What personal data we collect from website visitors and clients, why, who we share it with, how long we keep it, and your rights under the GDPR.
Version of 19 October 2026.
The data controller is Jasna Škiljan, sole trader, trading as Smart Consulting Lab (CRO business name no. 733476), 63 The Green, Clonattin Village, Gorey, Co. Wexford, Y25 R650, Ireland. For any privacy question or request, email jasna@smartconsultinglab.com or call 083 082 8368. We are not required to appoint a data protection officer.
Most of this data comes from you. Where you have authorised us as your tax agent, we also receive data about you from Revenue through ROS.
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your enquiry, holding the intro call and preparing a quote | Steps you ask for before a contract (Art. 6(1)(b)) |
| Delivering the service: tax returns, bookkeeping, coaching, consulting, invoicing | Performance of our contract with you (Art. 6(1)(b)) |
| Processing a withdrawal from a contract, confirming receipt and making the refund | Legal obligation under consumer law (Art. 6(1)(c)); recording time and IP address of receipt as proof: legitimate interest (Art. 6(1)(f)) |
| Identity checks, risk assessment and reporting under the anti-money laundering law | Legal obligation (Art. 6(1)(c)) |
| Keeping accounting and tax records, filing returns and dealing with Revenue | Legal obligation (Art. 6(1)(c)) and contract (Art. 6(1)(b)) |
| Health data for medical expenses relief | Your explicit consent (Art. 9(2)(a)), which you can withdraw at any time |
| Website security and server logs | Our legitimate interest in keeping the site safe (Art. 6(1)(f)) |
| Defending or making legal claims and handling complaints | Our legitimate interest (Art. 6(1)(f)) |
We need the client data listed above to deliver the service and to meet our legal obligations. If you do not provide it, we cannot act for you. We do not use your data for marketing emails, we do not sell it, and we do not make decisions about you by automated means alone.
We share your data only as far as needed for the purposes above:
Some of these providers are based in the United States or use servers there: Zoom, WhatsApp (Meta), Microsoft (OneDrive), Google Fonts, and Koalendar’s cloud hosting. Data you send through them may therefore be transferred to the USA. We use these providers only where the transfer is covered by an adequacy decision (the EU-U.S. Data Privacy Framework, for providers certified under it) or by the European Commission’s Standard Contractual Clauses in the provider’s data processing terms. You can ask us for a copy of the relevant safeguards.
| Data | How long |
|---|---|
| Enquiries, contact form messages and bookings that do not lead to an engagement | 12 months after our last contact |
| Withdrawals from a contract and our confirmation | 6 years after the withdrawal, as proof in case of a dispute |
| Client files: tax, accounting and bookkeeping records, engagement letters and invoices | 6 years after the end of the engagement, as Irish tax law requires us to keep records for 6 years |
| Anti-money laundering identity checks and records | At least 5 years after the end of the business relationship, as the 2010 Act requires |
| Coaching and consulting notes and summaries | 2 years after the last session, unless they form part of a client file above |
| WhatsApp messages | Documents are moved to the client file and deleted from WhatsApp; the chat is deleted when the engagement ends |
| Server logs | As set by our hosting provider, normally no more than a few weeks |
After these periods we delete the data or make it anonymous. We may keep it longer only if it is needed for a legal claim or an investigation by an authority.
You have the right to:
To use any of these rights, write to jasna@smartconsultinglab.com. We reply within one month. We may ask you to confirm your identity first.
The anti-money laundering law may limit some rights, for example where telling you about a report to the authorities would be against the law.
If you think we have not handled your data properly, please tell us first so we can put it right. You also have the right to lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, dataprotection.ie, or with the data protection authority in the EU country where you live or work.
This site sets no tracking or advertising cookies of its own and uses no analytics. The embedded Koalendar booking calendar may set cookies needed for booking to work. If we add analytics later, we will update this notice and ask for your consent first.
The site runs over an encrypted connection (HTTPS). Client documents are kept in access-controlled systems, and only Jasna Škiljan has access to client files. If a data breach is likely to put your rights at risk, we will tell you and the Data Protection Commission as the GDPR requires.
We update this notice when the way we handle data changes. The date at the top shows the current version.
Smart Consulting Lab