Privacy Policy

1. Introduction

Pakihlumom ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://pakihlumom.ie/ and any related pages, features, content, and applications (collectively, the "Site").

Data Controller: Pakihlumom
Registered Address: 8 Patrick Street, Dublin 8, Ireland
Contact for Privacy Matters: [email protected]

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site. By accessing and using the Site, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. What Personal Data We Collect

We collect personal data that you provide directly to us and data collected automatically when you interact with our Site. The types of personal data we may collect include:

Data You Provide to Us:

• Contact Information: Name, email address, phone number, and postal address when you submit our contact form or inquiry.
• Communication Data: Any messages, comments, or feedback you send us through contact forms or email.
• Optional Information: Any additional information you choose to provide in your inquiries or messages.

Data Collected Automatically:

• IP Address: Your Internet Protocol (IP) address is recorded when you visit the Site.
• Device Information: Information about the device you use to access the Site, including device type, operating system, and browser type.
• Usage Data: Pages you visit, time spent on pages, links clicked, referring source, and navigation patterns.
• Cookie Data: Information stored through cookies and similar tracking technologies (see Cookie section below).
• Server Logs: Access logs, error logs, and performance metrics from our web server.

3. How We Collect Your Data

We collect personal data through the following methods:

• Contact Forms: When you submit inquiries or contact us through forms on our Site.
• Email Communication: When you send us emails directly at [email protected].
• Analytics Tools: Google Analytics tracks usage patterns and user behaviour on our Site to help us understand how visitors interact with our content.
• Cookies and Tracking: First-party cookies stored by our Site and third-party cookies from analytics providers.
• Server Logs: Automatic logs generated by our web hosting server when you access pages.

4. Legal Basis for Processing Your Data (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data only on lawful bases. Our legal bases for processing include:

• Article 6(1)(a) – Consent: When you explicitly consent to our processing, such as by submitting a contact form or subscribing to communications (if applicable).
• Article 6(1)(b) – Contract: When processing is necessary to fulfil a contract or respond to your request for services or information.
• Article 6(1)(f) – Legitimate Interest: We have legitimate interests in analysing Site usage, improving our services, and ensuring Site security. These interests are weighed against your privacy rights.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to Inquiries: To answer your questions and provide the gardening guidance or information you request.
• Service Delivery: To deliver content, information, and services you request through our Site.
• Communication: To send you transactional messages, such as confirmations of your inquiries or responses to your messages.
• Marketing and Promotion: To send you updates, newsletters, or promotional information about our services (only if you have opted in or consented).
• Analytics and Improvement: To understand how users interact with our Site, improve our content, functionality, and user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legitimate legal requests from authorities.
• Site Security: To detect, investigate, and prevent fraud, abuse, and other harmful activities.
• Aggregate Analysis: To create anonymised, aggregate statistics about Site usage that cannot identify you personally.

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our retention periods are:

• Contact Form Submissions: Retained for 2 years from the date of submission to allow follow-up communication and maintain records.
• Email Inquiries: Retained for 2 years unless you request deletion or unsubscribe from communications.
• Analytics and Cookie Data: Retained for up to 13 months. Older data is automatically deleted or anonymised.
• Server Logs and IP Addresses: Retained for 90 days, then automatically deleted.
• Marketing Communications: Data is retained as long as you remain subscribed; deleted within 30 days of unsubscribing.

After the retention period expires, we securely delete or irreversibly anonymise your data. If you request deletion of your data, we will comply within 30 days where legally permissible.

7. Data Sharing and Recipients

We do not sell or rent your personal data to third parties. However, we may share your data with the following categories of recipients:

• Web Hosting Provider: Our hosting provider stores the technical infrastructure and server logs necessary to operate the Site. Their data processing is governed by a Data Processing Agreement (DPA).
• Analytics Providers: Google Analytics processes usage data to provide insights into Site behaviour. Google's Privacy Policy governs their processing.
• Email Service Providers: If we send you communications (with your consent), our email service provider may process your email address and related data. They operate under a DPA.
• Legal Authorities: We may disclose data if required by law, court order, or government request, or when necessary to protect our legal rights and the safety of users.

