Your Data Rights

Under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, you have specific rights regarding your personal data. This page explains each right, how to exercise it, and what to expect.

1. Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about how it is processed, the purposes, the categories of data, and the recipients.

2. Right to Rectification (Article 16)

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.

3. Right to Erasure (Article 17)

Also known as the "right to be forgotten", you may request deletion of your personal data where:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Note: We may retain certain data where required by law (e.g. Financial records for tax purposes) or where we have a legitimate legal basis.

4. Right to Restriction of Processing (Article 18)

You may request that we restrict the processing of your personal data while we verify its accuracy, assess a legitimate interest objection, or where processing is unlawful but you prefer restriction over erasure.

5. Right to Data Portability (Article 20)

Where processing is based on consent or a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g. CSV or JSON), and to transmit it to another controller.

6. Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.

7. Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. How to Submit a Request

To exercise any of your rights, please email us at:

Please include:

  • Your full name and the email address associated with your data
  • A clear description of the right you wish to exercise
  • Any additional information that may help us locate your data

9. Identity Verification

To protect your data, we may need to verify your identity before acting on your request. We will ask you to confirm details we already hold (such as your email address or account information). We will never ask for sensitive documents like passport copies unless absolutely necessary and will explain why.

10. Response Timeline

We will respond to your request within one month of receipt. If your request is complex or we receive a large number of requests, we may extend this by a further two months, but we will inform you of the extension and the reasons within the first month.

Requests are handled free of charge. In exceptional cases (manifestly unfounded or excessive requests), we may charge a reasonable fee or refuse the request, providing our reasons.

11. Right to Complain

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Data Protection Commission (DPC):

  • Data Protection Commission
  • 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
  • Phone: +353 1 765 0100 / 1800 437 737 (Freephone)
  • Email: info@dataprotection.ie
  • Website: www.dataprotection.ie

We encourage you to contact us first so we can try to resolve your concern.

12. Related Policies