Privacy Policy

1. Who we are

SwimPro.ie (“SwimPro”, “we”, “us”) is a swimming lessons directory and enquiry platform operated in Ireland. Our contact email for all data-related queries is hello@swimpro.ie.

We act as a data controller for the personal data we collect through the SwimPro.ie website and related services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

2. What personal data we collect

We collect different data depending on how you use SwimPro.ie:

Parents and visitors

• Enquiry form: name, email address, phone number (optional), child's age (optional), preferred lesson type, preferred days, and your message. This data is collected to forward your enquiry to the relevant provider.
• Reviews: name, email address, location (optional), rating, and review text. Your email address is used for verification only and is never displayed publicly.
• Browsing data: we collect basic analytics (page views, country-level location) via server logs. We do not use third-party tracking scripts or advertising pixels.

Swimming lesson providers

• Account registration: name, email address, phone number (optional), and role at the organisation.
• Claim requests: name, email, phone, and stated role at the business being claimed.
• Listing data: business name, address, contact details, pricing, lesson types, photos, and other information you provide to describe your services. This is published on your listing page.

3. How we use your data

• Enquiry delivery: when you submit an enquiry, your details are shared with the specific provider you contacted so they can respond to you. We retain a copy to monitor service quality and prevent abuse.
• Review publication: approved reviews are published on the provider's listing page with your first name and location. Your email is never shown.
• Provider accounts: to authenticate you, manage your listing, and deliver enquiries to your dashboard.
• Service improvement: aggregated, non-identifiable usage data helps us understand how the site is used and where to improve.
• Communication: we may email you about your enquiry, your review status, or important service updates. We do not send marketing emails unless you have explicitly opted in.

4. Legal basis for processing

We process personal data under the following legal bases:

• Legitimate interest: to operate the directory, deliver enquiries, publish reviews, and improve the service (Article 6(1)(f) GDPR).
• Contract performance: to provide provider accounts and listing services (Article 6(1)(b) GDPR).
• Consent: for optional marketing communications, where applicable (Article 6(1)(a) GDPR).

5. Who we share data with

• Swimming lesson providers: when you send an enquiry, the provider receives your name, email, phone (if given), and message. We share only what is necessary for them to respond.
• Supabase (database & authentication): stores all user data, listing data, enquiries, and reviews. Supabase hosts our database in the EU. Authentication tokens and session data are managed through Supabase Auth.
• Netlify (hosting): serves the SwimPro.ie website. Netlify processes server logs (IP addresses, request URLs) as part of normal web hosting. Data may be processed in the US under Standard Contractual Clauses.
• Resend (email delivery): we use Resend to send transactional emails such as enquiry notifications and account confirmations. Resend processes recipient email addresses and message content on our behalf.
• OpenStreetMap (maps): listing pages display maps powered by Leaflet and OpenStreetMap tile servers. Map tiles are loaded directly from OpenStreetMap servers, which may log your IP address. No personal data is sent by us to OpenStreetMap.
• We do not sell, rent, or trade personal data to third parties. We do not share data with advertisers or data brokers.

6. Cookies

SwimPro.ie uses cookies in three categories. You can manage your preferences at any time using the cookie icon in the bottom-left corner of the site.

Strictly necessary (always on)

• Authentication: keeps provider accounts logged in. Set only when you sign in to a provider dashboard.
• Cookie preferences: remembers your cookie consent choice so we don't ask again on every visit.

Analytics (optional)

• If you consent, we may use analytics cookies to understand how the site is used — which pages are visited, how long visitors stay, and where they come from. This data is aggregated and cannot identify you personally. We do not use Google Analytics.

Marketing (optional)

• If you consent, marketing cookies may be used to measure the effectiveness of any promotional campaigns. We do not run programmatic advertising or retargeting. These cookies are only activated if we run specific campaigns in the future.

You can change your cookie preferences at any time by clicking the cookie icon in the bottom-left corner of any page. Your choice is stored in your browser's local storage and is not sent to our servers.

7. Data retention

• Enquiries: retained for 24 months from submission, then permanently deleted.
• Reviews: retained for as long as they remain published. If a review is removed or you request deletion, the data is erased within 30 days.
• Provider accounts: retained for the lifetime of the account. When an account is deleted, personal data is removed within 30 days. Published listing data (business name, address, services) may be retained in anonymised form.
• Server logs: retained for 90 days for security and debugging purposes.

8. Your rights under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: ask us to delete your personal data (“right to be forgotten”).
• Restriction: request that we limit processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email hello@swimpro.ie with the subject line “Data Request”. We will respond within 30 days.

9. Data security

We take reasonable technical and organisational measures to protect your personal data, including:

• All data transmitted to and from SwimPro.ie is encrypted via HTTPS/TLS.
• Database access is restricted by row-level security policies and requires authentication.
• Provider passwords are never stored in plain text. Authentication uses secure token-based sessions.
• Access to production systems is limited to authorised personnel only.

10. Children's data

SwimPro.ie is designed for use by parents and guardians, not children. We do not knowingly collect personal data from anyone under 16 years of age. The child's age field on our enquiry form collects an age range only (e.g. “4–7”), not names or identifying information about the child.

11. International data transfers

Some of our infrastructure providers (Netlify, Supabase) may process data outside the European Economic Area. Where this occurs, transfers are protected by Standard Contractual Clauses approved by the European Commission, or by the provider's participation in the EU-US Data Privacy Framework where applicable.

12. Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated via a notice on our website. The effective date at the top of this page indicates when the policy was last revised.

13. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
Website: www.dataprotection.ie

14. Contact

For any questions about this privacy policy or how we handle your personal data, email hello@swimpro.ie.