Privacy Policy
1. Who We Are
Cabra Family Resource Centre is a community-led organisation based in Cabra, Dublin 7. We are funded by Pobal under the Family Resource Centre National Programme and are part of a nationwide network of 121 Family Resource Centres. We are committed to protecting the privacy of everyone who visits our website or contacts us.
For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, Cabra Family Resource Centre is the Data Controller for personal data collected through this website.
2. What Personal Data We Collect
We only collect personal data that you choose to provide to us. Through our website, we may collect:
| Column 1 | Column 2 | ||
|---|---|---|---|
| Data Collected | Legal Basis | Purpose | Retention |
| Name | Legitimate interest | To address you correctly when responding to your enquiry | Until your enquiry is resolved, max 12 months |
| Email address | Legitimate interest | To reply to your enquiry or contact form submission | Until your enquiry is resolved, max 12 months |
| Phone number (if provided) | Legitimate interest | To contact you if you request a callback | Until your enquiry is resolved, max 12 months |
| Message content | Legitimate interest | To understand and respond to your enquiry | Until your enquiry is resolved, max 12 months |
| IP address and browser data | Legitimate interest (website security) | Website analytics and security monitoring | Up to 26 months (analytics), session only (security) |
| Column 1 | Column 2 |
|---|---|
| We do not collect sensitive personal data (such as health information, financial details, or details about children) through our website contact form. If you need to share sensitive information with us, please contact us by phone or in person. |
3. Why We Collect Your Data and Our Legal Basis
3.1 Responding to enquiries (Legal basis: Legitimate interest)
When you contact us through our website contact form or by email, we use your personal data to respond to your enquiry. This is based on our legitimate interest in communicating with people who wish to access our services or find out about our work. This interest does not override your rights as a data subject.
3.2 Website analytics (Legal basis: Legitimate interest / Consent)
If our website uses analytics tools such as Google Analytics, we may collect anonymised data about how visitors use our website. This helps us understand how to improve the site. Where analytics cookies are used, we will ask for your consent before placing them. Please see our Cookie Notice below for full details.
3.3 We do not use your data for marketing
We will not use your contact details to send you unsolicited marketing emails, newsletters, or other promotional material without your explicit consent. If you would like to hear from us about our programmes and services, you can let us know when you contact us.
4. How We Store and Protect Your Data
- All data submitted through our contact form is transmitted over a secure HTTPS connection
- Enquiry emails and contact form submissions are stored in our secure email system and accessed only by authorised staff
- We do not store contact form data in unsecured spreadsheets, shared drives, or third-party systems unless necessary to respond to your enquiry
- Staff who handle personal data are trained in data protection and are bound by confidentiality obligations
- We regularly review our data storage practices to ensure they remain secure and compliant
5. How Long We Keep Your Data
We only keep your personal data for as long as necessary to fulfil the purpose for which it was collected:
- Contact form enquiries and email correspondence: up to 12 months after your enquiry is resolved
- Website analytics data: up to 26 months (in line with Google Analytics default settings, if used)
- If you become a client or service user of Cabra FRC, your data will be retained in accordance with our Data Protection and Confidentiality Policy, which governs all service-user records
After the retention period has passed, your data is securely deleted.
6. Sharing Your Data
We do not sell, rent, or share your personal data with third parties for commercial purposes. We may share data in the following limited circumstances:
- With our website hosting provider and email service provider, to the extent necessary to operate the website and respond to your enquiry
- With statutory agencies (such as Tusla or An Garda Siochana) if we are legally required to do so or if there is a risk of harm
- With our funders (Pobal, Tusla) for programme monitoring and evaluation purposes, using anonymised or aggregated data only
Where we share data with third-party service providers, we ensure they are bound by appropriate data processing agreements and GDPR-compliant data protection standards.
7. Your Rights Under GDPR
You have the following rights in relation to your personal data:
| Column 1 | |
|---|---|
| Your Right | What It Means |
| Right of access | You can ask us what personal data we hold about you and request a copy. |
| Right to rectification | You can ask us to correct any inaccurate or incomplete data we hold about you. |
| Right to erasure | You can ask us to delete your personal data in certain circumstances. |
| Right to restrict processing | You can ask us to limit how we use your data in certain circumstances. |
| Right to object | You can object to us processing your data on the basis of legitimate interests. |
| Right to data portability | You can ask us to provide your data in a portable, machine-readable format. |
| Right to withdraw consent | Where processing is based on consent, you can withdraw it at any time. |
To exercise any of these rights, please contact us at the email address or postal address above. We will respond within one month. There is no charge for exercising your rights.
8. Complaints
If you are not satisfied with how we handle your personal data, you have the right to make a complaint to the Data Protection Commission (DPC):
- Website: www.dataprotection.ie
- Phone: +353 (0)761 104 800
- Post: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28
We would always appreciate the opportunity to address your concerns directly before you contact the DPC. Please contact us first and we will do our best to resolve the matter.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in data protection law. The most current version will always be available on our website. We will notify you of any significant changes where we are able to do so.
10. Contact Us About Data Protection
If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your data rights, please contact us:
- Email: info@cabrafrc.ie
- Post: Manager, Cabra Family Resource Centre, Cabra, Dublin 7
- Phone: 086 819 5765