Privacy Policy

1. Introduction & Controller Identity

DublinScope is an educational and community platform focused on sneaker culture, footwear materials, care routines, and streetwear styling. When you use our Website, we act as the “data controller” for personal data processed in connection with the Website and our communications.

Data Controller: DublinScope Studio Ltd
Registered Address: 2 Dublin Landings, North Wall Quay, North Dock, Dublin 1, D01 V4A3, Ireland
Email: [email protected]
Phone: +353 1 612 4007

We do not appoint a Data Protection Officer for this Website because our activities do not involve large-scale processing of special-category data. If that changes, we will update this policy and provide dedicated DPO contact details.

Effective Date: March 12, 2026.

2. Personal Data We Collect

We collect personal data in a few straightforward ways: when you submit a form, when your browser loads pages, and when you choose cookie preferences. The specific categories depend on how you interact with the Website.

• Identity and contact details: name, email address, and phone number (if you provide it in a message or email).
• Form content and communications: messages you submit (for example, workshop interest, what you want to learn, or questions about materials and care), and our replies.
• Technical information: IP address, browser type and version, device identifiers, operating system, language settings, and approximate location derived from IP (typically city/region).
• Usage data: pages viewed, time on page, referrer URL, click paths, and interactions with key components (for example, opening the FAQ accordion or submitting a form).
• Cookies and identifiers: cookie values and similar identifiers that store session continuity and consent preferences (see Section 4).
• Conversion events: events that indicate an action was completed (for example, a contact form submission), which may be used for measurement when marketing cookies are enabled.

We do not intentionally collect special-category data (such as health data, religious beliefs, political opinions) and we do not request government identification numbers or financial account details through the Website. Please avoid including any sensitive personal information in free-text fields.

3. Why We Process Personal Data & Legal Basis (GDPR Art. 6)

Under the GDPR and the Irish Data Protection Act, we need a lawful basis for each purpose. The bases below reflect the typical reasons an educational platform like DublinScope processes data: responding to requests, improving content, maintaining security, and (only with consent) measuring advertising performance.

• Contact and workshop requests: We process your details to respond and provide information you asked for. Legal basis: GDPR Art. 6(1)(b) (steps prior to entering a contract) and Art. 6(1)(a) (consent, where you explicitly provide information and request follow-up).
• Website analytics: If you enable analytics cookies, we use aggregated insights to understand how pages are used and improve the clarity of guides. Legal basis: Art. 6(1)(a) consent.
• Marketing/remarketing and conversion measurement: If you enable marketing cookies, we may measure ad performance and build audience segments for remarketing or lookalike audiences. Legal basis: Art. 6(1)(a) consent.
• Security and fraud prevention: We process technical logs to protect the Website, prevent abuse, and keep services stable. Legal basis: Art. 6(1)(f) legitimate interests.
• Legal obligations: Where required, we process data to comply with applicable law (for example, responding to lawful requests or retaining records needed for tax or accounting). Legal basis: Art. 6(1)(c).

Automated Decision-Making (GDPR Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. Any audience segmentation for advertising is limited to measurement and campaign delivery where you have opted in to marketing cookies.

4. Cookies & Tracking

The Website uses cookies and similar technologies. Some are essential for the site to function, while others are optional and only operate if you choose them. Your choices are stored in a cookie called cookie_consent.

We group cookies into three categories that match our Cookie Policy:

• Essential (always active): required for basic site functionality, session continuity, and recording your consent choice. Examples include _site_session and cookie_consent. Retention varies from session to 12 months.
• Analytics (optional): used to understand traffic and page usage. When enabled, we may use Google Analytics 4 with IP anonymization. Examples: _ga and _ga_XXXXXXXXXX. Typical data retention: 14 months for analytics reporting settings.
• Marketing (optional): used to measure and improve advertising performance and support remarketing audiences. Examples: _gcl_au, _fbp, and _fbc, where applicable.

Beyond cookies, some marketing and analytics setups may rely on pixel tags or server-side measurement. Where used, these tools generally use identifiers derived from your browser (cookie IDs) and may combine them with technical signals like IP address and User-Agent. If server-side measurement is implemented, it may use hashed identifiers (for example, hashed email) only where you have opted in and the implementation supports it.

For more detail on cookie names and retention, see our Cookie Policy.

5. Consent (EEA/UK)

Users in Ireland, the EEA, and the UK receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent under GDPR Art. 6(1)(a). Essential cookies remain active because they are required for the Website to function.

Consent is recorded in the cookie_consent browser cookie (stored for 12 months unless you clear it). You can withdraw or change your consent at any time by using the “Manage cookie preferences” link in the footer or by clearing cookies in your browser settings. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.

6. Sharing With Advertising & Service Partners

We share personal data with service providers only where it supports the operation of the Website, communications, or measurement that you have consented to. We do not sell personal data.

