Privacy Policy

1. Who We Are

Gov-statusupdate ("we," "us," or "our") is an educational initiative supporting independent bookshops and cultural spaces, based at 32 Mallow St, Prior's-Land, Limerick, V94 HR24, Ireland.

For data protection matters, you can contact us at:

Email: privacy@gov-statusupdate.com
Phone: +353 61 204 040
Post: Data Protection Officer, Gov-statusupdate, 32 Mallow St, Prior's-Land, Limerick, V94 HR24, Ireland

2. Personal Information We Collect

We collect personal information in the following ways:

Information You Provide to Us

When you interact with our website or services, you may provide us with:

Contact information: Name, email address, phone number, postal address
Programme registration information: Professional details about your bookshop or cultural space, business address, role/position
Payment information: We do not directly store credit card details, but use secure third-party payment processors
Communications: Information you provide in messages, emails, or phone calls to us
Survey responses: Feedback and information provided in response to our surveys

Information We Collect Automatically

When you visit our website, we may automatically collect:

Technical information: IP address, browser type and version, operating system
Usage information: Pages visited, time spent on pages, links clicked, journey through the site
Device information: Type of device used to access our site, screen resolution, browser window size

We collect this information using cookies and similar technologies. For more details, please see our Cookie Policy.

3. How We Use Your Personal Information

We use your personal information for the following purposes:

To Provide Our Services

Processing programme registrations and delivering our educational content
Communicating with you about your participation in our programmes
Responding to your inquiries and providing customer support
Processing payments and managing your account

To Improve and Develop Our Services

Understanding how our website and services are used
Testing and developing new features and functionality
Conducting research and analysis to improve our educational content
Troubleshooting technical issues

For Marketing and Communication

Sending you updates about our programmes and services (with your consent where required)
Inviting you to events relevant to independent bookshops and cultural spaces
Sharing resources and guides related to our educational focus

For Legal and Security Purposes

Complying with legal obligations and regulatory requirements
Preventing fraud and protecting the security of our website and services
Enforcing our terms of service and other legal agreements

4. Legal Basis for Processing

Under GDPR, we process your personal information based on one or more of the following legal grounds:

Consent

We process certain personal information based on your consent, such as when you:

Sign up for our mailing list or newsletter
Agree to non-essential cookies on our website
Opt-in to receive marketing communications

You can withdraw your consent at any time by contacting us or using the unsubscribe options in our communications.

Contract

We process your personal information when it's necessary for fulfilling a contract with you, such as:

Processing your programme registration
Providing the educational services you've enrolled in
Responding to specific requests related to our services

Legitimate Interests

We process your personal information when it's in our legitimate interests to do so, such as:

Improving and developing our website and services
Protecting the security of our systems and preventing fraud
Understanding how our services are used
Providing effective customer support

We balance our legitimate interests against your rights and freedoms, and will not use this basis if your interests override ours.

Legal Obligation

We process your personal information when necessary to comply with our legal obligations, such as:

Responding to legal requests and government investigations
Complying with tax and accounting requirements
Fulfilling our obligations under Irish and EU law

5. How We Share Your Personal Information

We may share your personal information with the following categories of recipients:

Service Providers

We share information with third-party service providers who help us operate our business and deliver our services, including:

Payment processors for handling programme fees
Email service providers for sending communications
Website hosting and cloud storage providers
Customer relationship management systems
Analytics providers to help us understand website usage

These service providers are contractually obligated to use your personal information only to provide services to us and in accordance with applicable data protection laws.

Programme Facilitators and Educators

When you participate in our educational programmes, we may share relevant information with:

Instructors and facilitators who deliver our educational content
Mentors assigned to support your learning experience

These individuals are bound by confidentiality obligations regarding your information.

Legal and Regulatory Authorities

We may disclose your personal information when required by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

With Your Consent

We may share your personal information with other third parties when we have your explicit consent to do so.

6. International Transfers

We primarily store and process your personal information in Ireland and the European Economic Area (EEA). However, some of our service providers may be based outside the EEA, which means your personal information may be transferred to countries with different data protection standards.

When we transfer your personal information outside the EEA, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Ensuring the recipient country has been deemed to provide adequate protection by the European Commission
Where applicable, transfers to organizations certified under frameworks such as the EU-US Data Privacy Framework

You can request more information about these safeguards by contacting us using the details provided in Section 1.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

Providing the services you have requested
Complying with legal, tax, and accounting obligations
Resolving disputes and enforcing our agreements

Specific retention periods include:

Programme participation records: 7 years after programme completion (for legal and accounting purposes)
Contact form submissions: 2 years from submission
Marketing communications preferences: Until you unsubscribe or withdraw consent
Website analytics data: 26 months from collection

When we no longer need to retain your personal information, we will securely delete or anonymize it so that it can no longer be associated with you.

8. Your Data Protection Rights

Under GDPR and Irish data protection law, you have the following rights regarding your personal information:

Access

You have the right to request a copy of the personal information we hold about you.

Rectification

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

Erasure

You have the right to request that we delete your personal information in certain circumstances, such as when it's no longer necessary for the purpose it was collected.

Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.

Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Objection

You have the right to object to the processing of your personal information in certain circumstances, including when we process it for direct marketing purposes or based on our legitimate interests.

Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you.

Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 1. We will respond to your request within one month. This period may be extended by up to two additional months if necessary, taking into account the complexity and number of requests.

You also have the right to lodge a complaint with the Irish Data Protection Commission or another EU supervisory authority if you believe we have not complied with data protection laws.

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of sensitive data both in transit and at rest
Regular security assessments and vulnerability testing
Access controls and authentication procedures
Staff training on data protection and security practices
Regular backups to prevent data loss

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use caution when sharing information online.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated policy will be posted on this page with a revised "Last Updated" date.

For significant changes that materially alter your rights or our use of your personal information, we will provide prominent notice on our website or send you a direct notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Data Protection Officer
Gov-statusupdate
32 Mallow St, Prior's-Land
Limerick, V94 HR24, Ireland
Email: privacy@gov-statusupdate.com
Phone: +353 61 204 040