Privacy Policy

At The Startup Shop, our policy is straightforward: we recognize the importance of trust in our business. We handle personal information with great care, whether provided online or through other means, ensuring its security and using it only for legitimate purposes. Your personal information will not be disclosed to any third party except the Companies Registration Office / Companies House without your full consent. We are fully compliant with the EU General Data Protection Regulation (GDPR). The only potential exception to this is in the unlikely event of a police or Revenue investigation related to issues such as money laundering or terrorist financing, in which case we are legally obliged to disclose our files. Occasionally, we may send you emails to remind you of upcoming Annual Returns or inform you about services that might interest you. However, you can opt out of these emails at any time.

Any information provided by you will be treated in accordance with the terms of the EU General Data Protection Regulation (GDPR), Data Protection Act 1988, Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the Protection of Individuals with regard to the Processing of Personal Data and on the Free Movement of Such Data, and any implementing and/or amending legislation in Ireland.

Cookies Policy

To make our services easy, useful, and reliable when delivered on the internet, we sometimes place small files known as cookies on your device, such as your computer or mobile phone. These cookies cannot identify you personally. They are used to enhance your experience by:

Allowing a service to recognize your device, so you don’t have to repeatedly provide the same information during a task.
Recognizing that you may have already provided a username and password, so you don’t need to do it for every web page.
Measuring the usage of our services to make them more user-friendly and ensure fast performance.

If you wish to restrict or block cookies set by our website or any other website, you can do this through your browser settings (please note that this may impact our website’s functionality). By continuing to use this website, you consent to us using cookies to enhance your experience.

Data Protection Notice

1. Introduction

The Startup Shop, as the Data Controller, complies with Data Protection regulations and serves as a Trust and Company Service Provider (TCSP). We gather and use various information about individuals and businesses in the course of our business activities. This policy strengthens our compliance with data protection legislation, protects the rights of staff, customers, and other connected parties, and ensures transparency in data processing. It also safeguards against data breaches.

We comply with Irish legislation, including the Irish Data Protection Act (1988), the Irish Data Protection (Amendment) Act (2003), and GDPR regulations enforced by the EU Data Protection Commission since May 25, 2018.

2. Policy Scope

This policy applies to all entities operating under The Startup Shop, including subsidiaries, trading names, and direct affiliates. It covers staff, volunteers, contractors, suppliers, and anyone acting on behalf of The Startup Shop. The policy encompasses Subject Access Requests, Data Retention and Destruction Policy, Data Retention Periods List, and Data Loss Notification procedure.

3. Data Protection Risks

This policy addresses risks associated with data breaches, failing to offer choices to individuals, and reputational damage.

4. Data Collection

The Startup Shop collects personal data directly through service requests, standard business procedures, websites, social media, market research, discussion forums, and, where applicable, CCTV footage. We use cookies on our websites for improved performance. We ensure individuals are aware of why data is collected, who will process it, and other relevant information.

5. Employee and Potential Employee Data

Employee data, including CVs, personal information, proof of identity/address, and qualifications, is collected during the recruitment process. Unsuccessful candidate data is destroyed securely. As employees, their data is stored securely and retained for five years after employment ceases.

6. Internal Processes

This section defines roles, responsibilities, and processes for the Board of Directors, Data Protection Officer, IT Department, Marketing Department, and General Staff. Staff undergo training before handling data subject to Data Regulation policy.

7. Consent

We obtain consent for sending marketing materials related to services. Clients have the right to unsubscribe, which is separate from cancelling services. Sensitive personal information is shared only with client consent or as required by law.

8. Data Storage

Hard copy data is stored securely in locked areas, and documents are shredded when no longer needed. Electronic data is secured by external IT partners, and internal policies ensure security.

9. Data Use

We maintain computer security, encrypt data when necessary, and do not transfer data outside the European Economic Area, except when client-requested.

10. Data Accuracy

Data is stored in as few places as possible. Regular reviews are conducted to update and correct data inaccuracies.

11. Data Retention & Destruction

Data is retained only as long as necessary and destroyed securely once no longer needed. Subject Access Requests can be made to the Data Protection Officer.

12. Data Loss Notification Procedure

In the event of a data breach, staff must inform the Data Protection Officer and Directors promptly. Relevant authorities should be informed, and individuals affected will be notified.

13. Subject Access Requests

Individuals can request their data held by The Startup Shop. Requests will be responded to within the specified timeframes, with identity verification. Individuals have the right to have their personal information removed except when it impacts service provision.

14. Personal Information and Third Parties

We may share personal information with third parties in direct connection with the services provided. We also share information to comply with applicable laws or lawful requests.

15. Internal Communication

Personal information should not be shared via email unless necessary. Sensitive data should not be sent via email.

16. Making a Complaint

Individuals with concerns about their personal information can contact staff by phone, email, or in person. All complaints will be fully investigated.

17. Update to Data Policy

This policy may change to reflect evolving data protection requirements and system upgrades. The latest version will be available on our website.