Privacy Policy for Emerald Hearth Provisions

Emerald Hearth Provisions is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect information gathered through our website and in connection with our culinary arts, education, and tourism services. We adhere to the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Who We Are

Emerald Hearth Provisions, located at 2847 Custom House Quay, Floor 3, Dublin, D01 V4A6, Ireland, is a culinary enterprise offering professional culinary training, short courses, food tours, event catering, hospitality consultancy, and food product development. We are the data controller responsible for your personal information.

Information We Collect

We may collect personal information about you in a variety of ways, including:

• Information You Provide Directly: This includes information you give us when you register for a course or tour, subscribe to our newsletter, request information, apply for a position, engage our catering or consultancy services, or contact us directly. This data may include your name, contact details (email address, phone number), postal address, payment information, dietary restrictions/allergies (for courses, tours, catering), and any other information you choose to provide.
• Information Collected Automatically: When you visit our website, we may automatically collect certain information such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This information helps us understand how our site is used and improve its functionality.
• Information from Other Sources: We may receive information about you from third-party partners, such as payment processors or analytics providers, to the extent permitted by law.

How We Use Your Information (Legal Basis and Purposes)

We use your personal information for specific purposes and only when we have a valid legal basis to do so under GDPR:

• To fulfill a contract or take steps linked to a contract:
  • Processing your course or tour registrations and payments.
  • Providing the culinary training, food tours, catering, or consultancy services you have requested.
  • Managing your applications for employment or partnership opportunities.
• Where it is necessary for our legitimate interests (and your interests and fundamental rights do not override those interests):
  • Improving our services, website, and offerings.
  • Communicating with you about our services, promotions, and updates (where explicit consent is not required).
  • Conducting analysis and research to understand our customer base and market trends.
  • Preventing fraud and ensuring the security of our services.
  • For internal reporting and administrative purposes.
• With your consent:
  • Sending you marketing communications about our new courses, tours, or special offers where required by law.
  • Placing certain cookies on your device (as described in our Cookie Policy).
• To comply with a legal or regulatory obligation:
  • For tax and accounting purposes.
  • Responding to lawful requests from public authorities.

Sharing Your Information

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service Providers: We work with third-party service providers who assist us in operating our business (e.g., payment processors, IT support, marketing agencies, email service providers). These providers are contractually obligated to protect your data and only use it for the purposes we specify.
• Professional Advisors: We may share information with our professional advisors, such as lawyers, accountants, or auditors, when necessary.
• Legal Requirements: We may disclose your information if required to do so by law, in response to a court order, or to cooperate with government investigations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

International Data Transfers

As an Irish company adhering to GDPR, we primarily process and store your personal data within the European Economic Area (EEA). If we transfer your personal data outside the EEA, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or by ensuring the recipient country has been deemed to provide an adequate level of data protection by the European Commission.

Data Security

We implement appropriate technical and organizational measures to safeguard your personal information against unauthorized access, alteration, disclosure, or destruction. This includes using secure servers, encryption, access controls, and regular security assessments. While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure ( "Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Rights in relation to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• The Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at the address provided below. We will respond to your request within one month.

Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and update the "last updated" date at the top of the policy. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Emerald Hearth Provisions
2847 Custom House Quay, Floor 3
Dublin, D01 V4A6
Ireland

Phone: +353 1 612 0450

You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection issues, if you believe your rights have been violated.