Privacy Policy - Inishowen Subaqua

1. Introduction

At Inishowen Sub Aqua Club (“we,” “our,” or “us”), accessible via inishowensubaqua.com, we are committed to safeguarding the privacy and security of your personal data. Your trust is of paramount importance to us, and we are dedicated to handling your personal information responsibly, transparently, and in compliance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you access our website, communicate with us, or engage with our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to personal data processed through our website, inishowensubaqua.com, and related digital platforms. We operate as the data controller with respect to the personal data collected through these channels, meaning we determine the purposes and means of the processing of your personal data.

For questions about how your personal data is handled, you may contact us at [email protected].

3. Categories of Data We Process

We may collect and process the following categories of personal data:

a. Usage Data
Information about your interaction with our website, including IP address, browser type, operating system, device identifiers, referral URLs, pages visited, session durations, and browsing behavior.

b. Account Data
Personal details you provide when registering with us, such as full name, residential address, telephone number, and email address.

c. Profile Data
Information relating to your user profile, including preferences, past purchases or class bookings, browsing history, and behaviors related to your interactions with our club and services.

d. Communication Data
Records of your communications with us, including support queries, general inquiries, feedback messages, and correspondence history.

e. Technical Data
Information from your device and operating system, such as hardware settings, mobile device IDs, technical diagnostics, and system configuration data.

f. Transaction Data
Order and payment records, including billing address, payment method, order history, and shipping or delivery information.

g. Preference Data
Your expressed choices or inferred interests, such as communication preferences, opt-in/opt-out selections for marketing communications, and content or product interests.

4. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

– Consent: When you have given your explicit consent, such as signing up for our newsletter or accepting cookies.
– Contractual Necessity: When processing is necessary to fulfill a service or contractual obligation (e.g., membership registration or purchase).
– Legal Obligation: Where we are required by law to retain or disclose your data.
– Legitimate Interests: For purposes such as website improvement, security, fraud prevention, and enhancing service offerings, as long as your rights do not override these interests.

5. Your Rights

Subject to applicable data protection laws, you have the following rights regarding your personal data:

– Right of Access – to receive confirmation and access to your personal data held by us.
– Right to Rectification – to correct inaccurate or incomplete data concerning you.
– Right to Erasure – to request deletion of your personal data, subject to lawful limitations.
– Right to Restriction – to suspend processing under certain conditions.
– Right to Data Portability – to obtain a copy of your data in a structured, commonly used format and request its transfer to another data controller.
– Right to Object – to object to processing based on legitimate interests, or for direct marketing purposes.
– Right to Withdraw Consent – at any time where processing is based on your prior consent.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement robust technical and organizational measures to protect your personal data, including:

– Encryption of data during transmission and at rest,
– Role-based access control and authentication measures,
– Routine data backups and disaster recovery processes,
– Staff training programs focused on data protection and breach prevention.

7. International Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent agreements complying with GDPR and relevant regulations.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including:

– Usage and Technical Data: up to 12 months, for performance and analytics,
– Account and Profile Data: for the duration of your membership or user account, and up to 6 years thereafter for audit or legal purposes,
– Transaction Data: for a minimum of 6 years in accordance with tax obligations and financial reporting,
– Communication and Preference Data: for up to 3 years following your last interaction or opt-in, unless extended with your consent.

9. Cookie Policy

inishowensubaqua.com uses cookies and similar technologies to enhance website functionality and user experience. Cookies are small text files stored on your device when you visit our website.

– Essential Cookies: Required for core functions such as navigation and access control.
– Functional Cookies: Enable personalization, such as remembering language preferences.
– Analytics Cookies: Help us understand how users engage with our website.
– Performance Cookies: Enhance speed, responsiveness, and usability.

10. Cookie Management and Compliance

You may manage and withdraw cookie consent through our cookie banner or via your browser’s settings. We ensure compliance with GDPR and CCPA by informing you upon first visit, offering opt-in choices, honoring Do Not Track requests, and retaining cookie records and preferences as required.

11. Children’s Privacy

Our website and services are not directed to or intended for children under the age of 13. We do not knowingly collect personal data from individuals under this age. If we become aware that we have collected such data inadvertently, we will take immediate steps to delete the information. If you believe a child under 13 has provided us data, please contact us at [email protected].

12. Policy Updates

We reserve the right to update this Privacy Policy from time to time to reflect changes in legal obligations or improvements in our data practices. Substantial changes will be communicated to you through appropriate channels, such as our website or direct communication, where required by law.

13. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy or your personal data, please contact:

Inishowen Sub Aqua Club
Email: [email protected]
Website: https://inishowensubaqua.com

We are committed to maintaining full compliance with the GDPR, the CCPA, and any other applicable data protection regulations. Please do not hesitate to reach out to us regarding your privacy concerns, and we will respond promptly and transparently.