Privacy Policy

1. Introduction

Cradepsits Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website (cradepsits.com) or use our services.

We are a data controller registered with the Data Protection Commission in Ireland (Registration Number: DPC-876543). Our registered office is at 7, Odeon House, Eyre Square, Galway, H91 CP5T, Ireland.

This policy complies with the European General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. By using our website or services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Fill out our contact form or register for our programmes
• Subscribe to our newsletter
• Participate in our workshops or training sessions
• Request technical advice or consultancy services

This information may include:

• Contact details (name, email address, phone number, postal address)
• Professional information (job title, organization, professional qualifications)
• Payment information for course registrations (processed securely through third-party payment processors)
• Communications you send to us

2.2 Information We Collect Automatically

When you visit our website, we automatically collect certain information about your device and your visit, including:

• IP address and browser type
• Pages you view and how you navigate our website
• Time spent on pages and date/time of your visit
• Referring website or source that led you to our site
• Technical information about your device

We collect this information using cookies and similar technologies. For more information about how we use cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing Our Services

• To process your registration for programmes and workshops
• To provide the educational services you have requested
• To respond to your inquiries and provide technical information
• To manage your account and maintain our relationship with you

3.2 Communications

• To send you important information about your programmes or services
• To provide you with updates about heritage conservation regulations or techniques
• To send you our newsletter if you have subscribed
• To invite you to relevant events or workshops based on your interests

3.3 Improving Our Services

• To analyze how our website is used and improve its functionality
• To develop new programmes and services based on user interests
• To troubleshoot technical issues
• To conduct research and analysis to enhance our educational materials

3.4 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: Processing necessary for the performance of our contract with you when you register for our services
• Consent: When you have given clear consent for specific processing activities, such as receiving our newsletter
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, provided these interests are not overridden by your rights
• Legal Obligation: Processing necessary to comply with our legal obligations

4. Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

4.1 Service Providers

We may share your information with trusted third parties who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep this information confidential. These service providers include:

• Website hosting and maintenance providers
• Email service providers for newsletter distribution
• Payment processors for course registrations
• Customer relationship management systems

4.2 Educational Partners

When you register for certain programmes, we may share necessary information with educational partners or accrediting bodies involved in delivering the training, including:

• Workshop instructors and subject matter experts
• Certification bodies or professional institutions (for CPD accreditation)
• Venue providers for in-person training sessions

4.3 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.4 Business Transfers

If Cradepsits Ltd or its assets are acquired by or merged with another company, your information may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and vulnerability scanning
• Access controls and authentication procedures
• Staff training on data protection and security
• Regular backups and disaster recovery planning

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

In the event of a data breach that affects your personal information, we will notify you and the relevant supervisory authority as required by applicable law.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you
• Legal obligations to which we are subject
• Whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

Specifically, we retain different types of data for the following periods:

• Contact form submissions: 2 years from submission
• Course registration information: 6 years from course completion (for tax and certification purposes)
• Newsletter subscription data: Until you unsubscribe
• Website usage data: Up to 26 months in analytics systems

When personal data is no longer necessary for our purposes, we will either delete it or anonymize it.

7. Your Rights

Under data protection laws, you have several rights regarding your personal information. These include:

7.1 Right to Access

You have the right to request copies of your personal information that we hold. We will provide this information in a structured, commonly used, and machine-readable format.

7.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

7.3 Right to Erasure

You have the right to request that we erase your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

7.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.

7.5 Right to Data Portability

You have the right to request that we transfer your data to another controller, where technically feasible.

7.6 Right to Object

You have the right to object to our processing of your personal information in certain circumstances, including for direct marketing purposes.

7.7 Rights Related to Automated Decision Making

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. We do not currently engage in such automated decision-making.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request within one month. This period may be extended by up to two additional months where necessary, taking into account the complexity and number of requests.

If you are not satisfied with our response or believe we are processing your personal information unlawfully, you have the right to lodge a complaint with the Data Protection Commission in Ireland (www.dataprotection.ie).

8. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users and collect information about your browsing patterns. This helps us provide you with a good experience while you browse and allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or your device when you visit our website. We use the following types of cookies:

• Necessary cookies: These are essential for the website to function properly and cannot be disabled.
• Analytical/performance cookies: These allow us to recognize and count visitors and see how they move around our website, helping us improve its functionality.
• Functionality cookies: These enable the website to remember choices you make and provide enhanced features.
• Marketing cookies: These track your activity across websites to deliver targeted advertising.

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. However, if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

For more detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

We encourage you to read the privacy policy of every website you visit when leaving our website.

Examples of third-party services we may link to include:

• Government heritage and conservation resources
• Professional accreditation bodies
• Heritage organizations and research institutes
• Material suppliers and specialist craftspeople

10. Children's Privacy

Our services are not directed at children under the age of 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will delete such information from our systems.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry as soon as possible and within 30 days at the latest.