Privacy Notice of 3R Consulting Ltd.

Last updated: 14 August 2026

At 3R Consulting Ltd., we are committed to protecting and respecting your privacy.

This Privacy Notice explains what personal information we collect, why we collect it, how we use and protect it, when it may be shared with service providers, how long we retain it and the rights available to you.

This notice applies to visitors to our website, people who make enquiries, prospective clients, clients, portal users, people who participate in Discovery Sessions or consultations, and people who choose to receive 3R insights and marketing communications.

Who we are

3R Consulting Ltd. is the controller responsible for the personal information described in this notice.

Questions about this notice or our privacy practices may be sent to:

Peter Lawless
3R Consulting Ltd.
Office B1, K1 Greenogue Industrial Estate
Rathcoole, Co. Dublin
D24 YP95
Ireland

Email: consultant@3r.ie

How we collect information

We may collect information when you:

  • Visit or interact with our website
  • Submit a Business Growth Enquiry or another website form
  • Contact us by email, telephone or another communication channel
  • Participate in a Discovery Session, consultation, meeting or workshop
  • Create or use a 3R portal account
  • Supply documents, business information or system access for agreed research or services
  • Ask us to prepare research, recommendations, reports or proposals
  • Purchase or use a 3R service
  • Choose to receive 3R insights or marketing communications
  • Provide feedback, a review, a testimonial or other contribution
  • Interact with one of our authorised service providers

We may also obtain relevant information from publicly available sources, such as company websites, public business directories, search engines, advertising libraries, social media profiles and other public sources used for legitimate business research.

Information we may collect

Depending on your interaction with 3R, we may collect:

  • Your name, job title and organisation
  • Your business email address and telephone number
  • Your website address
  • Your communication and appointment preferences
  • Details contained in your Business Growth Enquiry
  • Information about your business, customers, services, competitors, markets, objectives and challenges
  • Information about marketing activity, enquiry levels, budgets, capacity and commercial objectives
  • Information supplied during a Discovery Session, consultation, meeting or workshop
  • Session notes, transcripts and recordings where you have been informed that recording will take place
  • Documents and information supplied for research or service delivery
  • Information about permissions granted to services such as Google Search Console, analytics or advertising platforms
  • Portal account details, access roles, activity history and audit records
  • Communications between you and 3R
  • Feedback, reviews, testimonials and publication permissions
  • Marketing preferences and records of consent or withdrawal
  • Website usage information, such as IP address, browser type, device information, referring page, landing page and campaign information
  • Cookie and consent preferences
  • Security, fraud-prevention and technical log information

We ask that you do not send personal information about your own customers, employees or other individuals unless it is necessary, lawful and appropriate for the agreed purpose.

You should never send passwords through an enquiry form or ordinary email. Where system access is required, 3R will use an appropriate permission or access process wherever possible.

Why we use your information

We may use your information to:

  • Receive, review and respond to an enquiry
  • Create and manage a prospective-client or client record
  • Assess your requirements and assign an appropriate 3R team member
  • Arrange and conduct Discovery Sessions, consultations and meetings
  • Request information and permissions required for agreed research
  • Research your website, industry, market and competitors
  • Prepare reports, recommendations, proposals and service plans
  • Deliver and manage contracted services
  • Maintain the 3R portal and provide authorised access
  • Communicate progress, actions and next steps
  • Process orders, invoices and payments
  • Maintain accurate internal and audit records
  • Improve the quality, consistency and security of our services
  • Protect our website, portal, systems, clients and team from misuse, fraud or security threats
  • Comply with legal, regulatory, accounting and tax obligations
  • Send useful 3R insights and marketing communications where you have chosen to receive them
  • Measure the performance of our website and communications where the required consent has been obtained
  • Manage feedback, testimonials and case-study permissions

We will not use private client or prospect information for an unrelated purpose without an appropriate lawful basis and, where required, further notice or consent.

Our lawful bases

The lawful basis we rely on depends on the purpose for which information is processed.

Steps requested before entering a contract

We may process information to respond to an enquiry, conduct a Discovery Session, prepare research or develop a proposal at your request.

