Privacy Policy

Effective date: 2 October 2025
Last updated: as above

1.0 Introduction

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use our website and any related services.

Our website address is: https://www.enovation.ie

Where we refer to “personal data,” “processing,” “data subject,” etc., those terms have the meaning given under the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Data Protection Acts 1988–2018 (Ireland) (as may be applicable).

By using our Site and/or providing us with your personal data, you agree to the practices described in this policy.

2.0 Contact details

• Registered Name: Enovation Solutions Ltd.
• Registered Office: The Friary, Bow Street, Smithfield, Dublin D07 X680, Ireland.
• Email: dpo@enovation.ie
• Registration Number: 328876
• VAT Number: 6348876N

If at any time you have questions about this policy or our processing of your personal data, you may contact us at the above address or email.

3.0 What personal data we collect & how

ENOVATION is a Controller of the personal data you (data subject) provide us. We collect various types of personal data, depending on how you interact with us. Below is a summary; more detail follows.

Data you provide directly

• Contact information (name, email address, telephone number) when you fill in forms (e.g. contact forms, newsletter subscription, quote requests).
• Account credentials (username, password) if you register for an account.
• Communications you send us (e.g. message content, feedback, survey responses).
• Other optional information you choose to provide (e.g. company name, job title, preferences).

Data collected automatically / passively

When you interact with our Site, we may automatically collect:

• Technical data: your IP address and web browsing device information.
• Usage data: pages visited, time spent on pages, clickstream data, referring site, exit pages, search terms.
• Cookies and similar tracking technologies (see section 7).

Data from third parties

We may receive data about you from third-party sources, such as:

• Analytics providers (e.g. Google Analytics)
• Advertising networks
• Social media platforms (if you login via social login)
• Public databases or business directories
• Payment service providers

We will only combine or use that data consistent with this Privacy Policy.

Our General Personal Data Protection Policy governs the use and storage of your data. You can view this document here.

4.0 Legal bases for processing & purpose of use

Under Article 6 of the GDPR, we must have a lawful basis to process personal data. Below are the bases and how they apply:

• Consent: In certain cases (e.g. subscribing to marketing / newsletters, non-essential cookies), we rely on your consent.
• Performance of a contract / to take steps prior to a contract: e.g. processing payment, providing and managing the contracted services.
• Legal obligation: To comply with statutory or regulatory obligations (e.g. record-keeping, tax obligations).
• Legitimate interests: Where we have a legitimate interest (and that interest is not overridden by your rights) — e.g. maintaining the security of our services, fraud detection, improving our services, internal analytics, direct marketing (if allowed).

We process personal data for the following purposes:

• To provide and manage the contracted services
• To communicate with you (e.g. respond to inquiries, send updates)
• To send marketing communications (subject to your consent / rights)
• To perform analytics and improve our offerings
• To prevent fraud, ensure security, detect misuse
• To comply with legal obligations

We will not use your data in a way incompatible with the purposes disclosed at collection, unless we notify you and (if required) get additional consent.

5.0 Sharing of personal data

Your personal data is processed by Enovation in our offices and data centres located in Europe.

We use the following third party providers with whom we may share some of the information we collect for the purposes specified above:

• Mailchimp (email marketing)
• NetSuite(CRM)
• Xero (accounting)
• Google (analytics)
• Formilla (web chat)
• Moodle (LMS provider)
• Totara (LMS provider)

We may share your personal data with:

• Our employees, agents, contractors or service providers who require access in order to perform tasks (e.g. IT providers, payment processors, hosting providers, analytics providers).
• Third parties in connection with business transactions: e.g. in the event we reorganise, merge, or sell part or all of our business, your personal data may be transferred as part of that transaction.
• Legal and regulatory authorities, if required by law, or to protect our rights (e.g. court order, data breach obligations).
• Third parties to whom you authorise disclosure.

Where we share data, we ensure appropriate contractual safeguards (e.g. data processing agreements) and require that recipients respect the security and confidentiality of your data.

