Last updated: January 15, 2026
1. Introduction
Cimozunit, a gardening guidance company based at 9 Eyre Square, Galway, Ireland, is committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your personal information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Acts (2018–2020) of Ireland.
Cimozunit is the data controller for personal data collected through this website. We are responsible for ensuring that your personal data is processed lawfully and securely. If you have questions about this policy or our privacy practices, please contact us using the details provided at the end of this document.
2. What Data We Collect
We may collect the following categories of personal data from you:
- Contact Information: Full name, email address, postal address, and telephone number when you submit a contact form or sign up for communications.
- Communication Data: The content of any messages, inquiries, or feedback you send to us via email, contact forms, or other channels.
- Technical Data: Your IP address, browser type, operating system, device information, and pages visited on our website.
- Usage Data: Information about how you interact with our website, including time spent on pages, links clicked, and search queries.
- Cookie Data: Information stored in cookies and similar tracking technologies placed on your device.
- Analytics Data: Information collected through Google Analytics regarding your behaviour on our site.
- Device Information: Hardware model, operating system version, unique device identifiers, and mobile network information.
We do not intentionally collect sensitive personal data (such as health information, racial or ethnic origin, political opinions, religious beliefs, or financial details) unless you voluntarily provide it and we have a clear lawful basis to process it.
3. How We Collect Data
We collect personal data through the following methods:
- Contact Forms: When you complete our contact form to send a message or inquiry, we collect the information you provide (name, email, phone, message).
- Direct Communication: When you email us directly at [email protected] or call +353 91 548 276, we collect the information you share in your communication.
- Cookies & Tracking: We use cookies and similar technologies to collect information about your browsing activity and preferences. See section 10 (Cookies) for details.
- Google Analytics: We use Google Analytics to monitor website traffic and user behaviour. Google collects data about your device, location, and interactions on our site.
- Server Logs: Our web server automatically logs your IP address, request date/time, pages visited, and HTTP status codes.
- Third-Party Service Providers: If you interact with third-party services linked from our site (such as social media), those providers may collect data independently.
4. Why We Collect Data (Legal Basis)
Under GDPR Article 6, we process your personal data on the following legal bases:
- Consent (Article 6(1)(a)): When you submit a contact form or subscribe to communications, you provide explicit consent for us to collect and use your data to respond to your inquiry or send information you have requested.
- Contractual Performance (Article 6(1)(b)): We process data necessary to respond to your inquiries and provide the gardening guidance and information you request.
- Legitimate Interests (Article 6(1)(f)): We process technical data and usage analytics to improve our website functionality, security, and user experience. Our legitimate interest in understanding how visitors use our site is not outweighed by your privacy rights, as we do not engage in processing that would be intrusive or unexpected.
- Legal Obligation (Article 6(1)(c)): We may process data to comply with Irish and EU law, including tax regulations and legal investigations.
5. How We Use Your Data
We use your personal data for the following purposes:
- Service Delivery: To respond to your contact form submissions, answer your questions, and provide gardening guidance and information you request.
- Communication: To send you replies to your inquiries, confirmation of receipt, and relevant gardening information (only with your consent).
- Website Improvement: To analyse website usage patterns, identify technical issues, and optimise user experience.
- Security & Fraud Prevention: To monitor for unauthorised access, malicious activity, and to protect our website and users from harm.
- Marketing (with Consent): If you have explicitly consented, we may send you information about our services, gardening tips, and seasonal advice via email.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations in Ireland and the EU.
- Analytics & Reporting: To generate aggregate reports on website traffic and user behaviour (anonymised and non-identifiable).
We will never sell your personal data to third parties or use it for purposes not described in this policy without first obtaining your explicit consent.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. Here are our standard retention periods:
- Contact Form Data: 2 years from submission (to maintain a record of inquiries and any ongoing correspondence).
- Email Communications: Up to 2 years, unless part of an ongoing business relationship or legal requirement.
- Server Logs & Technical Data: 30 to 90 days (for security and troubleshooting purposes).
- Google Analytics Data: Aggregated and anonymised after 26 months in accordance with Google's data retention policies.
- Cookies: Session cookies are deleted when you close your browser; persistent cookies are retained for up to 13 months (see section 10 for details).
- Tax & Accounting Records: 7 years (required by Irish tax law).
Once the retention period expires, we will securely delete or anonymise your data, unless we are required by law to retain it for longer. If you request deletion of your data (subject to legal obligations), we will comply within 30 days.
