GDPR Compliance Statement

Last Updated: May 15, 2026

Our Commitment to GDPR

glimmer-ignition is fully committed to compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. We recognize the importance of protecting your personal data and upholding your privacy rights.

Data Controller Information

glimmer-ignition is the data controller for personal information collected through our website and services.

Registered Business: glimmer-ignition
Address: 42 Merrion Square East, Dublin 2, D02 PF84, Ireland
Contact: [email protected]

Your GDPR Rights

Under GDPR, you have comprehensive rights regarding your personal data:

1. Right to Access (Article 15)

You can request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information within one month of your request.

2. Right to Rectification (Article 16)

If your personal data is inaccurate or incomplete, you can request correction. We will update your information promptly.

3. Right to Erasure / "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Legal obligations require erasure

Note: We may be legally required to retain certain data for up to 7 years under Irish law, particularly for financial and tax records.

4. Right to Restriction of Processing (Article 18)

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data.

5. Right to Data Portability (Article 20)

You can receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller.

6. Right to Object (Article 21)

You can object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

7. Rights Related to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, contact us via:

• Email: [email protected] (Subject: "GDPR Request")
• Post: glimmer-ignition, 42 Merrion Square East, Dublin 2, D02 PF84, Ireland

We will respond to your request within one month. In complex cases, this may be extended by two additional months, and we will inform you of the extension.

Lawful Basis for Processing

We process your personal data only when we have a lawful basis:

Contract (Article 6(1)(b))

Processing is necessary to fulfill our service agreement with you, including assessing eligibility and preparing benefit applications.

Consent (Article 6(1)(a))

You have provided explicit consent for specific processing activities. You can withdraw consent at any time.

Legal Obligation (Article 6(1)(c))

We are legally required to process certain data, such as maintaining records for tax and regulatory purposes.

Legitimate Interests (Article 6(1)(f))

Processing is necessary for our legitimate business interests (e.g., improving services, fraud prevention), provided your fundamental rights are not overridden.

Special Category Data

We may process special category data (health information, financial hardship details) when necessary for benefit applications. This processing is based on:

• Your explicit consent (Article 9(2)(a))
• Necessary for reasons of substantial public interest (Article 9(2)(g))
• Necessary for social protection law purposes (Article 9(2)(h))

Data Protection Measures

We implement robust security measures, including:

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Staff training on data protection principles
• Access controls ensuring only authorized personnel handle your data
• Secure backup procedures
• Incident response protocols

Data Breach Notification

In the unlikely event of a data breach affecting your personal data, we will:

• Notify the Data Protection Commission within 72 hours of becoming aware
• Inform affected individuals without undue delay if the breach poses a high risk to your rights
• Provide clear information about the breach and steps being taken

International Data Transfers

Your personal data is stored and processed within the European Economic Area (EEA). We do not transfer data outside the EEA. Should this change, we will ensure appropriate safeguards are in place.

Data Protection Officer

While not legally required to appoint a Data Protection Officer (DPO), we have designated a privacy compliance officer responsible for GDPR matters. Contact them at: [email protected]

Complaints and Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Phone: +353 (0)761 104 800
Email: [email protected]
Website: www.glimmer-ignition.com

Children's Data

Our services are intended for adults. We do not knowingly process personal data of individuals under 18 years of age.

Updates to GDPR Compliance

We regularly review our GDPR compliance practices. This statement may be updated to reflect changes in law or our practices. Significant changes will be communicated to active clients.

Accountability

We maintain detailed records of our processing activities, conduct regular Data Protection Impact Assessments (DPIAs) for high-risk processing, and ensure all staff understand their data protection responsibilities.

Further Information

For more details on how we collect and use your personal data, see our Privacy Policy.