GDPR Statement

Our commitment

Celtic AI is committed to protecting the privacy and rights of our users and website visitors. We fully comply with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018, as overseen by the Data Protection Commission (DPC).

Data controller

What data we hold and why

Data storage and security

• All data is stored within the EU/EEA
• Data is encrypted at rest and in transit (TLS/SSL)
• Access to personal data is restricted to authorised personnel only
• We do not transfer data outside the EU without appropriate safeguards

Your rights under GDPR

You have the following rights, which you can exercise by contacting us at [email protected]:

• Right of access — obtain a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data
• Right to restriction — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — for any processing based on consent

We will respond to all requests within 30 days.

Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and affected individuals without undue delay, as required under Article 33–34 of GDPR.

Lodge a complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Data Protection Commission: