Privacy Policy

Who we are

Church Music Ireland operates churchmusic.ie. For questions or data-protection requests, contact info@churchmusic.ie.

Personal data we process

• Account and listing data: details you submit when registering, subscribing, publishing a profile, or managing an account.
• Messages and enquiries: your contact details and the content you submit through forms or email.
• Transaction data: subscription and payment status. Payment-card details are handled by our payment provider rather than stored by us.
• Security and technical data: server logs and information needed to operate, troubleshoot and protect the service. IP addresses, device/browser information, online identifiers and page activity can be personal data.
• Optional analytics data: with consent, Google Analytics and Microsoft Clarity process online identifiers, device/browser details, pages, traffic sources and interaction information. Clarity may produce heatmaps and session recordings.

Why we use it

• To provide an account, publish requested content, manage subscriptions and respond to enquiries.
• To operate securely, prevent abuse, diagnose faults and comply with legal obligations.
• With your consent, to understand site traffic and interactions and improve the service.

Depending on the processing, our legal basis is performance of a contract, compliance with a legal obligation, legitimate interests in operating and securing the service, or your consent. You may withdraw Analytics consent at any time without affecting earlier lawful processing.

Cookies, analytics and consent records

Google Tag Manager, Google Analytics and Microsoft Clarity do not load until you affirmatively enable Analytics. Advertising storage and personalisation remain denied. Our Cookie Notice identifies each technology, its purpose, activation condition and duration.

When Analytics is granted, renewed or withdrawn, we retain a consent receipt for 24 months as compliance evidence. The receipt uses random identifiers and records the choice, product, policy version, notice snapshot and timestamps. It does not record a name, account identifier, IP address or user-agent string and is not linked to an Ogma account. Rejections remain only in the visitor's browser.

Sharing and international processing

We use service providers for hosting, security, communications, payments and—only with consent—analytics. Google and Microsoft may process analytics data outside the European Economic Area under their applicable data-transfer safeguards. We may also disclose information where the law requires it. We do not sell personal data.

• How Google uses information from sites that use its services
• Microsoft Privacy Statement

Retention and security

We keep personal data only as long as needed for the purpose for which it was collected, including legal, accounting, security and dispute requirements. Retention varies by record; consent receipts are retained for 24 months. We use technical and organisational safeguards, but no internet service can promise absolute security.

Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, portability or objection, and may withdraw consent at any time. Contact us using the address above. You may also complain to the Irish Data Protection Commission or your local supervisory authority.

Changes to this policy

We may update this policy when our processing or legal obligations change. We will publish the revised date here. A material change to optional analytics processing will use a new consent-policy version and request a fresh choice.