We require all third parties who process data on our behalf to sign Data Processing Agreements (DPAs) that include strong confidentiality and security commitments.

No Sale of Personal Data: We confirm that we do not sell, trade, or monetise your personal data in any way.

8. International Data Transfers

Our Site is hosted in the European Union. However, if data is transferred outside the EU/EEA (for example, to the United States via analytics providers), we use appropriate safeguards as required by GDPR, specifically:

• Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission for transfers to countries without an adequacy decision.
• Adequacy Decisions: If a recipient country has a GDPR adequacy decision (such as the UK), data can transfer directly.

We ensure that international transfers include technical and organisational measures to maintain the same level of protection as within the EU.

9. Your Privacy Rights

Under GDPR, you have the following rights regarding your personal data:

Right of Access (Article 15):

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days.

Right to Rectification (Article 16):

If your data is inaccurate or incomplete, you have the right to request correction or completion. We will update your information within 30 days where feasible.

Right to Erasure (Article 17 – "Right to be Forgotten"):

You have the right to request deletion of your personal data in certain circumstances, such as when data is no longer necessary or you withdraw consent. We will delete your data within 30 days unless a legal basis requires retention.

Right to Restrict Processing (Article 18):

You may request that we limit how we use your data while we verify its accuracy or assess your other rights.

Right to Data Portability (Article 20):

You have the right to receive your data in a structured, commonly used format and to transmit it to another controller, where technically feasible.

Right to Object (Article 21):

You have the right to object to processing based on legitimate interest. You also have an absolute right to object to marketing or profiling.

Right to Withdraw Consent (Article 7):

If we are relying on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint (Article 77):

You have the right to lodge a complaint with your national data protection authority. In Ireland, this is the Data Protection Commission (DPC). You can submit a complaint at https://www.dataprotection.ie/.

How to Exercise Your Rights:

To exercise any of these rights, please send a request to [email protected] with the subject line "Data Subject Rights Request." Include details of which right you wish to exercise and any relevant information (such as the email address or contact details you used). We will respond within 30 days.

10. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your experience and gather usage information.

Types of Cookies We Use:

• Essential/Necessary Cookies: These cookies are required for the Site to function properly, including navigation and form submission. They expire when you close your browser.
• Analytics Cookies: Google Analytics cookies track how you use the Site (pages visited, time on page, links clicked). These cookies are retained for up to 13 months.
• Preference/Functionality Cookies: These remember your choices (such as language or viewing preferences) to personalise your experience. These cookies persist for up to 2 years.

Managing Your Cookie Preferences:

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. Please note that disabling certain cookies may limit Site functionality. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

When you first visit our Site, a cookie consent banner will appear. You can accept or reject non-essential cookies. Your preference is stored in your browser's local storage for 12 months.

11. Children's Privacy

Our Site is not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will promptly delete such information. If you believe a child has provided us with personal data, please contact us immediately at [email protected].

12. Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, and destruction. These measures include:

• Secure HTTPS connections for all communication.
• Firewalls and intrusion detection systems.
• Regular security audits and updates.
• Limited access to personal data (staff need-to-know basis).
• Confidentiality agreements with all staff and third-party processors.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You use our Site at your own risk.

13. Third-Party Links and External Services

Our Site may contain links to third-party websites and services. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of external websites. If you click a link to a third-party site, we encourage you to review their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by:

• Updating the "Last Updated" date at the top of this policy.
• Sending you an email notification (if you have provided an email address).
• Displaying a prominent notice on our Site.

Your continued use of the Site after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly.

15. Data Protection Officer and Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

16. Legal Basis Summary

The table below summarises our processing activities and their legal bases:

17. Acknowledgement

By using our Site, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Site immediately.

This Privacy Policy is effective as of January 15, 2026, and is compliant with the General Data Protection Regulation (GDPR) and applicable Irish data protection law.