Performance of a contract

We may process information where it is necessary to provide and manage services you have agreed to purchase from 3R.

Consent

We rely on consent for activities such as optional electronic marketing, non-essential cookies and other processing where consent is legally required.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

Legitimate interests

We may process information where necessary for legitimate business interests, including maintaining appropriate client records, improving service quality, administering and protecting our systems, preventing fraud and managing business relationships.

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests require additional protection.

Legal obligation

We may process and retain information where required to comply with applicable legal, regulatory, accounting, tax or other obligations.

Business Growth Enquiries and client records

A valid Business Growth Enquiry may automatically create a protected record within 3R’s systems or portal. The record may be reviewed by an authorised team member, assigned to an appropriate owner and used to organise follow-up actions.

The portal may suggest internal priorities or values using information supplied in the enquiry. These suggestions support human decision-making. A member of the 3R team remains responsible for reviewing and confirming any material decision. 3R does not make decisions producing legal or similarly significant effects about prospective clients solely through automated processing.

Discovery Sessions and consultations

A Discovery Session may be conducted by a member of the 3R team or, where offered and chosen by you, by an authorised 3R AI agent.

Before an AI-led session begins:

  • You will be clearly told that you are interacting with an AI system
  • You will have the option to choose a human-led session
  • You may pause the AI session and request a human at any time
  • You will be informed if the session is being recorded or transcribed
  • You will be directed to this Privacy Notice

Information supplied during a session may be recorded, transcribed, summarised and added to your protected 3R record for the purpose of understanding your requirements, preparing research, producing your report and providing agreed follow-up.

If an AI system cannot interpret an answer confidently, the answer may be flagged for review by an authorised 3R consultant.

How we use artificial intelligence

3R may use authorised artificial intelligence services to assist with:

  • Conducting an AI-led Discovery Session where you have chosen that option
  • Transcribing or summarising a session
  • Organising information supplied by you
  • Identifying missing or unclear information
  • Supporting research preparation
  • Drafting reports, recommendations or internal working documents
  • Improving the consistency and accessibility of the 3R process

AI-generated material is subject to appropriate human review according to its purpose and importance.

Private client or prospect information:

  • Will not be used by 3R to train general-purpose artificial intelligence models
  • Will not be authorised for use by an AI provider to train its general models
  • Will not become publicly available through the 3R Knowledge Engine
  • Will not be published in articles, case studies, testimonials or community resources without separate and explicit authorisation
  • Will remain subject to the access, security and retention controls described in this notice

An AI system may process private information during an authorised session or task in order to provide the relevant 3R service. Processing information for a specific task is different from using it to train an AI model.

The 3R Knowledge Engine and public content

3R may research general business, marketing, customer and sector questions using public sources. This research may contribute to educational resources, articles, guides and other public Knowledge Engine content.

Private enquiry, client, session, portal or consultation information will not be moved into the public Knowledge Engine.

Commercial figures, budgets, customer values, lifetime values, conversion information, capacity, internal challenges, private documents and other confidential information will not be published.

A business or individual will be publicly identified as a contributor, member, testimonial provider or case-study participant only where an appropriately authorised person has explicitly approved that publication.

Marketing and 3R insights

You may be invited to receive useful 3R insights, articles, invitations and updates relevant to your business.

Electronic marketing to prospective clients is based on a clear, optional choice. Marketing consent is separate from the processing necessary to respond to your enquiry or provide a service. You are not required to accept marketing to submit an enquiry, attend a Discovery Session or receive a 3R service.

Marketing choices will not be preselected.

Where you have chosen to receive marketing, we may use information about your stated interests to send more relevant communications. You can withdraw your consent or change your preferences at any time by:

  • Using the unsubscribe or preferences link provided in a marketing email, or
  • Emailing consultant@3r.ie

We will retain an appropriate suppression record where necessary to ensure that a withdrawn or opted-out address is not accidentally added back to marketing communications.

Who can access your information

Access to personal information is limited to authorised people who require it for their role or for an agreed business purpose.