7. Data Sharing
We do not sell, trade, or rent your personal information to third parties. However, we may share your data with the following categories of recipients where necessary to deliver our services or comply with legal obligations:
- Web Hosting Provider: Our website is hosted on secure servers managed by our hosting provider. They act as a data processor on our behalf and access only the technical data necessary to maintain and secure our website.
- Email Service Provider: If you have consented to receive communications, we may share your email address with our email service provider to send you information (they are bound by strict data processing agreements).
- Google Analytics: We share aggregated and anonymised usage data with Google Analytics to understand website traffic (see section 10).
- Legal & Law Enforcement: We may disclose your data if required by law, court order, or government request, or to protect our legal rights and the safety of our users.
- Business Partners: If Cimozunit is acquired or merged with another organisation, your data may be transferred as part of that transaction. We will notify you of any such change.
All third-party service providers are contractually bound to process your data securely and only as directed by us. We do not permit them to use your data for their own purposes.
8. International Data Transfers
Cimozunit is based in Ireland within the European Union. However, some of our service providers (such as Google Analytics and our email service provider) may process data outside the EU/EEA. When your data is transferred outside the EU/EEA, we ensure the transfer is protected by:
- Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses in contracts with processors to ensure adequate safeguards for data transferred to countries outside the EU/EEA.
- Adequacy Decisions: For transfers to countries with EU adequacy decisions (such as certain approved countries), we rely on those decisions to ensure adequate protection.
- Data Processing Agreements: All our service providers have Data Processing Agreements in place that comply with GDPR requirements.
By using our website, you consent to the transfer of your information to countries outside the EU/EEA in accordance with these safeguards.
9. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of your request.
- Right to Rectification (Article 16): If your data is inaccurate or incomplete, you can request that we correct or update it.
- Right to Erasure (Article 17): You can request deletion of your personal data, subject to certain legal exceptions (such as if we are required to retain it for tax purposes).
- Right to Restrict Processing (Article 18): You can ask us to limit how we use your data in certain circumstances (e.g., if you dispute its accuracy).
- Right to Data Portability (Article 20): You can request a copy of your data in a structured, commonly used format so you can transfer it to another organisation.
- Right to Object (Article 21): You can object to processing of your data for direct marketing or legitimate interest purposes.
- Right to Withdraw Consent (Article 7): If we are processing your data based on your consent, you can withdraw that consent at any time by contacting us.
- Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
To exercise any of these rights, please contact our Data Protection Officer at the details provided in section 13 below. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie).
10. Cookies & Similar Technologies
Our website uses cookies to enhance your browsing experience. Cookies are small files stored on your device that help us remember your preferences and analyse how you use our site.
Types of Cookies We Use
- Essential Cookies: These are necessary for the website to function properly (e.g., session management). We do not need your consent to use essential cookies.
- Analytics Cookies: We use Google Analytics cookies to track visitor behaviour, page views, and traffic sources. These help us understand how users interact with our site and improve its performance.
- Preference Cookies: These remember your choices (such as cookie consent preferences) to personalise your experience on return visits.
- Marketing Cookies: If you have consented to receive marketing communications, we may use marketing cookies to deliver targeted content (this requires explicit consent).
Duration & Management
- Session Cookies: Deleted when you close your browser.
- Persistent Cookies: Remain on your device for up to 13 months unless you delete them.
- Deleting Cookies: You can delete cookies through your browser settings. Instructions are available for all major browsers (Chrome, Firefox, Safari, Edge).
- Opting Out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by configuring your browser's privacy settings.
When you first visit our website, you will see a cookie consent banner asking for your consent to non-essential cookies. You can accept or reject cookies, and you can change your cookie preferences at any time by managing your browser settings.
11. Children's Privacy
Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will immediately delete it and take steps to remove the child from our contact lists.
If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at [email protected] or +353 91 548 276.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of the website following any changes constitutes your acceptance of the updated policy.
We recommend reviewing this policy periodically to stay informed about how we protect your data.
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data handling practices, please contact us:
- Company Name: Cimozunit
- Registered Address: 9 Eyre Square, Galway, Ireland
- Email: [email protected]
- Phone: +353 91 548 276
- Business Hours: Monday to Friday, 09:00–17:00 (Irish Standard Time)
We will respond to all privacy inquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission:
- Data Protection Commission
- 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
- Phone: +353 (0)761 108 400
- Email: [email protected]
- Website: www.dataprotection.ie