Privacy Policy

Last updated: 15/11/25

This Privacy Policy explains how personal data is collected, used, and protected when you use the websites www.kilkennytours.com and www.kilkennytours.ie (the “Websites”). The Websites are owned and operated by John Comerford, trading as a Kilkenny-based walking tour service.

We are committed to respecting your privacy, complying fully with the General Data Protection Regulation (GDPR) and all applicable Irish data protection law.

1. Data Controller

Owner: John Comerford

Email: jpcomerford9@gmail.com

Phone: +353 87 413 9603

Address: 

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Data You Provide Directly

When you use our enquiry form, book a tour, or contact us, you may provide:

• Name

• Email address

• Phone number

• Age (for tour suitability and safety)

• Any other information voluntarily provided

2.2 Payment Information

Card payments are securely processed through TicketingHub and Stripe. We do not store full card details on our server.

2.3 Automatically Collected Data

When browsing the site, we may collect:

• IP address

• Browser type

• Device information

• Pages visited

• Time spent on pages

• Referring website

This is standard practice and helps us improve the user experience.

3. Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contract: To complete a tour booking or respond to an enquiry

• Consent: When you opt in for marketing or newsletters

• Legitimate Interests: To improve the Websites and services

• Legal Obligation: For tax, accounting, insurance, or safety reasons

4. Why We Collect Personal Data

We may use your information to:

• Respond to enquiries

• Manage bookings and deliver tour services

• Process payments securely

• Provide customer support

• Improve our website, services, and user experience

• Send essential booking or service updates

• Comply with Irish and EU law

We do not sell, rent, or trade your personal data.

5. How Your Data Is Stored

Our website is hosted securely. Payment processing is handled by:

• TicketingHub – secure ticketing platform

• Stripe – PCI DSS–compliant payment processor

Personal data is held:

• On secure, password-protected systems

• Only for as long as is necessary

• In line with data retention obligations

6. Third Parties Who Process Data on Our Behalf

We may share information with trusted partners where necessary, such as:

• TicketingHub (tour booking system)

• Stripe (card payment processing)

• Email and hosting providers

• Legal or financial advisers (where required)

All third parties are GDPR-compliant and act under data processing agreements.

7. Cookies & Tracking

Cookies are small files stored on your device to improve browsing.

We may use:

• Functional cookies

• Analytics cookies

• Performance cookies

You can manage cookie settings in your browser at any time.

For more information, visit: www.allaboutcookies.org

8. Your Data Protection Rights

You have the right to:

• Access your personal data

• Correct inaccurate information

• Request deletion of your data

• Restrict or object to processing

• Withdraw consent at any time

• Request data portability

To exercise these rights, contact: jpcomerford9@gmail.com

We will respond within one calendar month.

9. Data Retention

Personal data is retained:

• Only as long as needed for the purpose collected

• To meet legal and insurance obligations (up to 7 years)

• Deleted or anonymised when no longer required

10. Children’s Data

We do not knowingly collect personal data from children under 13.

If we become aware that a child has shared data without parental consent, we will delete it.

11. Security

We take reasonable precautions to protect your data, including:

• Encrypted connections (HTTPS)

• Secure hosting measures

• Controlled access

• Password protection

• PCI-compliant payment partners

No system is 100% secure, but we follow industry best practices.

12. Transfers Outside the EU

If data is stored or processed outside the EEA, we ensure:

• Adequacy decisions apply, or

• Standard Contractual Clauses (SCCs) are in place

13. Links to Other Websites

Our site may contain links to external sites. We are not responsible for their privacy practices. Check their policies before providing data.

14. Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be posted on this page.

15. Contact Details

For privacy queries, requests, or complaints, contact:

Email: jpcomerford9@gmail.com

Phone: +353 87 413 9603

You also have the right to lodge a complaint with:

Data Protection Commission (Ireland) www.dataprotection.ie