This may include:

  • 3R employees and authorised consultants
  • Approved subcontractors working under 3R’s instructions
  • Website and portal hosting providers
  • Email and communications providers
  • Calendar and appointment providers
  • Secure cloud-storage and backup providers
  • Analytics and consent-management providers
  • AI, transcription and related technology providers
  • Payment, accounting and professional-advisory providers
  • Regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required

We disclose only the information reasonably necessary for the relevant purpose.

We do not sell or rent personal information. We do not provide personal information to third parties for their own independent marketing.

Where another organisation processes information on our behalf, we require appropriate contractual, confidentiality, security and data-protection commitments.

International transfers

Some technology or service providers may process information outside Ireland or the European Economic Area.

Where personal information is transferred outside the European Economic Area, 3R will use an appropriate transfer mechanism and safeguards as required by applicable data-protection law. These may include an adequacy decision, approved Standard Contractual Clauses and any supplementary safeguards considered necessary.

You may contact us for further information about safeguards relevant to your information.

How long we retain information

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting, tax, contractual and dispute-resolution requirements.

Retention periods may differ according to the information and purpose:

  • Enquiry records are reviewed periodically and will normally be retained for no longer than two years after the last meaningful interaction unless a longer period is required or justified
  • Marketing information is retained until consent is withdrawn or until it is no longer reasonably required, subject to periodic review
  • Discovery Session recordings and transcripts are retained only for as long as needed to prepare the relevant outputs, provide agreed follow-up and maintain an appropriate client record
  • Active client and portal information is retained for the duration of the relationship and for an appropriate period afterwards
  • Contracts, invoices and accounting information are retained for the period required by applicable law
  • Security and technical logs are retained for periods proportionate to their purpose
  • Publication permissions are retained for as long as the relevant material remains published
  • Backup copies may remain for a limited period as part of normal secure backup cycles

When information is no longer required, it will be securely deleted or anonymised.

Security

3R applies appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Measures may include, as appropriate:

  • Role-based access controls
  • Individual user accounts
  • Authentication and password controls
  • Secure transmission
  • Activity and audit records
  • Access reviews
  • Secure backup arrangements
  • Confidentiality obligations
  • Supplier and processor agreements
  • Security updates and monitoring
  • Incident-response and recovery procedures

No internet-based system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will assess and respond to it in accordance with applicable law, including notification to the Data Protection Commission and affected individuals where required.

Cookies and similar technologies

Our website may use cookies and similar technologies.

Some cookies are strictly necessary for the website or a service requested by you to function. These cookies do not require consent.

Other cookies, including analytics, advertising, personalisation and conversion-tracking cookies, will be used only where the required consent has been obtained.

Where non-essential cookies are used, you should be able to:

  • Accept or reject them
  • Choose between available cookie categories
  • Change or withdraw your consent
  • Access information explaining the cookies, providers, purposes and durations

You can also manage cookies through your browser settings. Blocking strictly necessary cookies may affect the operation of some website features.

Please use the cookie controls provided on our website for the most direct way to manage your preferences.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Be informed about how your information is processed
  • Request access to your personal information
  • Request correction of inaccurate or incomplete information
  • Request erasure of information
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Object at any time to direct marketing, including related profiling
  • Receive certain information in a portable format
  • Withdraw consent at any time where processing is based on consent
  • Request information about applicable automated processing
  • Lodge a complaint with the Data Protection Commission

These rights may be subject to legal conditions, exemptions or the need to retain certain information for legitimate or statutory purposes.

To exercise a right, email consultant@3r.ie. We may need to verify your identity before disclosing or changing personal information.

Complaints

If you have concerns about how 3R processes your information, please contact us first so that we can investigate and respond.

You also have the right to complain to:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland

Website: https://www.dataprotection.ie/

External links

Our website may contain links to websites operated by other organisations.

3R does not control the privacy practices of external websites. If you follow an external link, please review the privacy information provided by that organisation before supplying personal information.

Changes to this notice

We will review this Privacy Notice regularly and update it when our services, technology, legal obligations or processing activities change.

The current version will be published on this page with its latest update date.

If a change materially affects how we use information already supplied to us, we will provide additional notice or seek consent where required.