Privacy Policy

1. Who we are

hireportaloo.co.uk is operated by Marista Publications, a company registered in the Republic of Ireland. For data protection purposes, Marista Publications is the data controller. Our supervisory authority is the Irish Data Protection Commission (DPC). If you are located in the United Kingdom, you may also raise concerns with the UK Information Commissioner's Office (ICO) at ico.org.uk. You can contact us via the Contact page.

2. Applicable law

As an Irish-registered company operating a service accessible to users in the UK and the EU, we comply with both EU GDPR (as implemented in Irish law) and UK GDPR (as retained in UK law). The obligations under both frameworks are substantially similar and we apply the higher standard where any difference exists.

3. Data we collect

Searchers (no account required): We do not knowingly collect personal data from visitors who browse without registering. Standard server logs (IP address, browser type, pages visited) are retained for up to 90 days for security and performance purposes.

Supplier accounts: When a Supplier submits or claims a listing, we collect: name, email address, business name, business address, phone number, and any other information provided in the listing form. This information is displayed publicly on the Directory as part of the listing.

Payments: Payment transactions are processed by Stripe. We do not store credit or debit card details. Stripe's privacy policy governs all payment data.

Contact form: Name, email address, and message content. Retained for up to 12 months.

4. How we use your data

We use your personal data only for the following purposes:

• To display Supplier listing information publicly on the Directory.
• To manage Supplier accounts and process payments for paid packages.
• To respond to contact form submissions.
• To send transactional emails: account confirmation, payment receipts, and renewal reminders.
• To maintain the security and performance of the website.

5. Legal basis for processing (EU & UK GDPR)

We process personal data on the following bases under EU and UK GDPR:

• Contract: Processing necessary to manage a Supplier's listing account and process payments (Article 6(1)(b)).
• Legitimate interests: Security logging, maintaining listing accuracy, responding to contact enquiries (Article 6(1)(f)).
• Legal obligation: Retaining payment records as required by applicable tax law (Article 6(1)(c)).
• Consent: Marketing communications, where applicable (Article 6(1)(a)).

6. Third-party processors

We use the following third-party processors, each of whom may process personal data on our behalf:

• Stripe — payment processing. Data may be transferred outside the EEA under Stripe's standard contractual clauses.
• Google — map display (Google Maps API) on the Suppliers page. Google's privacy policy applies to map data.
• Hostinger — web hosting. Data is stored on servers within the EU/EEA.

We do not sell, rent, or share personal data with any third party for marketing purposes.

7. Cookies

We use the following cookies on this website:

• Session cookies — required for logged-in Supplier accounts. Session duration only.
• Checkout cookies — required for the payment checkout process. Session duration only.
• Google Maps cookies — set when the map on the Suppliers page is loaded. See Google's cookie policy for details.

We do not use advertising cookies or third-party tracking cookies for marketing purposes.

8. Your rights

Under EU GDPR and UK GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure; restrict or object to processing; and data portability. To exercise any of these rights, please contact us. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Irish DPC (dataprotection.ie) or, if you are in the UK, the ICO (ico.org.uk).

9. Data retention

We retain personal data for the following periods:

• Supplier listing data: retained while the account is active, and for 12 months after account closure.
• Payment records: retained for 7 years as required by applicable tax law.
• Contact form submissions: retained for 12 months.
• Server logs: retained for 90 days.

10. Changes to this policy

We may update this policy from time to time. The date shown above indicates when it was last revised. For material changes, we will notify Supplier account holders by email.