Last Updated: September 2026
Spirehollow is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the rights of individuals whose personal data we process. This page outlines our approach to GDPR compliance and your rights under this regulation.
As a business operating within the European Union, we take our responsibilities under the GDPR seriously. We have implemented appropriate policies, procedures, and technical measures to ensure that personal data is processed lawfully, fairly, and transparently.
Spirehollow acts as the data controller for personal information collected through our website and in the course of providing our services. This means we determine the purposes and means of processing personal data.
Contact details for data protection matters:
Spirehollow
14 Merrion Square East
Dublin 2, D02 VF82
Ireland
Email: [email protected]
We only process personal data when we have a valid lawful basis to do so. The lawful bases we rely on include:
The GDPR provides you with the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have challenged.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making processes.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by up to two months, but we will inform you of any extension within the first month.
We have implemented appropriate technical and organisational measures to protect personal data, including:
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries deemed to have adequate data protection laws.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you are not satisfied with our response to any data protection concern, you have the right to lodge a complaint with a supervisory authority. For individuals in Ireland, this is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.