Privacy and Cookie Policy
Last Updated: September 2026
Website: https://www.castledermotnetwork.com
Data Controller: The Castledermot Network
Contact Email: [email protected]
Location: Castledermot, Co. Kildare, Ireland
1. Introduction
Welcome to The Castledermot Network (“we”, “us”, or “our”). We respect your right to privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, process, share, and protect your personal information when you visit our website, register an account, publish a community or business listing, leave a public star rating/review, or use direct listing contact forms.
We act as the Data Controller for personal data collected directly through the operation of the directory. All personal data is handled in strict compliance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and the Irish Data Protection Act 2018.
2. The Personal Data We Collect
We collect personal information depending on how you interact with our platform:
User Accounts & Registrations: Name, username, email address, password hash, account role (Visitor or Business Owner), and account activity timestamps.
Business & Community Listing Data: Business/group trading names, contact representative names, physical addresses, phone numbers, website links, social media profiles, trade descriptions, logos, photos, and VAT/registration details.
Direct Listing Inquiries (Contact Forms): When a user sends an inquiry through a listing’s on-page contact form, we collect the sender’s name, email address, phone number (if supplied), and the message contents.
Ratings and Reviews: Star ratings, written feedback, reviewer name/username, date of submission, and associated IP addresses (for spam-prevention purposes).
Billing and Transaction Records: For commercial tiers, we retain billing names, transaction IDs, subscription renewal dates, and payment history. (Note: Full credit/debit card details are processed directly by our external PCI-DSS compliant payment gateway, e.g., Stripe, and are never stored on our web servers.)
Technical & Device Data: IP address, browser type, operating system, pages viewed, time spent on the site, and referral sources collected via cookies and server logs.
3. How and Why We Use Your Data (Legal Bases)
Under the GDPR, we only process personal data when we have a recognized legal basis:
| Purpose / Activity | Data Involved | Lawful Basis (GDPR Art. 6) |
| Account Creation & Listing Management | Name, email, profile details, business assets | Performance of a Contract: Fulfilling directory registration and listing services under our Terms and Conditions. |
| Direct Listing Inquiries (Forms) | Sender name, email, message body | Legitimate Interests: Routing legitimate prospective customer inquiries to the designated business owner. |
| Public Reviews & Star Ratings | Name/username, review copy, rating | Legitimate Interests: Fostering community transparency and providing authentic consumer feedback. |
| Payment & Subscription Billing | Billing contact, invoice history | Legal Obligation & Contract: Maintaining accurate commercial accounting records under Irish tax law. |
| Spam Prevention & Platform Security | IP addresses, login logs, form tokens | Legitimate Interests: Protecting our directory against bots, fraud, malicious submissions, and brute-force attacks. |
| Analytics & Marketing Cookies | Browser data, device identifiers | Consent: User opt-in via our cookie banner. |
4. How Specific Features Operate
4.1 Direct Listing Inquiries (Contact Forms)
When you submit a message through a listing’s contact form, your inquiry is converted into an electronic notification and routed to the email address associated with that business listing.
A copy may be temporarily logged in the website’s administrative database to guarantee delivery and verify that communications do not violate our anti-spam standards.
Role Clarification: Once your message is delivered to the business owner, that business owner acts as an independent data controller regarding how they manage your inquiry and any subsequent customer service relationship.
4.2 Star Ratings and Reviews
When you leave a review or star rating, your submitted username/display name and comments will be made public on the relevant business listing.
Please do not submit personal contact numbers, residential addresses, or private sensitive information within public review bodies.
We retain review logs and timestamps to enforce our Terms and Conditions, prevent fake or defamatory submissions, and safeguard platform integrity.
5. Third-Party Disclosures and Data Sharing
We do not sell, rent, or trade your personal data to commercial data brokers. We disclose data solely to:
Listed Businesses: When you submit a direct message using their profile’s inquiry form.
