Privacy Policy

GairnPhundholm ("we", "us", "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, register for access, or otherwise interact with our services (collectively, the "Services"). Please read this policy carefully. By using the Services, you agree to the practices described below.

This document is a template and should be reviewed and adapted to reflect your organisation's actual data practices, applicable laws, and regulatory obligations before publication.

1. Information We Collect

We may collect the following categories of information:

• Contact and identity data — such as your name, email address, telephone number, and any details submitted through request-access or contact forms.
• Account and usage data — including login activity, preferences, and interactions with features of the Services.
• Technical data — such as IP address, browser type, device information, and pages visited, typically collected automatically through cookies or similar technologies.
• Communications — records of correspondence you send to us, including support requests and enquiries.

2. How We Use Information

We use the information we collect for purposes that may include:

• Providing, maintaining, and improving the Services and their features.
• Responding to enquiries, processing access requests, and communicating updates.
• Monitoring usage patterns to maintain security and improve reliability.
• Complying with applicable legal, regulatory, or contractual obligations.

3. Legal Basis for Processing

Where required by applicable data protection law, we process personal information on the basis of one or more of the following: your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interests in operating and improving the Services, provided such interests are not overridden by your data protection rights.

4. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to recognise repeat visits, understand usage patterns, and improve functionality. You can control cookie preferences through your browser settings; however, disabling certain cookies may affect the availability of some features.

5. Sharing and Disclosure of Information

We do not sell personal information. We may share information with:

• Service providers and processors who support the operation of our Services, subject to confidentiality obligations.
• Professional advisors, regulators, or authorities where disclosure is required to comply with law or protect legal rights.
• A successor entity in the event of a merger, acquisition, or transfer of business assets, subject to equivalent privacy protections.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and applicable regulatory obligations.

7. Data Security

We implement reasonable administrative, technical, and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

If personal information is transferred across borders, we will take steps intended to ensure it receives an adequate level of protection in accordance with applicable data protection laws, which may include the use of standard contractual clauses or equivalent safeguards.

9. Your Rights

Depending on your jurisdiction, you may have rights that include the ability to access, correct, delete, or restrict the use of your personal information, to object to certain processing activities, and to request portability of your data. You may also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a relevant supervisory authority.

To exercise any of these rights, please contact us using the details provided on our website. We may need to verify your identity before responding to a request.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it.

11. Third-Party Links

Our Services may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the details provided in the footer of our website.