Privacy Notice

Privacy Notice

This notice explains how SmartPOST handles personal information — both the information we hold for our own business purposes, and the address information clients give us so we can deliver on their behalf.

Last updated September 2026

Who we are

SmartPOST is a trading name of Leaflet Broker Ltd, an Irish company providing campaign planning and addressed mail delivery services.

For questions about this notice or about how your information is handled, contact privacy@smartpost.ie.

Two different roles

We are the controller for information we decide to collect and use ourselves: website enquiries, quote requests, client and supplier contacts, marketing contacts, and our own staff records.

We are usually a processor when a client — a theatre, club, school or company — gives us a list of member or customer addresses purely so we can deliver items to them. In that situation the client decides what happens to the data and we act on their written instructions under a data processing agreement. If you are on such a list and want your details changed or removed, contact the organisation that sent you the item; we will pass on any request we receive and help them respond.

What we collect and why

WhoInformationWhyLawful basis
Website enquiries and quote requestsName, email, phone, company, messageTo respond and prepare a quoteLegitimate interests / steps before a contract
Clients and suppliersContact details, account and billing informationTo provide and invoice for our servicesContract; legal obligation for records
Marketing contacts (B2B)Business contact detailsTo offer relevant delivery servicesLegitimate interests; consent where required
Recipients on a client's listAddress, Eircode, sometimes a name or referenceTo deliver the client's itemDetermined by the client as controller
Delivery staffRoute activity, completion times, location evidenceTo confirm delivery and check quality of serviceContract; legitimate interests

We ask clients for the minimum needed to deliver — normally address and Eircode, plus a name only where the item is addressed to a named person. We do not ask for phone numbers, email addresses, dates of birth or any special category information for delivery purposes.

Who sees the information

  • Authorised SmartPOST staff, limited to the campaign they are working on.
  • Delivery teams, who receive only the route information needed to complete their own assigned work — not the client's full list.
  • Service providers acting for us, including our hosting and platform providers, business email and file storage, and mapping and routing providers.
  • Our associated delivery operation, All Homes, where it carries out delivery work on our behalf under an equivalent written agreement.

We do not sell client lists, and we never reuse a client's list for our own marketing or for another client.

Where information is held

Information is held on systems within the European Economic Area wherever possible. Where a provider processes data outside the EEA, we rely on the safeguards required by GDPR, such as European Commission standard contractual clauses.

How long we keep it

  • Client-supplied address files: kept for the campaign, then for a short period afterwards to deal with delivery queries and failed-address reconciliation — normally 30 days after completion — and then deleted, unless the client instructs otherwise.
  • Campaign statistics without personal data (quantities, dates, areas, completion rates): kept longer as our own business record.
  • Enquiries and quote requests: kept while we are in contact and for a reasonable period afterwards.
  • Accounting and tax records: kept for the period required by Irish law.

Our full approach is set out on the Data Security page.

Your rights

You have the right to ask for a copy of your information, to have it corrected or erased, to restrict or object to its use, and to data portability where it applies. Where we act as a processor for a client, we will forward your request to that client and help them answer it.

Write to privacy@smartpost.ie. We aim to respond within one month. You can also complain to the Data Protection Commission — see our Complaints & Redress page.

Cookies

Our website uses only the cookies needed to make it work. See the Cookie Policy for details.

Changes to this notice

We update this notice when our services or systems change. The date at the top shows when it was last revised.