GDPR statement

This statement explains how we meet the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts. Read it with our privacy policy and our cookies page.

Who the data controller is

The data controller decides why and how your personal data is used. For this website and for our loss assessing service, the data controller is:

We have not appointed a Data Protection Officer. Send all data protection questions to the contact details above.

Why we use your data, and the legal basis

• To answer your enquiry, to make sure we do not lose your message, and to handle your claim. Legal basis: steps that you ask us to take before a contract, and then our contract with you (GDPR Article 6(1)(b)).
• To keep records, and to defend or bring legal claims. Legal basis: our legitimate interests (Article 6(1)(f)). Where a law requires us to keep a record: that legal duty (Article 6(1)(c)).
• To deliver and protect the website. Legal basis: our legitimate interests (Article 6(1)(f)).
• To protect the message form from spam and to keep the website secure. Legal basis: our legitimate interests (Article 6(1)(f)).
• To use cookies and similar tools that are not necessary (for example a spam check on the message form, or measurement of visits, where the cookies page lists them). Legal basis: your consent (Article 6(1)(a)). You can withdraw your consent at any time. Open our cookies page and select the “Cookie Settings” button.

You do not have to give us your data. But without your contact details we cannot answer you, and without the details of your claim we cannot act for you.

Who can receive your data

• For your claim, on your instruction: your insurance company, its loss adjuster, and the specialists and contractors that the claim needs.
• Our service providers: the companies that supply our website hosting, our website security and delivery network (Cloudflare), and our email (Google Workspace). They use your data only to supply their service to us.

• Amazon Web Services: it sends the message form emails for us (Amazon Simple Email Service, Ireland region).

• Google (reCAPTCHA): it protects the message form from automated spam, if you accept cookies. It receives your internet address and browser information. Google’s own privacy policy applies to its use of this data.

• WhatsApp, only if you choose to message us there.
• Authorities, where the law requires it.

We do not sell your data.

Transfers outside the European Economic Area

Some of our service providers, such as Cloudflare and Google, can process data outside the European Economic Area. They use safeguards that the GDPR permits, such as the European Commission’s standard contractual clauses. Contact us to get a copy of these safeguards.

Amazon Web Services sends the message form emails from its Ireland region. Amazon is one of the providers that can process data outside the European Economic Area under these safeguards.

How long we keep your data

• Enquiries that do not become a claim: 12 months after our last contact with you.
• Claim files: 6 years after the claim is closed.
• Safety copy of a website message on our server: 90 days. The website clears old copies when the next message arrives.
• Coded internet address from the message form: counted for 24 hours, and deleted when the form is next used after that.

After these periods we delete or destroy the data.

Your rights

Under the GDPR you have the right to:

• get a copy of your personal data (access);
• have wrong or incomplete data corrected (rectification);
• have your data deleted, in some conditions (erasure);
• have the use of your data limited, in some conditions (restriction);
• object to our use of your data, in some conditions (objection);
• get your data in a common format, or have it sent to another organisation, in some conditions (portability);
• withdraw a consent that you gave, at any time.

How to make a request

Email us, use our message form, phone us or write to us at the contact details above, and tell us which right you want to use. We can ask you to prove who you are. A request is free. If a request is clearly without basis or excessive, we can charge a fee or refuse it, and we will tell you why. We answer within one month. If a request is complex, the law lets us take up to two more months, and we will tell you if we need them.

Automated decisions

We do not make decisions about you by automated means only, and we do not do profiling.

How to complain

Tell us first, so that we can try to put it right. You also have the right to complain to the Data Protection Commission:

• Web form: forms.dataprotection.ie/contact
• Post: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland
• Phone: (01) 765 01 00 or 1800 437 737

Last updated: 5 October 2026.