ÉireBaile · Legal
Privacy Policy
Last updated: 19 October 2026
This policy explains how personal data is collected and used through the ÉireBaile website and when you contact us. It is written to meet the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
1. Who we are
The data controller is Adv. Shoeb Hakim, trading as ÉireBaile (company registration in progress).
- Email: getintouch@eirebaile.com
- ÉireBaile is currently operated from Mumbai, India. Our postal address is available on request by email.
When an Irish company is registered to run ÉireBaile, we will update this policy to name it as controller and will tell people on our contact lists.
EU representative. Because ÉireBaile is currently run from outside the EU, we are appointing a representative in the EU under Article 27 GDPR. Their details will be published here once appointed. Until then, please contact us at the email above.
We have not appointed a Data Protection Officer, as one is not required for our activities. Data-protection questions go to getintouch@eirebaile.com.
2. What we collect
We collect only what you give us through our forms or by email:
- Corporate Relocation Enquiry: name, job title, company, work email, phone, number of employees to relocate, expected arrival month, stay length, preferred location, budget, services needed, whether you are open to a non-binding Letter of Intent, and your message.
- Student Accommodation Interest: name, email, phone/WhatsApp, country, university or college, course start month, stay length, room type, budget and services of interest.
- Vendor & Partner Registration: company name, CRO and VAT numbers (optional), contact name, email, phone, category, counties served, capacity, website and tax-clearance status.
- Emails and messages you send us, and your marketing preferences.
- Technical data: basic data our host processes to deliver and secure the site (such as IP address and browser type), and cookie choices – see our Cookie Policy.
We do not ask for, and ask you not to send, special-category data (such as health or religious information), passport copies or payment details.
3. Why we use it and our lawful basis
- Responding to your enquiry or registration and keeping you updated about it — Lawful basis (GDPR Art. 6): Your consent, given on the form (Art. 6(1)(a)); and, where you ask for a proposal, steps taken at your request before entering into a contract (Art. 6(1)(b))
- Assessing demand and planning our launch (cities, room types, services, suppliers) — Lawful basis (GDPR Art. 6): Your consent given on the form
- Preparing anonymised, aggregated demand figures for lenders, investors and advisers (e.g. “120 students interested in Dublin”) — Lawful basis (GDPR Art. 6): Our legitimate interests in financing the business (Art. 6(1)(f)). These figures do not identify you
- Sharing an identifiable record of your interest (for example a signed Letter of Intent) with a lender — Lawful basis (GDPR Art. 6): Only with your separate, specific consent, asked for at the time
- Sending news about our launch and availability — Lawful basis (GDPR Art. 6): Your marketing consent (optional box on the form), which you can withdraw at any time
- Keeping the website secure and working — Lawful basis (GDPR Art. 6): Our legitimate interests in running a secure website
- Meeting legal obligations and handling legal claims — Lawful basis (GDPR Art. 6): Legal obligation (Art. 6(1)(c)) and legitimate interests
You can withdraw consent at any time by emailing getintouch@eirebaile.com or using the unsubscribe link in any marketing email. Withdrawal does not affect processing before you withdrew it.
We do not sell personal data and we do not use automated decision-making that has legal or similarly significant effects on you.
4. How long we keep it
- Enquiries, interest registrations and vendor registrations (leads): 24 months from your last contact with us, then deleted or anonymised. If you become a customer or supplier, we will keep the records needed for that relationship under a separate notice.
- Marketing preferences: until you withdraw consent, plus a short record of the withdrawal so we respect it.
- Anonymised statistics: may be kept indefinitely, as they do not identify you.
- Records needed for a legal claim: for as long as the claim requires.
5. Who we share it with
We use the following service providers (processors), who act only on our instructions:
- Hostinger (Hostinger International Ltd and its group companies) – website hosting, form submissions and email for getintouch@eirebaile.com.
- Our email service – the email account above is provided by Hostinger. If we move email to another provider, we will update this list.
- WhatsApp (WhatsApp Ireland Limited, part of Meta) – only if you choose to contact us on WhatsApp. Messages are handled under WhatsApp’s own terms and privacy policy, and we use them only to reply to you.
We may also share data with professional advisers (such as lawyers and accountants) under a duty of confidentiality, or where required by law. Lenders and investors receive only anonymised figures unless you have separately agreed otherwise.
6. Transfers to India
ÉireBaile is managed from India, so your data will be accessed from India. India does not have an EU “adequacy decision”. We protect your data by:
- collecting it directly from you, with this notice explaining where it will be used;
- using the European Commission’s Standard Contractual Clauses where a transfer from a provider or person in the EEA to us in India requires them;
- limiting access to Adv. Shoeb Hakim and any staff or contractors bound by confidentiality who need it to respond to you;
- using encrypted connections (HTTPS/TLS), strong passwords and two-factor authentication on our accounts, and not storing form data on shared or personal devices beyond what is needed; and
- complying with India’s Digital Personal Data Protection Act 2023 as well as the GDPR.
You can ask us for more information about these safeguards, or a copy of the relevant clauses, at getintouch@eirebaile.com.
Our providers may also process data outside the EEA under their own safeguards (such as Standard Contractual Clauses).
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate data;
- erase your data;
- restrict our processing;
- object to processing based on legitimate interests, and to direct marketing at any time;
- data portability for data you gave us on the basis of consent or contract; and
- withdraw consent at any time.
Email getintouch@eirebaile.com to use any of these rights. We will reply within one month and may ask you to confirm your identity.
8. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Data Protection Commission (Ireland):
- Website: https://www.dataprotection.ie
- Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
You may also complain to the supervisory authority in the EU country where you live or work.
9. Children
Our services are aimed at adults. If you are under 18, please ask a parent or guardian to complete any form with you. We do not knowingly collect data from children under 16 without parental consent.
10. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections, restricted access and two-factor authentication. No system is completely secure; if a breach occurs that is likely to put you at risk, we will tell you and the Data Protection Commission as the law requires.
11. Cookies
We use only strictly necessary cookies unless you agree to others through our cookie banner. See our Cookie Policy for details and to change your choices.
12. Changes to this policy
We will update this policy as ÉireBaile develops – in particular when our Irish company is registered. The “last updated” date shows the current version. Significant changes will be notified to people on our contact lists.