An Irish charitable trust · RCN: 20013066
Legal

Privacy Policy

This policy explains the personal information processed through this website and how to contact the organization about your privacy.

Organization and data controller

Galway Association For Mentally Handicapped Children Trust Fund is the organization identified for this website. RCN: 20013066. Public contact address: Unit 1, Stephens Place, Spencer St, Curragh, Castlebar, Co. Mayo, F23 XN79, Ireland. Privacy enquiries: contact@sokoldalesice.org. Telephone: +353949286666. This address is provided for public contact, not represented as a verified registered office.

Information you provide

The contact and feedback forms collect your name, email, optional telephone number, enquiry type, subject, message, privacy agreement, and submission time. A submission reference is generated. Do not send diagnoses, health information, details identifying children, financial information, or other sensitive personal data through these forms.

Why information is processed

Enquiry information is used to receive, review, and respond to your correspondence. Depending on the correspondence, legitimate interests in administering organizational enquiries or steps taken at your request may provide the applicable basis under GDPR. The privacy acknowledgement confirms that you have read this notice; it is not consent for marketing. No marketing mailing list is created.

Spam prevention and technical information

The form uses a hidden spam-detection field and submission limits. A one-way hash derived from your email address and the request IP information, where available, is used as a rate-limit identifier. Raw IP addresses are not stored in the enquiries table. Hosting and authentication providers may process technical request and account information to operate their services.

Cookie-free visitor analytics

Lovable collects this data for us. Lovable’s privacy policy (https://lovable.dev/privacy) explains how it handles it. The analytics uses no cookies, stores nothing on your device, does not keep IP addresses, and does not identify visitors.

What analytics records

When this website is published, analytics records pages visited, where visitors came from, country, browser, operating system, device type, time on page, page-load performance, errors, and clicks on buttons and links. No custom app events are sent by this website. All of this is recorded for every visitor; there is no analytics consent banner. Detailed data is retained for 90 days and daily summaries for a year.

Hosting, processors, and security

The website, database, authentication, and file storage use Lovable Cloud and its infrastructure providers. Uploaded website media is delivered through Lovable Assets. Enquiries are stored behind access policies that restrict reading and deletion to authorized administrators. Administrator accounts use authentication sessions. These measures reduce risk but cannot guarantee absolute security.

Fonts, external links, and maps

Fonts are loaded from Google Fonts, which receives technical information needed to serve them, including your IP address and browser request details. External resources and map links open the relevant provider’s website; their own privacy notices then apply. There are no embedded maps, advertising pixels, or third-party video players on this website.

Retention and international transfers

The website does not implement automatic deletion of enquiries or spam-limit records. They remain stored until an authorized administrator removes them or arranges deletion. The organization should review retention against the purpose of each enquiry and applicable legal requirements. Hosting and supporting providers may process information outside the EEA; applicable provider arrangements and GDPR safeguards should be assessed by the organization. A specific transfer certification is not claimed.

Your GDPR rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, or objection to processing. Data portability applies where the relevant conditions are met. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact the published email address with your request. Proportionate identity verification may be needed; do not send identity documents through the general form.

Children and sensitive information

This public website does not create child accounts or intentionally request information about children’s health or personal circumstances. If sensitive information is submitted unintentionally, contact the organization to request appropriate handling. Do not rely on this form for safeguarding or emergency reports.

Complaints and updates

You may raise a privacy concern with the organization or contact the Irish Data Protection Commission at https://www.dataprotection.ie. This policy may be updated when website processing changes. It describes the current website implementation and does not claim a legal compliance certification.