I’ll tell you what happens to your information.

1. Who is responsible?

Dinewise® — Management & Consulting, Ireland, is responsible for personal data collected through this website and direct enquiries. Contact: info@dinewise.ie · 089 948 1299.

2. What we may collect

• Contact details such as your name, email and telephone number.
• Business details and the content of your enquiry.
• Documents, photographs or other material you deliberately provide.
• Technical security and server information generated when the website is accessed.
• Consent and preference records where optional cookies or communications are used.

3. Why we use it and our legal basis

• To answer enquiries and take steps towards a service: performance of a contract or steps requested before a contract.
• To provide an agreed service: performance of a contract.
• To operate, secure and improve the site: legitimate interests, balanced against your rights.
• To meet tax, accounting or legal duties: legal obligation.
• Optional marketing or non-essential tracking: consent, where required.

4. Who receives information

DRAFT for solicitor We never sell personal data, and we never share it with anyone for their own use (no advertisers, no data brokers, no marketing lists). A short list of service providers help us run EMMA, only on our instructions and under written data processing contracts:

• Hosting (stores the service and its data): [name to be added when chosen]
• Email (sign-in confirmations and password resets only): [name to be added when chosen]
• Payments (plan fees; we never see or store card numbers): Revolut Business [confirm]

We will update this list and tell account holders before we add or change a provider. We also disclose information where the law requires it, or where necessary to establish, exercise or defend legal rights, and we will tell you if we are allowed to.

5. Where your data is kept

DRAFT for solicitor EMMA data is stored in the European Union / European Economic Area [confirm when hosting is chosen]. If a provider ever needs to process data outside the EEA, we will tell you first and use an approved safeguard, such as an adequacy decision or the EU standard contractual clauses.

6. How long we keep it

We keep information only as long as needed for the purpose collected, an active business relationship, dispute handling and applicable legal, tax or accounting requirements. Unsuccessful or casual enquiries should not be retained indefinitely.

7. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact us using the details above.

You may also complain to the Irish Data Protection Commission if you believe your data-protection rights have been infringed.

8. Automated guidance

The current Emma questionnaire uses local programmed rules and Knowledge Bank material to create indicative responses. It does not make a legal or similarly significant decision about you. Where future automated processing materially affects individuals, this notice will explain it.

9. Cookies and local storage

This build does not intentionally use advertising or analytics tracking, and we do not harvest or sell personal data — ever. Two limited, specific things happen in your browser:

• Session reminders. While you're browsing, we remember which of Emma's occasional messages you've already seen this visit, so we don't repeat ourselves. This is an anonymous counter with no personal content — no name, no content beyond a message ID — and it clears automatically the moment you close the tab.
• Task progress. If you start something with real length to it — a questionnaire or a full audit — we remember your answers so you can pick up where you left off, including on another device if you save a resume code. This only begins if you've actively started that task; it never runs in the background.

Neither of these tracks your browsing, recognises you across the site generally, or shares anything with third parties. See the Cookie section in the Legal Centre.

10. How we protect your data

DRAFT for solicitor

• Encrypted in transit: the live service only accepts secure (https) connections.
• Encrypted at rest: accounts, venue details, staff and training records, the change log, menus and allergen records, appraisal summaries you choose to save, guest comment cards and enquiries are stored encrypted (AES-256). The key is kept apart from the data, so a copy of the data on its own cannot be read.
• Passwords and PINs are never stored in readable form: they are kept only as one-way scrambled values, so nobody, including us, can read them.
• A change log that cannot be quietly altered: every change to staff and training records is chained to the one before it, so any tampering shows.
• Least access: staff see only their own records; handlers can only sign the topics they are appointed for; owners and managers see their own venues only.
• You stay in control: you can download everything we hold, correct it, or ask us to close your account and delete it.
• If something goes wrong: we will tell you without undue delay, and the Data Protection Commission within 72 hours where the law requires.

We take every reasonable step, but no system connected to the internet can be promised to be perfectly secure, and anything you download or print is in your own hands. Please do not send sensitive personal data through ordinary email or public forms.

11. Changes and contact

We will update this notice when our actual processing changes. Questions and rights requests: info@dinewise.ie · 089 948 1299.