Privacy Policy

Last updated: 5 August 2026

This policy explains how AIP — AI Procurement ("AIP", "we") collects and uses personal data when you use aiprocurement.ie or contact us. We are based in Ireland and act as the data controller for the information described below.

What we collect

• Information you give us via our contact and supplier forms — your name, company, work email, phone (optional), approximate spend, and anything you write in the message.
• Information collected automatically — your IP address and basic technical request data, and, only if you consent, analytics about how you use the site (via Google Analytics through Google Tag Manager).

Why we use it (legal basis)

• To respond to your enquiry and take steps toward doing business with you — legitimate interests / pre-contract steps (Art. 6(1)(b)/(f) GDPR).
• To measure and improve the site — your consent (Art. 6(1)(a) GDPR), which you give or refuse via the cookie banner and can change at any time.

Cookies & analytics

We use Google Analytics via Google Tag Manager to understand site usage. Analytics cookies are not set until you accept them in our cookie banner (Google Consent Mode defaults analytics to "denied"). Withdrawing consent is as easy as giving it — change your cookie choice to re-open the banner at any time. Strictly necessary technical processing (e.g. serving the page securely) does not require consent.

Who we share it with

We use trusted providers who process data on our behalf (our "sub-processors"):

• Google Cloud — hosting of the AIP application and its database, in the EU (europe-west1, Belgium). Your account and procurement data is stored in the EU.
• Google (Gemini API) — powers the "source a part" web search. Only the product description you search for is sent — never your account, contact or supplier data.
• Email (Google Workspace / Gmail) — delivering and handling enquiries.
• Google Analytics / Tag Manager — site-usage analytics, only if you consent. This is a US-based service and may involve transfers outside the EEA under the EU–US Data Privacy Framework and Standard Contractual Clauses.

Your core application data is hosted in the EU. We do not sell your data. Business customers can request our current sub-processor list and a Data Processing Agreement.

How long we keep it

Enquiry and supplier-listing details are kept for as long as needed to respond and, where relevant, for the duration of our business relationship, then deleted. Analytics data is retained according to our Google Analytics settings.

Your rights

Under the GDPR you can request access to, correction or erasure of your data, restrict or object to processing, request portability, and withdraw consent at any time. To exercise any of these, email contact@aiprocurement.ie. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

Contact

Questions about this policy or your data: contact@aiprocurement.ie.

We may update this policy as the product grows; the "last updated" date above will change. This is a plain-English notice, not legal advice — we review it as our data handling evolves.