Privacy Policy

Introduction

BoldNebula Ltd ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website boldnebula.top or use our restaurant loyalty program consulting services.

As the data controller, BoldNebula Ltd is responsible for determining the purposes and means of processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Irish data protection laws.

Data Collection

We collect information that you provide directly to us and information that is automatically collected when you use our website. The data we collect includes personal information that can identify you, either directly or in combination with other information.

Information You Provide

• • Contact information (name, email address, phone number)
• • Business information (restaurant name, industry details)
• • Communication preferences and inquiry details
• • Any other information you choose to provide in forms or communications

Automatically Collected Information

• • Device and browser information (IP address, browser type, operating system)
• • Usage data (pages visited, time spent on site, click patterns)
• • Location information (general geographic location based on IP address)
• • Cookie and tracking technology data

How We Use Your Information

We process your personal data based on various legal grounds under GDPR, including legitimate interests, contract performance, and consent. Here's how we use your information to provide and improve our restaurant loyalty program consulting services:

• • To respond to your inquiries and provide customer support
• • To deliver our consulting services and maintain client relationships
• • To send you information about our services and industry insights
• • To improve our website functionality and user experience
• • To analyse website usage and optimise our digital presence
• • To comply with legal obligations and protect our business interests
• • To prevent fraud and ensure the security of our systems

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to manage them, please refer to our comprehensive Cookie Policy.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• • With service providers who assist in our business operations (hosting, analytics, email services)
• • When required by law or to respond to legal requests
• • To protect our rights, property, or safety, or that of others
• • In connection with a business transaction (merger, acquisition, or sale of assets)
• • With your explicit consent for specific purposes

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your information.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

• • Contact form submissions: Up to 3 years from last contact
• • Client consultation records: 7 years after project completion
• • Website analytics data: Up to 26 months
• • Cookie data: As specified in our Cookie Policy

Your Rights

Under GDPR and Irish data protection law, you have several rights regarding your personal data:

• • Right of access: Request a copy of the personal data we hold about you
• • Right to rectification: Request correction of inaccurate or incomplete data
• • Right to erasure: Request deletion of your personal data in certain circumstances
• • Right to restrict processing: Request limitation of how we use your data
• • Right to data portability: Request transfer of your data to another organisation
• • Right to object: Object to processing based on legitimate interests or direct marketing
• • Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided in the contact section below.

International Data Transfers

Your personal information may be transferred to and processed in countries other than Ireland. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

We work with service providers that may be located outside the EEA, including Google (for analytics and advertising services), which may involve data transfers to the United States under appropriate safeguards.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal information, please reach out to us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with data protection law.