Last updated: 2 July 2026

1. Introduction

This Privacy Policy explains how afolan.com (“we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you visit our website or use our services. We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Data Controller: Aisling Folan Email: [email protected]

(If you have appointed a Data Protection Officer, include their contact details here. Most small businesses are not required to appoint one.)

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide to us directly:

• Contact details (name, email address, phone number) when you fill in a contact form, subscribe to a newsletter, or create an account
• Payment and billing information when you make a purchase (remove if not applicable)
• Any other information you choose to provide in correspondence with us

Information collected automatically:

• Technical data such as IP address, browser type and version, device type, operating system, and screen resolution
• Usage data such as pages visited, time spent on pages, referral source, and navigation paths
• Cookie data, as described in our Cookie Policy

Information from third parties:

• Analytics providers: Google Analytics

3. How We Use Your Personal Data and Legal Bases

Under the GDPR, we must have a legal basis for processing your personal data. We use your data as follows:

Purpose	Data Used	Legal Basis
Responding to your enquiries	Contact details, correspondence	Legitimate interest (responding to your request)
Providing our services / fulfilling orders	Contact, payment, and billing details	Performance of a contract
Sending marketing emails or newsletters	Email address, name	Consent (you may withdraw at any time)
Website analytics and improvement	Technical and usage data	Consent (via cookie banner)
Ensuring website security and preventing fraud	Technical data	Legitimate interest (protecting our website and users)
Complying with legal obligations (e.g. tax, accounting)	Billing and transaction records	Legal obligation

 

4. Who We Share Your Data With

We do not sell your personal data. We may share your data with:

• Service providers who process data on our behalf, such as web hosting providers, email service providers, analytics providers, and payment processors. These providers are bound by data processing agreements and may only use your data on our instructions.
• Professional advisers such as accountants, lawyers, or insurers where necessary
• Public authorities where we are legally required to do so

5. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA), for example in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision (including the EU-US Data Privacy Framework where applicable).

 

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Contact form enquiries: [e.g. 12 months after our last correspondence]
• Newsletter subscriptions: until you unsubscribe
• Transaction and billing records: [e.g. 6 years, as required by Irish tax law]
• Analytics data: [e.g. 26 months]

 

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access – to request a copy of the personal data we hold about you
• Right to rectification – to have inaccurate or incomplete data corrected
• Right to erasure – to request deletion of your data in certain circumstances
• Right to restrict processing – to limit how we use your data in certain circumstances
• Right to data portability – to receive your data in a structured, machine-readable format
• Right to object – to object to processing based on legitimate interests, and to direct marketing at any time
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Rights related to automated decision-making – we do not use automated decision-making or profiling that produces legal or similarly significant effects

To exercise any of these rights, contact us at [your email address]. We will respond within one month. We may need to verify your identity before fulfilling your request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Website: https://www.dataprotection.ie

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption, access controls, secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Cookies

Our use of cookies and similar technologies is explained in our Cookie Policy.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where changes are significant, we may notify you by email or a notice on our website.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: [email protected]