6.0 International transfers of personal data

If we transfer your personal data outside the European Economic Area (EEA), we will only do so where:

• The destination country has been deemed by the EU Commission to provide an adequate level of protection; or
• We implement appropriate safeguards (e.g. standard contractual clauses, binding corporate rules) in compliance with Article 46 GDPR; or
• Other permitted mechanisms under GDPR (e.g. explicit consent, derogations) apply.

We will notify you of cross‑border transfers and the safeguards applied.

7.0 Cookies

We use cookies and similar tracking technologies (such as web beacons, pixels, local storage) to collect usage data, for analytics, personalization, marketing, and site functionality.

What cookies we use

Types of cookies we may use:

• Strictly necessary cookies — essential for basic site functionality (these do not require your consent).
• Performance / analytics cookies — to understand site usage and improve performance.
• Functional cookies — to remember your preferences (e.g. language, region).
• Advertising / targeting cookies — to deliver relevant ads and measure ad effectiveness.

We may also employ third‑party cookies (e.g. Google Analytics, social media pixels, ad networks).

Consent & control

• We will obtain your explicit consent (via a cookie banner or preference center) before using non-essential cookies.
• You can withdraw consent or manage cookie settings at any time via the cookie preference tool or your browser settings.
• Disabling or refusing cookies may affect your ability to use certain functions of the Site.

Please see our separate Cookie Policy (or section) for more detail on each cookie, its purpose, and retention.

8.0 Retention of personal data

All data related to contracted services will be retained for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements.

Any personal data held by us for marketing will be kept by us until such time that you notify us that you no longer wish to receive this information.

When determining retention periods, we consider:

• The nature and sensitivity of the data
• The purposes of processing and whether we can achieve those purposes by other means
• Legal or regulatory obligations requiring retention
• Statutes of limitations

After the retention period, personal data will be securely deleted or anonymised.

Should you believe that any personal data we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted by contacting us at dpo@www.enovation.ie.

9.0 Security of personal data

We use appropriate technical and organisational measures to protect personal data from loss, unauthorised access, disclosure, alteration, or destruction. Measures may include:

• Encryption (in transit, at rest)
• Secure servers, firewalls, intrusion detection
• Access controls and authentication
• Regular security assessments and audits
• Limiting access to those who need to know

However, no method of transmission or storage is 100% secure, so we cannot guarantee absolute security; but we will take all reasonable steps.

10.0 Your rights as a data subject

Under GDPR, you have the following rights (in certain circumstances):

• Right to be informed — you have the right to know how your data is processed (this policy helps fulfil this).
• Right of access — you can request a copy of your personal data and information about its processing.
• Right to rectification — you may ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — in certain cases, you can ask us to delete your personal data.
• Right to restrict processing — you can request that processing be limited in particular circumstances.
• Right to data portability — you may request to receive your data in a structured, commonly used format or transmit it to another controller.
• Right to object — you may object to processing based on legitimate interests (or direct marketing).
• Rights related to automated decision-making / profiling — you may request us to review decisions made solely by automated means, where applicable.

If you wish to exercise any of these rights, please contact us using the contact details in Section 2. We will respond without undue delay, and at the latest within one month (extensions possible in complex cases).

If you believe we are not handling your data in compliance with applicable law, you have the right to lodge a complaint with a supervisory authority (in Ireland: the Data Protection Commission).

11.0 Children’s data

Our services and website are not directed to children under [16 / or local threshold]. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will promptly delete it.

12.0 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our data practices, legal requirements, or our Site features. We will post the new version here with an updated effective date. For significant changes, we may notify you (e.g. by email or notice on Site).

We encourage you to review this Privacy Policy periodically.

13.0 Complaints / Supervisory authority

If you have concerns about our processing or cannot resolve a dispute with us, you can lodge a complaint with your national supervisory authority. In Ireland, that is the Data Protection Commission (DPC).

Contact details:
Data Protection Commission
Location: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie

Alternatively, in other EU Member States you may contact the relevant supervisory authority.