Legal

Privacy Policy

Effective date: 2 October 2026 · Version 1.0

Data Controller

Eolas Money Management Ltd ('the Company', 'We', 'Us' or 'Our') is a Data Controller within the meaning of the General Data Protection Regulations and Irish data protection legislation. Our registered address is Ard Gaoithe Commercial Centre, Cashel Road, Clonmel, Co. Tipperary, E91 V2N8.

Our GDPR Owner is Jim Stapleton. For anything to do with your data, write to the address above or email jim@eolasmoney.ie.

Information we Collect

We collect information: (i) you give us; (ii) information generated during the provision of our services and; (iii) information provided to us by third parties.

Types of information we may collect or hold about you include:

Identity details such as your name, address, date of birth, etc.
Financial information
Health related information, where applicable

Purposes of Processing and the Legal Basis for processing

We use, and share, your data where:

Use is necessary to provide a service or fulfil a contract that you have entered into (e.g. to provide you with insurance services) or because you have asked for something to be done so you can enter into a contract with us
Use is necessary because we have to comply with a legal obligation (e.g. complying with our obligations to report to regulatory authorities or law enforcement, etc.)
Use is necessary to protect your "vital interests" in exceptional circumstances
Use for our legitimate interests such as managing our business and fraud or crime prevention. This may include things like training and quality assurance, strategic planning, statistical analysis of our service provision. You may object to your personal information being used for these purposes.
You have given your explicit consent, which we ask for before collecting health related information and before sending you marketing emails. You can withdraw your consent at any time.

Recipients of Your Personal Data – Third Parties

In the course of providing our services to you, complying with legal obligations or pursuing our legitimate interests, we may share your personal data with the following categories of recipients:

Third parties with whom:
- We need to share your information to facilitate transactions you have requested, and
- You ask us to share your information
Service providers who provide us with support services to enable delivery of our services. The providers behind this website are named in the "Our website" section below.
Statutory and regulatory bodies and law enforcement authorities

Your data is stored in Ireland. Some of the service providers behind our website are based in the United States (Vercel, Supabase, Cloudflare and Resend). Where any of them process personal data outside the EEA, they do so under the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses, and under a data processing agreement with us. Otherwise, we do not transfer personal data outside of the EEA.

Our website

Cookies and visitor statistics

The public pages of this website set no cookies. We count visits with Plausible Analytics, a service run by Plausible Insights OÜ in the European Union. It uses no cookies, stores no personal data and cannot identify you, which is why there is no cookie banner. The staff area of the site, which only our team can sign in to, sets a strictly necessary sign-in cookie; it is not set for visitors.

Hosting

The website is hosted by Vercel Inc., which processes your IP address and standard connection details to deliver the pages and protect the site, and keeps short-lived technical logs. The parts of the site that handle form submissions run on Vercel's servers in Dublin, Ireland.

Forms

Our website has a contact form, a client survey, an annual review form (Mini Fact Find), a FactFind and a newsletter signup. Everything you send through them travels over an encrypted connection and is stored in our own secure submissions store, hosted for us by Supabase Inc. in Dublin, Ireland. Nothing you type is sent to us by email. Before a form is accepted, Cloudflare Turnstile checks your connection and browser to tell people from automated bots; it does not see your answers.

Your most sensitive answers, your PPS number, date of birth, health related information and financial figures, are encrypted by us before they are stored, with a key the storage provider does not hold.
Only members of our team can open a submission, each signing in with a password and an authenticator app, and every time a team member opens a record or reveals a sensitive answer it is recorded.
Payslips you attach are held in a private store and can only be opened through a link that expires within a minute.
The client survey is anonymous: it asks for no name or email address.
Draft FactFind answers stay in your own browser tab until you press send, and are cleared when you do.

When you send a form, our team receives an email saying one has arrived, with a link to our secure dashboard and none of your answers. If you need to correct something you sent, we can email you a private link that opens your own submission for editing; it works once and expires after seven days. These emails are sent for us by Resend Inc. from servers in the European Union.

If you subscribe, or tick the box on the contact form, we send you occasional notes on money matters. Our list is managed by MailerLite Limited, Dublin. You are only added once you confirm by email, we keep the time and internet address of your signup as a record of your consent, and every email has an unsubscribe link that takes effect immediately.

Booking a call and online courses

"Book a call" takes you to Calendly, and our online courses are provided through Teachable. Both are separate services with their own privacy notices, which apply when you use them. We receive the booking details you enter on Calendly so that we can hold the meeting. We link to LinkedIn, X and YouTube but do not embed their content, so nothing is shared with them unless you follow a link.

How long we will hold your Data

How long we hold your data for is subject to a number of pieces of legislation and regulations – as a general rule, we will keep your data for 6 years after the end our relationship with you or the last service provided. We will however endeavour not to keep any of your personal data longer than is necessary to fulfil the relevant purpose and/or comply with a specific legal retention period.

For information sent through our website: contact enquiries are kept for twelve months after our team archives them, unless you become a client; survey answers are kept as anonymous statistics; Mini Fact Find and FactFind submissions become part of your client file, and the copy held in the website's submissions store is deleted automatically 90 days after our team archives it; newsletter details are kept until you unsubscribe.

Your Rights with Respect to Our Use of Your Data

From 25 May 2018, you have several enhanced rights in relation to how we use your information. These rights include:

Right to complain – You have the right to lodge a complaint with the Data Protection Commission if you consider that the processing of your personal data infringes data protection law.
Rights in relation to automated decision-making – You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where an applicable legal exception applies. You also have the right to request human intervention, express your point of view and contest a decision in the circumstances provided for by law.
Right to data portability – You have the right, in certain circumstances, to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to have that data transmitted to another controller where technically feasible.
Right to object – You have the right, in certain circumstances, to object to the processing of your personal data, including where we rely on legitimate interests as a legal basis for processing.
Right to restriction of processing – You have the right, in certain circumstances, to ask us to restrict the processing of your personal data.
Right to erasure – You have the right, in certain circumstances, to ask us to delete your personal data.
Right to rectification – You have the right to ask us to correct inaccurate or incomplete personal data that we hold about you.
Right of access – You have the right to request a copy of the personal data we hold about you and information about how we process it.

If you wish to exercise any of your data rights, you can contact Us by writing to the address above or emailing jim@eolasmoney.ie. If you sent us something through this website, you can also ask us for a private link to check and update it yourself.

If we are unable to deal with your request fully within one month (due to the complexity or number of requests) we may extend this period by a further two months and shall explain the reason why. If you make your request electronically, we will try to provide you with the relevant information electronically.

If you are not happy with any aspect of how your data is used, you also have the right to complain to the Data Protection Commission in Ireland. You can contact the Data Protection Commission at:

Telephone: (01) 765 0100 or 1800 437 737
E-mail: info@dataprotection.ie
Postal Address: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland

Information We Need

If you do not provide certain information, we may not be able to:

provide the requested services to you.
Assess your suitability to a product or service
Recommend a financial product or service

We will tell you when we ask for information which is not a contractual requirement or is not needed to comply with our legal obligations.

Automated Decision-Making

Automated decision-making is not used by the Company.

Updates

We will update our data privacy notice from time to time. Any updates will be made available on our website https://eolasmoney.ie