Woodview House is an Irish business. This website, woodviewhouse.ie, is operated by us. Our address is Woodview, Curraghphadeen, Mallow, Cork, P51A997.

For the purposes of data protection law, we are the data controller for the personal data described in this policy. If you have any question about how we handle your data, email stay@woodviewhouse.ie or call 087 461 3201.

When you make a booking or enquiry, we collect your name, contact details such as your address, Eircode, phone number and email address, and the details of what you have asked for: the product or service, the date, and any notes you give us. We need this to provide what you have requested and to contact you about it. The legal basis is the performance of our contract with you.

When you pay online, your card details are collected and processed directly by our payment provider. We never see or store your full card number. We receive only a confirmation of payment and a reference. The legal basis is the performance of our contract with you.

When you ring or email us, we keep a record of the correspondence so we can deal with your query and keep track of what was agreed. The legal basis is our legitimate interest in running the business properly.

When you visit the website, we collect limited technical data such as pages viewed and device type, through cookies and similar technologies. This is covered in detail in our separate Cookie Policy.

We do not collect any more than we need, and we never sell personal data to anyone.

We send you messages directly connected to your booking or order: confirmations, receipts, and reminders about appointments or work we are doing for you. These are part of providing the service, not marketing.

If we ever want to send you anything beyond that, we will ask for your consent first, and every such message will include a simple way to opt out.

We share personal data only where it is needed to provide the service:

• Our payment provider, to process your payment securely

• Our booking and email systems, which store booking details and send confirmations, reports, and reminders on our behalf

• Our accountant and professional advisers, where necessary for the running of the business

We may also disclose data where the law requires it, for example, to the Revenue Commissioners.

All third parties that process data on our behalf do so under contract and only on our instructions.

Our systems are hosted within the European Economic Area wherever possible. Where a provider stores data outside the EEA, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

• Booking and service records: 7 years, in line with our tax and accounting obligations and so that we hold a proper service history for your boiler

• Service reports and gas safety records: 7 years, in line with our obligations as Registered Gas Installers

• General correspondence: up to 2 years after the matter is closed

• Website analytics data: as set out in our Cookie Policy

When data is no longer needed, it is securely deleted.

We take reasonable technical and organisational measures to protect personal data: encrypted connections on the website, access controls on our systems, and payment processing handled entirely by our payment provider. No system is perfectly secure, but if a breach ever occurs that puts your rights at risk, we will notify you and the Data Protection Commission as required by law.

Under GDPR you have the right to:

• Access a copy of the personal data we hold about you

• Correct anything that is inaccurate or incomplete

• Delete your data, where we no longer have a valid reason to keep it

• Restrict or object to certain processing

• Receive your data in a portable format

• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, stay@woodviewhouse.ie. We will respond within one month. There is no charge, except where requests are clearly unfounded or excessive.

If you are unhappy with how we have handled your data, you have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, or at dataprotection.ie. We would appreciate the chance to sort it out directly first.

Our services and website are aimed at adults. We do not knowingly collect personal data from anyone under 18. Bookings must be made by an adult.

We may update this policy from time to time to reflect changes in our services, the law, or how we run the business. The "Effective from" date at the top of the page tells you when the current version was published. Meaningful changes affecting existing customers will be emailed in advance.