1. Who we are
Nexulair Limited is the operator of this website and the organisation responsible for deciding how and why your personal data is processed (the data controller). We run an Irish alpaca farm experience and provide information about farm visits, tours, and alpaca wool products. This policy applies when you browse our website at Nexulair, when you submit an enquiry through a form, and when you contact us by phone or email using details displayed on the site.
Our registered contact details are: Nexulair Limited, 1 St Stephen's Green, Dublin, D02 HK52, Ireland. Phone: +353 1 525 2525. Email: [email protected]. Privacy-specific email: [email protected].
2. Data we collect
We collect only the personal data that is reasonably necessary to operate our website, respond to enquiries, and understand how visitors use our pages. Depending on what you do on the site, we may collect the following categories of data:
- Identity data: full name (if you submit a form or email us).
- Contact data: email address; phone number if you choose to provide it.
- Message content: the information you type into a contact form or send in an email, including any dates you mention for a visit request.
- Technical data: IP address, browser type/version, device information, operating system, and approximate location derived from IP (city or region level).
- Usage data: pages viewed, time on page, clicks, referring page, and other interaction signals used to improve site performance and content.
- Cookie and similar data: small files stored on your device that remember consent choices and, if you consent, support analytics and marketing measurement.
We do not intentionally collect special category data (such as health information) through this website. Please avoid including sensitive personal details in free-text form fields or emails unless it is necessary for your request, and only share what you are comfortable providing.
3. How we collect data
We collect personal data in a few straightforward ways:
- Web forms: when you submit the contact form on /contact/ or equivalent forms on other pages.
- Direct communications: when you email us or phone us using the details shown in the header/footer.
- Cookies and local storage: used to store your cookie consent choice and, when enabled, to support analytics and marketing measurement.
- Server logs: our hosting and security systems log requests to the website, including IP address, user agent, and timestamps, for reliability and fraud prevention.
- Analytics tools: if you consent to analytics cookies, we may use Google Analytics 4 to measure how visitors interact with our pages.
- Marketing measurement tools: if you consent to marketing cookies, we may use Meta Pixel to measure ad performance and understand which pages are visited after an ad click.
We do not use hidden text, cloaking, or content that changes depending on the visitor. The same content is served to users and to crawlers.
4. Legal basis for processing (GDPR Art. 6)
Under the GDPR, we must have a legal basis for processing your personal data. We rely on the following bases, depending on the context:
Used for non-essential cookies such as analytics and marketing measurement. You can withdraw consent at any time by adjusting cookie choices (see the Cookie Policy section) or by clearing browser storage.
Used when you contact us to request visit details or product information and we need to respond, confirm availability, or arrange a booking-related discussion.
Used for essential security logging, preventing abuse, and improving our website. We balance these interests with your rights and expectations.
Used where we must retain certain records to comply with applicable laws, respond to lawful requests, or enforce our rights.
When we rely on legitimate interests, you can object in certain situations. See the “Your GDPR rights” section for how to do this.
5. Purposes of processing
We process personal data for the following purposes:
- Responding to enquiries about farm visits, tours, access needs, and alpaca wool products.
- Service delivery such as arranging or confirming visit-related details, answering questions, and providing support.
- Website operation and security, including monitoring for abuse, debugging issues, and preventing fraud.
- Analytics (consent-based) to understand which pages are most helpful, improve navigation, and reduce friction in forms.
- Marketing measurement (consent-based) to understand whether advertising campaigns lead to visits to relevant pages and to measure ad performance.
- Legal compliance such as responding to regulatory or lawful requests and maintaining appropriate records.
We do not use your data to make decisions based solely on automated processing that produce legal or similarly significant effects.
6. Retention periods
We keep personal data only for as long as needed for the purposes described above, and then delete or anonymise it. Our typical retention periods are:
| Category | Typical retention |
|---|---|
| Form submissions and enquiry emails | 2 years (unless you request deletion sooner, or longer retention is required for legal reasons) |
| Basic customer support correspondence | 2 years |
| Analytics data (Google Analytics 4, if enabled by consent) | 14 months (configured retention where available) |
| Marketing measurement data (Meta Pixel, if enabled by consent) | Up to 180 days (typical event attribution and measurement windows may apply) |
| Server security logs | Up to 90 days (may be longer if needed to investigate abuse or security incidents) |
| Cookie consent record stored in localStorage | Until you clear browser storage or reset your choice |
| Email list (if you explicitly subscribe in future) | Until you unsubscribe, plus 30 days to complete removal from active systems |
If you request deletion, we will delete data unless we have a lawful reason to keep it (for example, to comply with a legal obligation or defend a claim).
8. International transfers
Nexulair is based in Ireland. Some of our service providers may process data outside the European Economic Area (EEA), for example when analytics or infrastructure providers operate global systems. When personal data is transferred outside the EEA, we use appropriate safeguards.
Safeguards may include:
- EU Standard Contractual Clauses (SCCs) where the recipient country does not have an adequacy decision.
- Adequacy decisions where the European Commission has determined the country provides an adequate level of protection.
- Additional technical and organisational measures where appropriate, such as access controls and minimisation.
You can request more information about relevant safeguards by emailing [email protected].
9. Your rights under the GDPR
If you are in Ireland or elsewhere in the EEA, you have rights under the GDPR. These rights are not absolute and may be subject to exceptions (for example, where we must keep certain data for legal reasons). Your main rights include:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete data.
- Right to erasure: request deletion of your personal data in certain circumstances.
- Right to restriction: request that we limit processing in certain circumstances.
- Right to data portability: receive your data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
- Right to object: object to processing based on legitimate interests, and object to direct marketing.
- Right to withdraw consent: withdraw consent at any time where processing is based on consent (this does not affect prior lawful processing).
To exercise these rights, email [email protected]. To help us verify your identity, we may ask for reasonable information that matches the contact details previously used. We aim to respond within one month, or sooner where possible.
You also have the right to complain to the Irish supervisory authority, the Data Protection Commission (DPC). Website: dataprotection.ie. Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.
11. Children’s privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16 through this website. If you believe a child has provided us with personal data, please contact [email protected] and we will take steps to delete the information where required.
Parents and guardians are encouraged to supervise online activity and to ensure children do not submit personal information through web forms.
12. Updates to this policy
We may update this policy from time to time to reflect changes in our services, the website, or legal requirements. When we make changes, we will update the “Last Updated” date at the top of this page. If changes are significant, we may also provide a notice on the website.
If you have ongoing communications with us and a change affects how we use your data for that interaction, we will provide appropriate information at the time, such as in an email reply or a form notice.
13. Contact and DPO
For privacy questions, requests, or complaints, contact our privacy mailbox. We will work with you to resolve concerns promptly and transparently. Nexulair Limited does not currently appoint a mandatory Data Protection Officer (DPO) for this website, but we maintain a dedicated privacy contact for GDPR requests.
Nexulair Limited, 1 St Stephen's Green, Dublin, D02 HK52, Ireland