Privacy Policy

Introduction

boldfrontora Ltd ("we," "our," or "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website and services.

We are a data controller under the General Data Protection Regulation (GDPR) and Irish data protection laws. Our registered office is located at 5 Grafton Street, Limerick, V05 1824, Ireland. Company registration number: CRO824685.

Data We Collect

The data we collect includes personal information you provide directly to us and information automatically collected through your use of our website. We collect the following types of personal data:

Information You Provide

• Name and contact details (email address, phone number, postal address)
• Business information and project details when you enquire about our services
• Communication preferences and marketing consent
• Any other information you choose to provide in contact forms or correspondence

Information Automatically Collected

• Website usage data and analytics information
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Page views, time spent on site, and navigation patterns

How We Use Your Information

We use your personal data for legitimate business purposes and only where we have a lawful basis to do so. How we use your information depends on the services you use and your preferences. We use your data for the following purposes:

• To provide our wellness retreat business planning services and respond to your enquiries
• To communicate with you about our services, including sending service updates and important notices
• To improve our website functionality and user experience through analytics
• For marketing purposes, including sending promotional emails (with your consent)
• To comply with legal obligations and protect our legitimate business interests
• To prevent fraud and ensure the security of our services

We may use your information for analytics, advertising, and remarketing purposes, including Google Ads, to help us measure campaign effectiveness, deliver relevant advertisements, and improve our services.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. Our lawful bases include:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where we need to comply with legal requirements
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided your rights and freedoms are not overridden

Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted service providers who help us operate our business, including:

• Website hosting and technical service providers
• Email marketing platforms (with your consent)
• Analytics providers (such as Google Analytics)
• Legal and professional advisors
• Regulatory authorities when required by law

All third-party service providers are required to maintain appropriate security measures and use your data only for the purposes we specify.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and protect our legitimate business interests. Our data retention periods include:

• Contact form submissions and enquiries: 3 years from last contact
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months (Google Analytics default)
• Legal and accounting records: 7 years as required by Irish law

When personal data is no longer needed, we will securely delete or anonymise it in accordance with our data retention policy.

Your Rights

Under GDPR and Irish data protection law, you have several rights regarding your personal data. Your rights include:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Secure data transmission using SSL encryption
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure data storage and backup procedures

Whilst we take every reasonable precaution to protect your data, no internet transmission is completely secure. We cannot guarantee absolute security but will notify relevant authorities and affected individuals of any data breaches as required by law.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Certification schemes and codes of conduct

Contact Information

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the following details:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data appropriately. You can contact them at www.dataprotection.ie.

Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.