Privacy Policy

Data Controller Information

Xirious Ltd is the data controller responsible for your personal data. We are registered in Ireland with company registration number 1234567AB and VAT number IE1234567AB. Our registered office is located at Shop Street 12, Galway H58 3743, Connacht, Ireland.

Data We Collect

We collect different types of personal data collection depending on how you interact with our services:

• Contact Information: Name, email address, phone number, company name, and job title when you contact us or request our services
• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referral sources
• Communication Data: Records of your communications with us, including emails, phone calls, and support requests
• Project Data: Information related to projects and services we provide to you, including technical specifications and requirements
• Marketing Data: Your preferences for receiving marketing communications and your responses to our marketing campaigns

How We Use Your Information

We use of your data for the following purposes based on legitimate legal grounds under GDPR:

• Service Delivery: To provide, maintain, and improve our technology services and support (Legal basis: Contract performance)
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications (Legal basis: Contract performance and legitimate interests)
• Business Operations: To manage our business relationship with you, process payments, and maintain records (Legal basis: Contract performance and legal obligations)
• Marketing: To send you information about our services, industry insights, and promotional offers (Legal basis: Consent or legitimate interests)
• Analytics: To understand how our website is used and improve user experience (Legal basis: Legitimate interests)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes (Legal basis: Legal obligations)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

• Service Providers: Trusted third-party companies that help us operate our business, such as cloud hosting providers, email services, and analytics platforms
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights and safety
• Business Transfers: In connection with any merger, sale, or transfer of our business assets
• Consent: With your explicit consent for specific purposes

Data Retention

We retain your personal data retention only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law. Specifically:

• Contact and Communication Data: 7 years after last contact for business records
• Website Analytics Data: 26 months in Google Analytics
• Marketing Data: Until you unsubscribe or withdraw consent
• Project Data: 10 years for contractual and legal compliance purposes

Your Rights

Under GDPR and applicable data protection laws, your rights include:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing of your data
• Portability: Request transfer of your data to another organization
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

International Data Transfers

As we operate primarily within the European Union, your data is generally processed within the EU/EEA. When we use service providers outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with applicable data protection laws.