Privacy Policy

01 Who we are

Intirbim Consultancy Services Limited is a project controls and digital delivery consultancy registered in Ireland, with a delivery office in Trivandrum, Kerala, India. For the purposes of data protection law, Intirbim is the data controller responsible for the personal data described in this policy.

02 Scope of this policy

This policy applies to personal data we process about:

• visitors to www.intirbim.com and anyone who contacts us through it;
• clients, prospective clients, and their representatives;
• suppliers, subcontractors, sub-consultants, and recruitment partners;
• job applicants and candidates introduced to us;
• other professional contacts in the course of our business.

Where we process personal data on behalf of a client as part of delivering our services (for example, project team data within a client's systems), we typically act as a data processor, and that processing is governed by our contract with the client rather than this policy.

03 Data we collect

Depending on your relationship with us, we may collect:

Identity & contact data

Name, job title, employer, business email address, business phone number, and postal address.

Professional data

Information you share in the course of business — such as project requirements, correspondence, CVs and qualifications (for candidates and personnel), and records of our dealings with you.

Technical data

When you visit our website, we may collect your IP address, browser type and version, device information, and pages viewed, primarily for security and to keep the site functioning correctly.

04 How we collect it

• Directly from you — when you email us, complete a form, share documents, or correspond with us;
• Automatically — through cookies and similar technologies when you use our website (see section 6);
• From third parties — such as recruitment partners, public business directories, professional networks (e.g. LinkedIn), or referrals.

05 Why we use it & our lawful basis

We only process personal data where we have a lawful basis to do so under the GDPR:

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us about this balancing assessment at any time using the contact details below.

06 Cookies & analytics

Cookies are small files placed on your device. We use strictly necessary cookies to make our website work, and we may use analytics cookies to understand how the site is used so we can improve it.

You can control or delete cookies through your browser settings. Restricting strictly necessary cookies may affect how the website functions.

07 Sharing & disclosure

We do not sell your personal data. We may share it with:

• Service providers and processors who support our operations — for example IT, hosting, email, and professional advisers — under contracts that require them to protect your data;
• Our delivery office and personnel in Ireland and India, on a need-to-know basis to deliver services;
• Subcontractors and sub-consultants where necessary to deliver a project;
• Authorities or regulators where we are required to do so by law, or to establish, exercise, or defend legal claims.

08 International transfers

Intirbim operates across Ireland and India. As a result, your personal data may be transferred to, and processed in, India and potentially other countries outside the European Economic Area (EEA).

Where we transfer personal data outside the EEA, we put appropriate safeguards in place as required by the GDPR — typically the European Commission's Standard Contractual Clauses, together with any additional measures needed to protect your data. You can request a copy of the relevant safeguards using the contact details below.

09 How long we keep data

We keep personal data only for as long as necessary for the purposes set out in this policy, including to satisfy legal, accounting, or reporting requirements. As general guidance:

When data is no longer needed, we securely delete or anonymise it.

10 Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse — including access controls, secure storage, and staff awareness. No system can be guaranteed perfectly secure, but we work to reduce risk and to respond promptly to any incident.

11 Your rights

Under the GDPR, you have the following rights in relation to your personal data:

12 Exercising your rights

To exercise any of these rights, contact us using the details in section 16. We will respond within one month, as required by the GDPR (this may be extended for complex requests, in which case we will let you know). We may need to verify your identity before acting on a request. Exercising your rights is free of charge in most cases.

13 Complaints

We would always prefer the opportunity to resolve any concern directly, so please contact us first. You also have the right to lodge a complaint with the Irish data protection supervisory authority:

If you are based in another EEA country, you may also complain to your local supervisory authority.

14 Children's data

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

15 Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.