Privacy Policy

Introduction

Pakihlumom ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at pakihlumom.ie (the "Website") and use our gardening guidance services.

The data controller responsible for your personal information is Pakihlumom, a company registered in Ireland. Our registered address is 8 Patrick Street, Dublin 8, Ireland. Please read this policy carefully to understand our practices regarding your personal data.

If you do not agree with our policies and practices, please do not use our Website. By accessing and using this Website, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by all of its terms.

What Data We Collect

We collect various types of information in connection with the services we provide, including:

Information You Provide Directly

• Contact Form Data: When you submit an inquiry through our contact form, we collect your full name, email address, phone number (optional), subject, and message content.
• Email Correspondence: If you communicate with us via email, we retain your email address, name, and the content of your messages.
• Account Information: If applicable, we may collect username, password, and account preferences.
• Feedback and Testimonials: Any feedback, reviews, or testimonials you voluntarily provide.

Information Collected Automatically

• IP Address: Your Internet Protocol (IP) address is automatically recorded when you access our Website.
• Device Information: We collect data about your device type, operating system, browser type, and browser version.
• Cookie Data: Information stored through cookies, including unique identifiers and user preferences.
• Usage Data: Pages viewed, links clicked, time spent on pages, referral sources, and actions taken on the Website.
• Server Logs: Our web servers automatically log requests, including timestamps, URL requested, and HTTP status codes.
• Analytics Data: Information collected through Google Analytics, including user journey, behaviour patterns, and engagement metrics.

How We Collect Data

We collect information through several methods:

• Contact Forms: Information submitted through our website inquiry form.
• Cookies: Small files stored on your device that help us remember preferences and track usage.
• Analytics Tools: Google Analytics is integrated into our Website to monitor traffic and user behaviour.
• Meta Pixel: We use Meta Pixel (Facebook's tracking tool) to measure website conversions and optimise advertising campaigns.
• Server Logs: Our hosting provider's servers automatically generate logs of all site access.
• Third-Party Services: Payment processors, email service providers, and other service partners may collect data on our behalf.

Legal Basis for Processing Data

Under GDPR Article 6, we process your personal data on the following legal bases:

Consent (Article 6(1)(a))

When you submit a contact form, sign up for communications, or interact with optional features, you provide explicit consent for us to process your information for those specific purposes.

Legitimate Interest (Article 6(1)(f))

We process certain data based on our legitimate interests in maintaining website security, improving user experience, conducting analytics, and preventing fraud. These interests do not override your fundamental rights and freedoms.

Contract Performance (Article 6(1)(b))

If you engage our services, we process data necessary to fulfill our contractual obligations to you.

Legal Compliance (Article 6(1)(c))

We may process data to comply with legal obligations, such as tax requirements or law enforcement requests.

How We Use Your Data

We use the information we collect for the following purposes:

Service Delivery

• Responding to your inquiries and providing gardening guidance.
• Processing contact form submissions and providing requested information.
• Delivering newsletters or educational content if you have consented.
• Providing customer support and technical assistance.

Marketing and Communications

• Sending promotional content only to users who have explicitly consented.
• Creating targeted advertising campaigns through Meta Pixel and Google Ads.
• Conducting market research and surveys to improve our services.
• Notifying you of updates, changes to our policies, or new services.

Analytics and Improvement

• Analysing user behaviour through Google Analytics to improve website performance.
• Understanding which gardening topics are most valuable to our audience.
• Measuring website traffic, user engagement, and conversion rates.
• Optimising page load times and overall user experience.

Security and Compliance

• Preventing fraud, abuse, and security violations.
• Complying with legal obligations and responding to lawful requests.
• Maintaining audit trails for accountability and transparency.
• Enforcing our Terms of Service and other agreements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined below:

Data Type	Retention Period	Reason
Contact Form Data	2 years	Service delivery and follow-up inquiries
Email Communications	3 years	Record-keeping and customer support history
Analytics Data (Google Analytics)	26 months	Aggregated site improvement analysis
Cookie Data	13 months	User preference persistence and analytics
IP Address Logs	90 days	Security monitoring and abuse prevention
Meta Pixel Data	90 days	Advertising conversion measurement
Server Logs	30 days	Technical troubleshooting and security

After the retention period expires, we securely delete or anonymise the data. However, we may retain aggregated, anonymised data indefinitely for statistical purposes.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. However, we may share your information with the following categories of recipients:

Service Providers

• Hosting Provider: Our web hosting company stores our Website and user data on secure servers.
• Email Service Provider: If you subscribe to communications, your email may be processed by third-party email platforms.
• Analytics Providers: Google LLC processes analytics data through Google Analytics.
• Advertising Partners: Meta Platforms Ireland Limited receives data through Meta Pixel for campaign optimisation.
• Payment Processors: If applicable, payment information is processed by PCI-DSS compliant payment gateways.

