Legal
Privacy Policy
We respect your privacy. This policy explains what personal information this website collects, why, and the rights you have under the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018.
1. Introduction
This policy applies to this website only. Parish records kept offline are governed by the Church of Ireland's own data protection arrangements.
2. Identity of the data controller
The data controller for this website is Saint Mary's Church of Ireland – Ardee, Market Street, Ardee, County Louth, acting through its Select Vestry. The full legal identity and official contact address of the controller are being confirmed and will be stated here once verified.
We have not appointed a Data Protection Officer. Questions about this policy may be sent through our Contact page.
3. Personal information collected
We only collect information you choose to give us — typically through the contact form — and limited technical information needed to keep the website working securely.
4. Contact form data
When you use the contact form we receive your name, email address, subject and message. Please do not include information about your health or religious beliefs; the form is not designed to collect special-category data, and we will not record such details from it.
5. Purpose of processing
We use your information solely to reply to your enquiry and to keep a record of correspondence.
6. Legal bases
We rely on your consent (given when you tick the consent box) and on our legitimate interest in responding to correspondence. Where religious beliefs are concerned, which are special-category data under Article 9 GDPR, we do not collect them through this website.
7. Data retention
Enquiries are kept only as long as needed to deal with them and for a reasonable period afterwards, normally no more than two years, unless a longer period is required by law.
8. Data sharing
We do not sell or rent your information. It may be shared with the Rector or parish officers who need it to answer your enquiry, or where we are legally required to do so.
9. Third-party services
This website is hosted by a third-party provider that processes data on our behalf. If you choose to load the embedded map, Google may receive your IP address under its own privacy policy.
10. Website security
The website is served over HTTPS and we take reasonable technical and organisational measures to protect information.
11. Your rights
Under GDPR you have the following rights. To exercise any of them, contact us through the Contact page.
12. Right of access
You may ask for a copy of the personal data we hold about you.
13. Right to rectification
You may ask us to correct inaccurate or incomplete data.
14. Right to erasure
You may ask us to delete your data where there is no good reason for us to keep it.
15. Right to restriction
You may ask us to limit how we use your data in certain circumstances.
16. Right to object
You may object to processing based on our legitimate interests.
17. Right to data portability
You may ask to receive data you gave us in a commonly used format.
18. Right to withdraw consent
Where we rely on consent, you may withdraw it at any time without affecting earlier processing.
19. International transfers
If any provider processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
20. Cookies
Please see our Cookie Policy.
21. Complaints
You have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (dataprotection.ie). We would appreciate the chance to resolve your concern first.
22. Contact details
Please use the form on our Contact page, or email us at contact@ailanapustuudio.org. Our postal address is Market Street, Ardee, County Louth, Ireland.
23. Policy updates
We may update this policy from time to time. The current version is always published on this page.