LocallyIrish.ie is run by Sevenoways Innovations Limited, trading as Locally Irish, a company registered in Ireland (company no. 681920), Coolaney, Co. Sligo, Ireland. We are the data controller for the personal data described here. This policy explains what we collect, why, who we share it with, and your rights under the GDPR. For any privacy question or request, email hello@locallyirish.ie.
What we collect, and why
- Accounts. Your name, email and password (stored only as a secure hash) when you create an account, claim or manage a listing. Why: to provide the service you signed up for (contract).
- Business listings. Business names, addresses, phone numbers, websites, opening hours and photos. Many listings are created from public sources: Google, OpenStreetMap, the Companies Registration Office, and official public registers such as the PSI, PSRA, SEAI, Safe Electric, RGI, Tusla and approved food premises lists. Where a business is a sole trader, some of this is personal data. Why: our legitimate interest, and the public's, in a complete directory of Irish businesses. From the trade registers we use only the business's registration number and status for a badge; we do not store the names of individual contacts, staff or providers listed there. Any business can ask us to correct or remove its listing.
- Reviews. Your name (shown with the review), your email (never shown) and your rating and text. We also record the IP address a review is sent from and check it with an IP-lookup service to spot VPNs and data centres. Why: to publish your review, and our legitimate interest in stopping fake reviews. IP addresses are deleted after 90 days. See how we check reviews.
- Enquiries, quote requests and messages. Your name, contact details and message. Why: to pass them to the business or businesses you contacted (quote requests are reviewed by us first), which is what you asked us to do. The IP address is kept for 90 days to prevent abuse.
- Review requests from businesses. A business owner can give us a customer's email so we can invite them to review the business. We check the address is deliverable, never email anyone who has opted out, and send at most one request per customer per 180 days.
- Emails we send. We keep a record of emails sent, and whether they were opened, so we can answer questions about them and stop sending to addresses that bounce or unsubscribe. Every marketing email has a one-click unsubscribe.
- Payments. Handled by Stripe; we never see or store full card details.
- Analytics, only if you accept it (see cookies): pages visited, device and browser type, and approximate location.
- Server logs. Our servers record requests (including IP address) for security and to keep the site running, and count visits arriving from search engines for business owners' statistics. Business owners only ever see totals, never who visited.
We do not sell personal data.
Services we use
These providers process personal data for us, only for the purposes above:
- OVH (France): hosting and database.
- Cloudflare: content delivery and security.
- Amazon Web Services SES (Ireland): sending email.
- Stripe: payments.
- Google Analytics and Sevenlytics: analytics, with your consent.
- Reoon: checking that an email address can receive mail before we write to it.
- ip-api.com: IP lookups to detect VPNs and data centres on reviews.
- Telegram: alerts to our own team about new enquiries and items to review. These carry only a first name and a short excerpt with contact details removed.
- Sevenoways SMS Relay: our own text-message gateway, for occasional texts we send to businesses about enquiries, and their replies.
- Google Ad Manager and ad.plus: the ads on some pages (see Cookies above).
- iubenda (Italy): our cookie banner, which records your consent choice.
- pCloud: encrypted off-site backups, kept for 30 days.
- OpenRouter: AI models we use to write business descriptions from listing details, and to answer questions sent to our AI assistant features.
Some of these providers are based outside the European Economic Area. Where personal data leaves it, we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We also share enquiries and quote requests with the businesses you contact, and may disclose data where the law requires it.
AI assistant connector (Claude, ChatGPT)
Our connector at locallyirish.ie/api/mcp lets AI assistants search the directory. When you use it:
- The search and business-details tools receive only the search terms the assistant sends (for example a trade and a county). We do not receive your conversation, chat history, files or the assistant's memory.
- If you ask the assistant to request quotes, we receive the name, email, optional phone number and job details you chose to share. We store them as a quote request, our team reviews it, and only then do we forward it to matching local businesses so they can contact you. It is handled exactly like a quote request made on our website, including your right to have it deleted.
- We use the calling IP address in memory to apply rate limits. It is not stored with your request.
- The AI assistant's provider (for example Anthropic or OpenAI) processes your conversation under its own privacy policy.
More about the connector: locallyirish.ie/connect.
How long we keep data
- IP addresses recorded with reviews and enquiries: 90 days.
- Backups: 30 days.
- Accounts, listings, reviews and enquiries: while your account or the listing is active, then deleted on request or when no longer needed, except where we must keep records by law (for example payment records for tax).
- Email opt-outs and bounces: kept so we never email that address again.
Your rights
You can ask to access, correct, delete or move your data, to restrict how we use it, and to object to processing based on our legitimate interests, including the listing of your business. Where we rely on your consent, you can withdraw it at any time. Email hello@locallyirish.ie; we reply within one month. You can also complain to the Irish Data Protection Commission at dataprotection.ie.
LocallyIrish is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy; the date at the top shows when. If a change affects how we use data you have already given us, we will tell you before it applies. See also our Terms of Use.