Privacy Policy

1. Introduction

Cexathilem Limited (referred to as "we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://cexathilem.ie/ (the "Site"), including all subpages and related services.

Data Controller: Cexathilem Limited, 15 Henry Street, Limerick, Ireland

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site. By accessing and using our Site, you signify that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy. We encourage you to review this policy regularly as we may update it from time to time.

2. What Personal Data We Collect

We collect personal data that you voluntarily provide to us and data that is automatically collected when you visit our Site. The types of personal data we collect include:

• Contact Information: Name, email address, phone number, and postal address when you submit inquiry forms or contact us directly
• Device Information: Information about your device including device type, operating system, browser type, and unique device identifiers
• Usage Data: Pages you visit, the time and date of your visits, the duration of your visits, links you click, and actions you take on our Site
• IP Address: Your Internet Protocol address and general location information derived from IP address (city/region level only)
• Cookies and Tracking Technology: Information stored through cookies, web beacons, pixels, and similar tracking technologies
• Form Data: Information you provide through any inquiry forms, feedback forms, or surveys

3. How We Collect Your Data

We collect your personal data through the following methods:

• Direct Submission: When you fill out our contact inquiry form or submit any other form on our Site
• Cookies: We use both session-based and persistent cookies to enhance your browsing experience and understand Site usage patterns
• Web Analytics: We use Google Analytics to track user behavior, page views, and engagement metrics. This service uses cookies to collect and analyze Site usage data
• Server Logs: Our web server automatically logs information about your visits, including IP address, browser type, pages accessed, and timestamp data
• Third-Party Services: If applicable, data may be collected through third-party service providers we use to deliver services

4. Legal Basis for Processing Your Data

Under the General Data Protection Regulation (GDPR) and Data Protection Act 2018, we process your personal data only where we have a lawful basis to do so. Our legal bases include:

• Consent: Where you have explicitly consented to the processing of your data, such as through our contact form or cookie consent banner
• Legitimate Interest: Where we have a legitimate business interest in processing your data that does not override your rights and freedoms, such as improving our Site functionality and security
• Contract Performance: Where processing is necessary to perform a contract with you or to respond to your inquiries
• Legal Obligation: Where we are required by law to process your data, such as for tax or accounting purposes

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Service Delivery: To respond to your inquiries, provide you with the information you request, and maintain contact with you regarding services
• Site Improvement: To analyze how you use our Site, understand user preferences, and improve our content, functionality, and user experience
• Analytics and Reporting: To track Site performance, measure effectiveness of content, and generate statistical reports about Site usage
• Security and Fraud Prevention: To protect against fraud, unauthorized access, and other security threats to our Site and users
• Marketing Communications: To send you promotional materials, newsletters, or updates about our services (only with your explicit consent, which you can withdraw anytime)
• Legal Compliance: To comply with legal obligations, regulatory requirements, and law enforcement requests
• Cookie Management: To store your cookie consent preferences so we respect your choices regarding data collection

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are as follows:

• Contact Form Submissions: 2 years from the date of submission, unless you request deletion earlier
• Analytics Cookies: 13 months from the date of collection by Google Analytics
• Session Cookies: Deleted automatically when you close your browser
• Email Communications: Retained for 2 years for record-keeping purposes, unless you unsubscribe earlier
• Server Logs: Retained for 6 months for security and troubleshooting purposes
• IP Address Data: Stored in anonymized form after 13 months for analytics purposes

After the retention period expires, we securely delete your data unless we are required to retain it for legal, tax, or accounting purposes. If you request deletion of your data, we will comply within 30 days unless there is a legal reason to retain it.

7. Data Sharing and Disclosure

We do not sell, rent, or share your personal data for marketing purposes. However, we may disclose your information in the following circumstances:

• Service Providers: We may share your data with third-party service providers who assist us in operating our Site, such as hosting providers, email service providers, and analytics services
• Legal Requirements: We may disclose your data if required by law, court order, or government request
• Business Transfers: If Cexathilem Limited is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
• Protection of Rights: We may disclose your data to protect our legal rights, privacy, safety, or that of our users

We ensure that all service providers who have access to your personal data are bound by confidentiality agreements and are only authorized to use your data as necessary to provide services to us.

8. International Data Transfers

Cexathilem Limited is based in Ireland and operates within the European Economic Area (EEA). Your personal data is stored and processed within the EEA in compliance with GDPR. If we transfer your data outside the EEA, we will implement appropriate safeguards, including:

• Standard Contractual Clauses as approved by the European Commission
• Binding Corporate Rules where applicable
• Data Processing Agreements with our service providers

By using our Site, you consent to the processing and transfer of your personal data as described in this Privacy Policy.

9. Your Data Protection Rights

Under the GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you and to verify the legality of our processing
• Right to Rectification (Article 16): You have the right to correct any inaccurate or incomplete personal data we hold about you
• Right to Erasure (Article 17): You have the right to request the deletion of your personal data in certain circumstances (also known as the "right to be forgotten")
• Right to Restrict Processing (Article 18): You have the right to restrict how we process your personal data in certain situations
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller
• Right to Object (Article 21): You have the right to object to our processing of your data, including for direct marketing purposes
• Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time without affecting the legality of processing based on prior consent
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been violated

10. How to Exercise Your Rights

To exercise any of your data protection rights, please send a written request to:

Cexathilem Limited
Data Protection Officer
15 Henry Street
Limerick, Ireland
Email: [email protected]
Phone: +353 61 593 874

We will respond to your request within 30 days (or within 2 months for complex requests). We may request that you provide proof of identity to verify your request and protect against unauthorized access to your data.

11. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data. Here's information about the cookies we use:

• Essential Cookies: These cookies are necessary for the Site to function properly. They include cookies that store your cookie consent preference and maintain your session
• Analytics Cookies: These cookies help us understand how visitors use our Site. We use Google Analytics, which sets cookies to track page views, user behavior, and referral sources. These cookies do not identify you personally
• Performance Cookies: These cookies collect information about how you use our Site, including page load times and response to interactive elements

Cookie Duration: Most cookies expire after 13 months, though session cookies are deleted when you close your browser.

Managing Cookies: You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling certain cookies may affect Site functionality. You can also clear cookies from your device by using your browser settings.

Our cookie consent banner, which appears on first visit, allows you to accept or reject non-essential cookies. You can change your preference anytime by clicking the cookie banner again.

12. Children's Privacy

Our Site is not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such data immediately and terminate the child's access to our Site.

If you believe we have collected data from a child under 16, please contact us immediately at [email protected].

13. Security of Your Data

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, and destruction. These measures include:

• HTTPS encryption for data transmitted between your device and our servers
• Secure servers and firewalls to prevent unauthorized access
• Access controls and authentication protocols for employees who handle personal data
• Regular security audits and vulnerability assessments
• Data minimization principles to collect only necessary information

While we strive to protect your personal data using reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, and you use our Site at your own risk.

14. Third-Party Links and Services

Our Site may contain links to third-party websites and services that are not operated by us. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites before providing your personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page with a new "Last Updated" date. Your continued use of our Site after such changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

16. Data Protection Authority Contact

If you have concerns about how we handle your personal data or believe your privacy rights have been violated, you have the right to lodge a complaint with the relevant data protection authority:

Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2
Ireland
Phone: +353 761 104 800
Email: [email protected]
Website: www.dataprotection.ie

17. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Cexathilem Limited
15 Henry Street
Limerick, Ireland
Phone: +353 61 593 874
Email: [email protected]

We will respond to your inquiry within 5 business days.