• Google LLC (Google Analytics 4, Google Ads measurement/remarketing where enabled): may receive cookie identifiers, usage data, and conversion events. Policy: policies.google.com/privacy
• Meta Platforms, Inc. (Meta Pixel, Custom/Lookalike Audiences, Conversion API where enabled): may receive page-view and conversion signals, cookie identifiers, and audience membership for measurement. Policy: facebook.com/privacy/policy
• Cloudflare (CDN and security): may process IP addresses for performance and threat detection. Policy: cloudflare.com/privacypolicy

These providers may process data as processors (on our instructions) or, in some contexts (notably advertising), as independent controllers for their own compliance purposes. Where marketing or analytics cookies are disabled, we aim to prevent those optional tags from running. We do not permit providers to use site data for their own independent commercial purposes beyond delivering and securing the services.

7. International Transfers

Some of our service providers may process data outside the EEA/UK, including in the United States. Where applicable, transfers may rely on the EU–US Data Privacy Framework (since July 2023), the UK Extension to the DPF, or the Swiss–US DPF. Where the DPF is not applicable, we rely on Standard Contractual Clauses (EU 2021/914) and/or the UK International Data Transfer Addendum (IDTA) as fallback safeguards.

We also use technical measures (such as access controls and least-privilege policies) to reduce transfer risks. You can request more information about applicable safeguards by emailing [email protected].

8. Data Retention

We keep personal data only as long as needed for the purposes described in this policy. Retention periods vary by data type:

• Contact submissions and workshop requests: typically up to 2 years from the last interaction, so we can respond consistently and keep context for follow-up questions.
• Email correspondence: for the duration of the relationship, plus up to 1 year to handle follow-up or recordkeeping.
• Server and security logs: typically up to 90 days unless needed for investigation or abuse prevention.
• Analytics data: typically 14 months in analytics reporting settings, plus cookie-level retention as described in our Cookie Policy.
• Marketing cookies: retained according to their cookie lifetimes (commonly 90 days), unless you withdraw consent sooner.
• Cookie consent record: we may retain a record of consent choices for up to 3 years for audit and compliance purposes.
• Legal/tax: where required by law, we may retain relevant records for the period mandated (often 6–10 years depending on record type).

9. Your Rights (GDPR & UK GDPR)

If you are in the EEA or UK, you may have the following rights regarding your personal data, subject to exceptions and limitations:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time (Art. 7(3))
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise a right, email [email protected]. We aim to respond within 30 days. For complex requests, we may extend this by up to 60 days as permitted by law, and we will tell you if an extension is needed.

Supervisory authority references (helpful starting points):

• EU overview: edpb.europa.eu
• UK: ico.org.uk
• Germany: bfdi.bund.de
• France: cnil.fr
• Poland: uodo.gov.pl
• Spain: aepd.es

10. Children

This Website is not directed at individuals under 16. We do not knowingly collect personal data from minors. If you believe a child under 16 has provided personal data without verifiable parental consent, contact us and we will take steps to delete the data promptly.

11. Do Not Track

Some browsers provide a “Do Not Track” (DNT) signal. This Website does not respond to DNT signals. Third-party providers may have their own approaches to DNT handling; consult their privacy policies for details.

12. Data Deletion Requests

You may request deletion of personal data by emailing [email protected] with the subject line “Data Deletion Request”. We will ask for enough information to verify the request and locate relevant data. Where deletion is allowed, we aim to complete it within 30 days of verification. Some data may be retained where required by law or for legitimate interests such as security and dispute handling.

13. Business Transfers

If DublinScope Studio Ltd is involved in a merger, acquisition, asset sale, financing, or insolvency, personal data may be transferred to a successor entity or counterpart as part of that transaction. If such a transfer materially changes how your data is used, we will provide notice on the Website.

14. California Privacy Notice (CCPA/CPRA)

This section applies if you are a California resident and visit our Website. The CCPA/CPRA uses specific definitions for “sell” and “share”. We do not sell personal information as those terms are commonly understood. We may share certain identifiers and browsing activity for cross-context behavioral advertising when you enable marketing cookies.

Categories of personal information disclosed in the past 12 months may include:

• Identifiers: name, email, IP address, cookie identifiers (shared with service providers and, where opted in, advertising partners).
• Internet or other network activity: browsing interactions and page views (shared with analytics and advertising providers where enabled).
• Inferences: interests or preferences inferred from page interactions for advertising measurement (where enabled).

Your rights may include: the right to know, delete, correct, and opt out of sale/sharing, and the right to non-discrimination. You can opt out of sharing for targeted advertising via our cookie preferences tools. To submit a California privacy request, email [email protected] with the subject “California Privacy Request”. We will verify your identity as required. Authorized agents may submit requests with written proof of authorization.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling that produces legal or similarly significant effects.

To submit a Virginia privacy request, email [email protected] with the subject “Virginia Privacy Request”. If we decline a request, you may appeal by emailing with the subject “Appeal of Refusal — Privacy Request”. We respond to appeals within 60 days as required by law. If an appeal is denied, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified request to opt out of the sale of certain personal information by emailing [email protected] with the subject line “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Website, our practices, or legal requirements. For material changes, we will provide a notice on the Website at least 14 days before the change takes effect. The “Last Updated” date at the top of this page shows when the policy was most recently revised.

18. Contact

For privacy questions, requests, or complaints, contact:

DublinScope Studio Ltd
2 Dublin Landings, North Wall Quay, North Dock, Dublin 1, D01 V4A3, Ireland
Email: [email protected]
Phone: +353 1 612 4007