74 South Mall, Centre, Cork, T12 HWX0, Ireland

Privacy contact
contact@phased.ai

/02  What we collect

Depending on how you use the site, we may collect:

  • Your name, work email address, organisation, role and message.
  • Information you include when booking a call, such as the business problem, preferred time and attendees.
  • Newsletter subscription and consent records.
  • Correspondence and follow-up records.
  • Basic device, browser, IP, referral and site-use information generated by essential security, hosting and any consented analytics services.
  • Cookie or consent preferences.

Please do not send confidential client data, special-category personal data or production credentials through the contact or scheduling forms.

/03  Why we use it

PurposeTypical lawful basis
Respond to an enquiry or scope a requested serviceLegitimate interests and, where relevant, steps requested before a contract
Schedule and manage a callLegitimate interests and steps requested before a contract
Deliver contracted services and administer the client relationshipPerformance of a contract and legitimate interests
Send an email newsletterConsent
Keep the website secure, diagnose faults and prevent misuseLegitimate interests and legal obligations where applicable
Maintain required financial and business recordsLegal obligation

Where we rely on legitimate interests, we use the data only where those interests are not overridden by your rights and interests.

/04  Cookies and analytics

The site may use essential storage required for security, session management, consent preferences or form operation. Non-essential analytics, advertising or embedded-service cookies must not be placed before the required consent.

The live cookie banner and preference centre will list the current cookies, providers, purposes and durations.

/05  Service providers and transfers

We may use service providers for website hosting, email, scheduling, forms, newsletter delivery, analytics, security and professional support. They may process personal data on our instructions or, in some cases, as separate controllers under their own terms.

Some providers may process data outside the European Economic Area. Where required, we use an appropriate transfer mechanism and assess the safeguards that apply.

/06  How long we keep it

We retain personal data only for as long as needed for the purpose collected, including legal, accounting and dispute requirements.

  • Unsuccessful or inactive business enquiries: normally up to 24 months after the last meaningful contact.
  • Newsletter data: until you unsubscribe or consent is otherwise withdrawn, subject to a minimal suppression record where needed.
  • Client and transaction records: for the period required by contract and applicable legal or tax obligations.
  • Security logs: for the limited period set by the relevant system and security need.

/07  Who receives the data

We do not sell personal data. Access is limited to people and providers who need it for the purposes described. We may disclose information where required by law, to protect legal rights or in connection with professional advice or a business transaction subject to appropriate safeguards.

/08  Your rights

Depending on the circumstances, you may have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion.
  • Restrict or object to processing.
  • Receive certain data in a portable form.
  • Withdraw consent at any time, without affecting earlier lawful processing.
  • Complain to a supervisory authority.

To exercise a right, email contact@phased.ai. We may need to verify your identity before acting on the request.

In Ireland, the supervisory authority is the Data Protection Commission.

/09  Client data in delivery

This website notice does not replace the contractual data-protection terms for client work. The controller and processor roles, security measures, authorised processing, subprocessors, retention and deletion arrangements for an engagement are defined in the relevant contract and data-processing agreement.

We do not claim that all client data remains in one location. The approved architecture and data-flow documentation for each engagement describe where information is stored and processed.

/10  Changes to this notice

We will update the review date and this notice when the site's processing or applicable requirements change materially.

CONTACT
US
[ + ]  START A CONVERSATION

What are you trying to change?

A process that could work better, an application you need built or an AI opportunity you're still trying to understand. Tell us about it.