Legal Requirements

We may disclose your information when required by law, including:

• Court orders, subpoenas, or law enforcement requests.
• Investigations into illegal activity or violations of our Terms of Service.
• Protection of our legal rights, privacy, or safety.
• Compliance with Irish and EU data protection regulations.

Business Transfers

If Pakihlumom is acquired, merges with another company, or undergoes bankruptcy, your data may be transferred as part of that transaction. You will be notified of any such change and any choices you may have.

No Data Sales

We confirm explicitly that we do not sell, share, or otherwise disclose personal data for monetary consideration to any third party.

International Data Transfers

Pakihlumom is based in Ireland and processes data primarily within the European Economic Area (EEA). However, some service providers may process data outside the EEA, including in the United States.

Safeguards for Transfers

When we transfer personal data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs): We use EU-approved SCCs with service providers to ensure data protection equivalent to GDPR standards.
• Adequacy Decisions: We work with countries or organisations that have received EU adequacy decisions.
• Your Explicit Consent: For certain transfers, we obtain your specific consent.

Google Analytics

Google Analytics may transfer data to the United States. Google has committed to GDPR compliance and uses Standard Contractual Clauses. For more information, see Google's Privacy Policy.

Meta Pixel

Meta Platforms may transfer data internationally. Meta has implemented standard contractual clauses and other mechanisms to ensure adequate protection.

Your Rights Under GDPR

Under GDPR Articles 15–22, you have the following rights regarding your personal data:

Right of Access (Article 15)

You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 days of your request, free of charge.

Right to Rectification (Article 16)

If your personal data is inaccurate or incomplete, you may request correction. We will update your information promptly.

Right to Erasure (Article 17)

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary or if you withdraw consent. We will erase your data within 30 days unless legal obligations require retention.

Right to Restrict Processing (Article 18)

You can request that we limit how we use your personal data while we verify accuracy or assess whether our interests override your rights.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller without hindrance.

Right to Object (Article 21)

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling grounds that override your rights.

Right to Withdraw Consent

If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, contact us at the details provided below. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commissioner (DPC).

Cookies and Similar Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit our Website. They allow us to recognise your device and remember your preferences over time.

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, such as security and session management. Duration: Session only.
• Analytics Cookies: Used by Google Analytics to measure traffic and user behaviour. Duration: Up to 2 years.
• Marketing Cookies: Used by Meta Pixel and similar tools to deliver targeted advertisements. Duration: Up to 13 months.
• Preference Cookies: Remember your language, font size, and other display preferences. Duration: Up to 1 year.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, blocking essential cookies may impair website functionality. For more information on managing cookies, visit www.allaboutcookies.org.

Children's Privacy

Our Website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it immediately and take appropriate measures to prevent further collection.

If you believe we have collected information from a child under 16, please contact us immediately at the details below.

Security of Your Data

We implement comprehensive security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmitted over the internet.
• Secure password hashing for stored credentials.
• Regular security audits and vulnerability assessments.
• Restricted access to personal data by authorised personnel only.
• Data breach response procedures.
• Regular backups to protect against data loss.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use our Website at your own risk.

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify you without undue delay, within 72 hours of discovery.
• Inform the Irish Data Protection Commissioner as required by GDPR Article 33.
• Provide details of the breach, affected data, and remedial measures taken.
• Recommend steps you should take to protect yourself.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the revised policy on our Website with an updated "Last Updated" date.
• Sending a notification email if you have subscribed to communications.
• Requiring explicit consent if changes affect how we process your data.

Your continued use of the Website following the posting of changes constitutes your acceptance of those changes. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a data breach, please contact us:

Right to Lodge a Complaint

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commissioner:

Data Protection Commission
Canal House
Station Road
Portarlington
County Laois
R32 AP23
Ireland

Email: [email protected]
Phone: +353 57 868 4800
Website: www.dataprotection.ie