Privacy Policy

1. Who We Are

Gall Heritage Explorer is a heritage services organisation based in Ireland. Our registered address is 5 Eyre Square, Galway City, Co. Galway, H91 GH78, Ireland. We can be contacted at [email protected] or by telephone at +353 91 567 8901. We are the data controller for personal data collected through this website and in connection with our services.

2. What Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, telephone number, and postal address, when provided via our contact form or booking process.
• Booking information: Details of services booked, dates, group size, and special requirements.
• Communication records: Copies of emails and messages exchanged with our team.
• Website usage data: We do not use third-party analytics tools. We do not track individual users across websites. We use localStorage on your browser to store your cookie consent preference (key: cookieConsent_exploregallheritage.site).
• Payment information: We do not store payment card details. Payments are processed by our bank or payment provider.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and provide the services you have requested.
• To process and manage bookings, including sending confirmation and pre-visit information.
• To issue invoices and process payments.
• To comply with our legal obligations under Irish and EU law.
• To improve our services based on feedback you provide.

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not use your data for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance: Processing necessary to fulfil a booking or service agreement.
• Legitimate interests: Responding to enquiries and maintaining records of our business activities.
• Legal obligation: Retaining financial records as required by Irish law.
• Consent: Where you have explicitly consented (e.g., to receive marketing communications).

5. Cookies & localStorage

This website uses localStorage (not cookies) to store your consent preference. The localStorage key used is cookieConsent_exploregallheritage.site. This data is stored only in your browser and is not transmitted to our servers. You can clear this data at any time by clearing your browser's localStorage or using the "Decline" option on our consent banner.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not embed third-party content that sets cookies.

6. Data Sharing

We share your personal data only with:

• Our payment processing provider, for the purpose of processing payments.
• Our email service provider, for the purpose of sending confirmations and communications.
• Relevant heritage site operators, where necessary to arrange access for your booking.

All third parties with whom we share data are required to process it in accordance with GDPR and our data processing agreements. We do not transfer personal data outside the European Economic Area.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal obligations. Booking records are retained for 7 years for accounting purposes. Contact enquiries that do not result in a booking are deleted after 12 months. You may request deletion of your data at any time (subject to legal retention requirements) by contacting us at [email protected].

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your data, subject to legal retention requirements.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ireland (dataprotection.ie).

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to personal data within our organisation is restricted to staff who need it to perform their duties.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at https://exploregallheritage.site/privacy.html. We will notify clients of significant changes by email where we hold your contact details.