Privacy Policy
Contents
1. Introduction
Hawoxsayop ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at hawoxsayop.ie (the "Site"), including any other media form, media channel, mobile website, or mobile application relating or connected to it.
Data Controller: Hawoxsayop
Registered Address: 6 Patrick Street, Cork, Ireland
Company Registration: Hawoxsayop is a business operating in Cork, Ireland, providing garden shed organization and outdoor storage solutions guidance to homeowners.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site. By accessing or using Hawoxsayop, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
2. What Data We Collect
We collect information that you voluntarily provide and information collected automatically as you interact with our Site. The categories of data we collect include:
- Contact Information: Name, email address, phone number, postal address, and any other contact details you provide through forms, inquiries, or correspondence.
- Inquiry Information: Messages, questions, feedback, or other information you submit through our contact form or inquiry channels.
- Technical Data: IP address, browser type and version, operating system, pages visited, time and date of visits, time spent on pages, links clicked, and referral source.
- Device Information: Device type (desktop, tablet, mobile), device manufacturer, device model, and unique device identifiers.
- Usage Data: Information about how you interact with our Site, including clicks, scrolls, search queries, features accessed, and engagement patterns.
- Cookies and Tracking Data: Identifiers stored on your device to recognize repeat visitors, remember preferences, and track activity across sessions.
- Server Log Data: Automatically generated information from our web servers, including access logs, error logs, and performance metrics.
3. How We Collect Data
We collect data through the following methods:
- Direct Submission: Information you knowingly provide through contact forms, inquiry forms, email communications, or direct contact with us.
- Automatic Collection: Data collected automatically as you browse our Site, including through your browser and our web servers.
- Cookies: Small text files stored on your device that help us recognize you, remember your preferences, and track your activity on our Site. See our Cookies section for full details.
- Analytics Tools: Google Analytics and similar analytics services that track visitor behavior, page performance, and engagement metrics.
- Third-Party Integrations: If you interact with third-party services integrated into our Site, those services may collect data according to their own privacy policies.
- Server Logs: Information automatically recorded by our hosting provider's web servers, including access patterns and technical details.
4. Legal Basis for Collection (GDPR)
Under the UK and EU General Data Protection Regulation (GDPR), we collect and process personal data on the following legal bases:
- Consent (Article 6(1)(a)): When you provide explicit consent to data collection, such as opting into our email list, completing a contact form, or accepting cookies. You can withdraw consent at any time.
- Legitimate Interests (Article 6(1)(f)): We process data to improve our Site, understand user behavior, prevent fraud, and enhance security. Our legitimate interests are balanced against your rights and do not override your fundamental privacy protections.
- Contract Performance (Article 6(1)(b)): When we process data necessary to respond to your inquiries, fulfill requests, or provide services you have requested.
- Legal Obligation (Article 6(1)(c)): When we must process data to comply with applicable laws, regulations, or legal process.
5. How We Use Your Data
We use the information we collect for the following purposes:
- Service Delivery: To respond to your inquiries, answer questions, provide information about our services, and fulfill any requests you make through our Site.
- Communication: To send you transactional messages, confirmations, updates, and responses to your messages. You can opt out of non-essential communications at any time.
- Marketing (with Consent): To send you promotional content, newsletters, and updates about our services only if you have opted in and provided explicit consent. You can unsubscribe at any time using the link in any email.
- Site Improvement: To analyze how users interact with our Site, identify popular content, troubleshoot technical issues, and enhance user experience and functionality.
- Analytics: To track visitor statistics, measure campaign effectiveness, and understand user preferences to optimize our Site and services.
- Security & Fraud Prevention: To monitor for suspicious activity, prevent unauthorized access, protect against malicious intent, and maintain the security and integrity of our Site.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests, and to protect our legal rights.
- Personalization: To remember your preferences, customize content, and provide a more personalized experience when you return to our Site.
6. Data Retention
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods are:
- Contact Form Submissions: 2 years from date of submission, unless you request earlier deletion.
- Email Communications: For the duration of our correspondence and 1 year thereafter unless required longer by law.
- Cookies: Essential cookies remain active for the duration of your session. Analytics cookies are retained for 13 months. Preference cookies last up to 2 years.
- Server Logs: Automatically purged after 90 days by our hosting provider.
- Analytics Data (Google Analytics): Retained by Google for 38 months by default, then automatically deleted.
- Marketing List Data: Retained until you unsubscribe; unsubscribed addresses retained for 1 year to prevent re-addition.
After the applicable retention period, we will securely delete or anonymize your data. If you request deletion of your data at any time, we will comply within 30 days, unless legal obligations require us to retain it longer.
8. International Data Transfers
Hawoxsayop is based in Ireland and your data is primarily processed and stored within the European Economic Area (EEA). However, some service providers may process data outside the EEA, including in the United States or other jurisdictions.
When we transfer personal data outside the EEA, we rely on appropriate safeguards including:
- Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our data processors to ensure adequate data protection standards are maintained for transfers to countries outside the EEA.
- Adequacy Decisions: Where applicable, we rely on European Commission adequacy decisions for certain countries.
- Explicit Consent: For any transfers not covered by SCCs or adequacy decisions, we obtain your explicit consent before transferring your data.
You have the right to request information about the safeguards we use for international transfers. Contact us at the information provided in the Contact section below.
9. Your Rights
Under GDPR and Irish/UK data protection law, you have the following rights regarding your personal data:
- Right of Access (Article 15): You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a structured, commonly used, and machine-readable format within 30 days of your request.
- Right to Rectification (Article 16): If your personal data is inaccurate or incomplete, you have the right to request correction or completion. We will make corrections within 30 days.
- Right to Erasure (Article 17): You have the right to request deletion of your personal data, subject to exceptions (e.g., if we must retain it for legal compliance). We call this the "right to be forgotten."
- Right to Restrict Processing (Article 18): You have the right to ask us to limit how we use your data while we verify its accuracy or assess your other rights.
- Right to Data Portability (Article 20): You have the right to receive your personal data in a portable format and to transmit it to another organization without hindrance from us.
- Right to Object (Article 21): You have the right to object to processing of your data for legitimate interests or marketing purposes. We will stop processing your data unless we have compelling reasons to continue.
- Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Irish Data Protection Commission (DPC) or the UK Information Commissioner's Office (ICO) if you believe we have violated your data protection rights. Contact details: Data Protection Commission (Ireland) at www.dataprotection.ie or Information Commissioner's Office (UK) at www.ico.org.uk.
How to Exercise Your Rights: To exercise any of these rights, please send a written request to [email protected] or write to us at 6 Patrick Street, Cork, Ireland. Include your name, contact information, and a clear description of your request. We will respond within 30 days and may request verification of your identity to protect your privacy. Requests are free of charge, except in cases of manifestly unfounded or excessive requests.
11. Children's Privacy
Our Site is not intentionally directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If we become aware that we have collected personal data from a child under 16 without proper parental consent, we will promptly delete such information and take steps to prevent further collection.
If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at [email protected]. We will investigate and take appropriate action to protect your child's privacy.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy. For significant changes, we may provide additional notice, such as a prominent notice on our Site or email notification.
Your continued use of the Site following the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
Hawoxsayop
6 Patrick Street
Cork, Ireland
Email: [email protected]
Phone: +353 21 748 3921
Data Protection Officer: For data protection matters, you can contact us at the above email address with the subject line "Data Protection Inquiry."
We will respond to your inquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission or UK Information Commissioner's Office, depending on your location.