Service Providers & Processors: Trusted technical vendors who support our operations under strict Data Processing Agreements (DPAs):
Web hosting and database infrastructure providers located within the European Economic Area (EEA) or approved adequate jurisdictions.
Transaction and payment processors (e.g., Stripe) for recurring or annual subscription payments.
Transactional email delivery services (e.g., SendGrid, Mailgun, or SMTP relays) to deliver system alerts and inquiry notifications.
Legal and Regulatory Authorities: An Garda Síochána, the Revenue Commissioners, or statutory bodies when legally compelled by court order, statutory regulation, or to defend legal claims.
6. International Data Transfers
We prioritize storing and processing data within Ireland and the European Economic Area (EEA). If any third-party infrastructure provider processes data outside the EEA, we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR (such as the European Commission’s Standard Contractual Clauses (SCCs) or UK/US Data Privacy Framework adequacy decisions).
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the operational, commercial, and legal purposes outlined in this policy:
Active User Accounts & Listings: Retained for the active duration of the account/listing. Upon account deletion or listing cancellation, profile information is removed or anonymised within 30 days.
Form Inquiry Logs: Retained in system delivery logs for up to 90 days before automated deletion, unless retained longer for verified spam/security investigations.
Reviews and Ratings: Maintained for the lifespan of the associated business profile to preserve historical accuracy, unless removed following an approved moderation request.
Financial & Invoicing Records: Maintained for a minimum of 6 years in accordance with Irish Revenue statutory requirements.
8. Cookie Policy
8.1 What Are Cookies?
Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work efficiently, remember your preferences, and provide analytical insights to site operators.
8.2 The Cookies We Use
The Castledermot Network categorises cookies into the following groups:
Strictly Necessary Cookies (Essential):
These cookies are mandatory for core website functionality, such as keeping you logged in to your account, enabling session security, managing CSRF security tokens on forms, and saving your cookie banner preferences.
These cannot be disabled as the site cannot function correctly without them.
Functional Cookies:
Used to remember user interface choices (e.g., map search radius, active listing filters, or preferred grid/list views).
Analytics & Performance Cookies:
Help us understand how visitors interact with the directory (e.g., which categories are most visited, page load times, error pages).
These cookies collect aggregated, anonymous performance metrics and are deployed only with your prior opt-in consent.
8.3 Managing Cookie Preferences
When you first visit The Castledermot Network, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can update your preferences at any time by clicking the “Cookie Settings” link located in the website footer, or by adjusting your browser settings to reject or delete stored cookies.
9. Your Data Protection Rights Under GDPR
As a data subject resident in Ireland and the EU, you hold the following rights:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate, outdated, or incomplete data (many profile details can also be updated directly in your dashboard).
Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data where retention is no longer justified.
Right to Restrict Processing: You can request the temporary suspension of processing while a dispute or accuracy check is ongoing.
Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
Right to Object: You can object to processing based on our legitimate interests or direct marketing at any time.
Right to Withdraw Consent: Where processing relies on consent (such as non-essential cookies), you may withdraw consent without affecting the lawfulness of prior processing.
To exercise any of these rights, email your request to [email protected]. We respond to all verified requests within one calendar month in accordance with GDPR requirements.
10. Complaints and Supervisory Authority
If you are dissatisfied with how we handle your personal data, we encourage you to contact us first so we can resolve the issue.
You also have the statutory right to lodge a formal complaint with the Irish supervisory authority:
Data Protection Commission (DPC)
Website: www.dataprotection.ie
Address: 21 Fitzwilliam Hall, Fitzwilliam Place, Dublin 2, D02 F983, Ireland
Phone: +353 1 765 0100 / 1800 437 737
11. Changes to This Policy
We may update this Privacy and Cookie Policy periodically to reflect enhancements to our platform features, operational practices, or legal requirements. Any revisions will be published on this page with an updated “Last Updated” date.
12. Contact Information
For any questions, data access requests, or privacy concerns:
Email: [email protected]
Mailing Location: Castledermot, Co. Kildare, Ireland
