How Information Is Used

Who is responsible

Palszap Bamboo Towr Limited is the controller of personal data we process for operating this resource and handling correspondence. Our registered office is 33 Baggot Street Lower, Dublin 2, D02 V907, Ireland; company number 756284. Contact [email protected] for privacy enquiries.

Information used to deliver the site

When your browser requests a page or image, hosting infrastructure necessarily receives connection information such as your IP address, requested resource, request time and technical browser details. Technical logs may be used to deliver pages, investigate failures and protect the service. Our legitimate interests in operating a secure, reliable educational website are the legal basis for this processing. We do not use these records to build advertising profiles.

This site’s code contains no analytics, advertising pixels, social-media embeds or third-party font services. Images and scripts are requested from the site itself. Following an external source link takes you to another provider whose privacy practices apply there.

The field-note composer

Text entered in the composer is processed locally in the current browser page. The tool has no message-submission endpoint, does not upload your entries and does not store drafts in localStorage. Copying transfers text to your device’s clipboard; downloading creates a text file on your device. Your browser, operating system, clipboard manager or device backup may manage those copies independently.

Do not treat the composer as secure storage. Closing or refreshing the page may discard your draft, although browser restoration behaviour varies. If you choose to send the note using your own email application, the message then passes through your email provider and ours.

Correspondence

If you email us, we receive the content, sender details and associated message metadata. We use them to consider your enquiry, respond where appropriate and maintain a record of corrections or issues. Our legal basis is our legitimate interest in handling reader correspondence; legal obligations may also require retention in specific circumstances. Please include only information needed for the enquiry.

We normally retain ordinary correspondence for up to 12 months after the matter is closed, then delete it or remove identifying details. Records needed for a continuing dispute, legal obligation or security investigation may be retained longer for that purpose. Technical access logs should be kept only for the operational or security period needed, normally no longer than 90 days unless an incident requires extended retention.

Browser preferences

The cookie-controls page can store a preference in localStorage under palszap-cookie-preference. It records a choice, not your draft or contact details. It remains until cleared by you or your browser. No optional analytics or marketing storage is currently used. See Your Cookie Controls for details and deletion controls.

Recipients, transfers and security

Hosting and email providers may process necessary technical data or correspondence on our behalf. We do not sell personal data. Information may be disclosed where required by law or necessary to establish, exercise or defend legal claims. Where a provider processes personal data outside the European Economic Area, applicable transfer safeguards are required, such as an adequacy decision or approved contractual safeguards.

We limit access to information needed for legitimate tasks and use reasonable technical and organisational protections. No website, email service or device can be guaranteed completely secure.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent where processing relies on it, without affecting earlier lawful processing. We may need enough information to verify a request. We do not make decisions about you based solely on automated processing with legal or similarly significant effects.

Contact us using the address above. We aim to respond within the time required by the GDPR, normally one month. You may also complain to Ireland’s Data Protection Commission or your relevant supervisory authority.

Children and changes

This resource is general educational reading and does not require accounts or personal profiles. Children should not send personal information unnecessarily. If you believe a child has shared information that should be removed, contact us. Material changes to this notice will be published here with an updated effective date.