1. Identity of the controller
Online Finance Support is the trading name of Maria Turkiewicz, providing remote bookkeeping and financial administration services from Waterford, Ireland.
For the personal data described in this notice, Online Finance Support is the data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018.
Enquiries concerning this notice, and requests to exercise any right set out in section 8, should be addressed to co*****@******************rt.com.
2. Scope
This notice applies to individuals who visit our website, who contact us, and who engage us as clients.
Where we process personal data contained within a client's accounting records — including data relating to that client's customers, suppliers and personnel — we act as a data processor on that client's documented instructions, and the client is the controller. Individuals whose data appears in such records should direct any request to the client concerned. Requests received by us will be referred to that client without undue delay.
Clients receive further information concerning the processing of their data at the point of engagement.
3. Personal data we process, and the basis on which we process it
Where you contact us or request a quotation, we process your name, contact details and the content of your enquiry, for the purpose of responding and, where applicable, preparing a quotation. The legal basis is the taking of steps at your request prior to entering into a contract, and our legitimate interest in responding to enquiries addressed to us.
Where you engage with us as a client, we process your contact, business and billing details for the purpose of delivering the services and invoicing you. The legal basis is the performance of our contract with you.
Where you visit our website, our hosting provider records technical information including your IP address, browser type and the pages accessed, for the purpose of maintaining the availability and security of the site. The legal basis is our legitimate interest in operating a secure and functioning website.
We do not process special categories of personal data through this website. We do not carry out profiling, and no decision affecting you is taken by automated means.
4. Whether you are obliged to provide personal data
You are not obliged to provide any personal data in order to visit this website. If you contact us without providing contact details, we will be unable to respond.
Where you engage with us as a client, the provision of the information necessary to deliver the services is a contractual requirement. In addition, we are required by law to obtain and retain evidence of your identity before acting for you. Where the information required is not provided, we will be unable to accept or continue the engagement.
5. Disclosure of personal data
We do not sell personal data, and we do not disclose it for the marketing purposes of any other party.
We disclose personal data to the following categories of recipient, in each case only so far as is necessary for the purposes set out above:
– providers of information technology and cloud services, including website hosting, business email and file storage;
– the accounting software provider in which client bookkeeping is performed;
– our accountant and professional advisers;
– our insurers, in the event that a claim is made or threatened against us;
– the Revenue Commissioners, and any competent authority to which disclosure is required by law.
Clients are informed of, and authorise, the specific providers engaged, in the data processing agreement forming part of our Services Agreement. Details will be furnished to any other person on request.
We are required in certain circumstances to make disclosures to statutory authorities and may be prohibited by law from notifying the person concerned that such a disclosure has been made. Such obligations override our duty of confidentiality. They do not permit disclosure for any other purpose.
6. Transfers outside the European Economic Area
Certain of the providers referred to at section 5 may store personal data outside the European Economic Area. Where such a transfer occurs, it is made subject to an appropriate safeguard recognised under Chapter V of the General Data Protection Regulation, being either an adequacy decision of the European Commission or the Commission's standard contractual clauses. A copy of the relevant safeguard is available on request.
7. Retention
Enquiries which do not result in an engagement are retained for twelve months from the date of last contact.
Records required to be retained for taxation purposes are retained for six years.
Records of identity obtained in order to meet our obligations under anti-money-laundering legislation are retained for five years following the end of the business relationship.
All other personal data is retained only for so long as is necessary for the purpose for which it was obtained, or for such longer period as may be required by law.
8. Your rights
You have the right to request access to the personal data we hold concerning you; to have inaccurate data rectified and incomplete data completed; to have data erased; to restrict or to object to our processing; and to receive your data in a structured, commonly used and machine-readable format.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
You have the right at any time to object to the processing of your personal data for direct marketing purposes. Every marketing communication contains an unsubscribe facility, which is acted upon immediately.
Requests should be made to co*****@******************rt.com. We will respond within one month of receipt, without charge. We may first require confirmation of your identity.
Two limitations apply. Records which we are required by law to retain may not be erased before the expiry of the applicable period. Where legislation requires information to be withheld, we may confirm only that we are unable to provide it, and then only to the extent permitted.
9. Complaints
If you consider that we have not handled your personal data appropriately, we ask that you raise the matter with us in the first instance.
You are also entitled to lodge a complaint with the supervisory authority: the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, dataprotection.ie.
10. Cookies
This website uses only those cookies which are strictly necessary for its operation.
11. Amendment of this notice
We may amend this notice from time to time. The effective date at the head of this document will be updated accordingly, and where an amendment materially affects personal data already held, those affected will be notified directly.
This document was last updated on 13 September 2026.