Rilox Ireland Privacy Notice
Effective date: 17 August 2026
Purpose: Website enquiries, quotation requests and Meta Instant Form leads
1. Who we are
Rilox Ireland Limited (trading as Rilox Ireland) is the controller of the personal data described in this notice.
- Company number: 391545
- Registered address: Ahane, Ballymacelligott, Tralee, Co. Kerry
- Email for privacy enquiries: info@riloxireland.com
- Telephone: 087 252 5841
In this notice, “Rilox”, “we”, “us” and “our” refer to Rilox Ireland Limited.
2. Personal data we collect
Depending on how you contact or interact with us, we may collect:
- your name, email address and telephone number;
- your address, county, Eircode or project location;
- whether a project is residential or commercial;
- project requirements, intended use, measurements and preferred timeframe;
- photographs, drawings and other project information you choose to provide;
- correspondence and records of calls or meetings;
- quotation, contract, payment and invoice information where you become a customer;
- website and device information collected through cookies or similar technologies, subject to applicable consent requirements; and
- lead information submitted through advertising platforms such as Meta.
Please do not provide personal data about another person unless you are authorised to do so and have made this notice available to them.
3. How we obtain personal data
We obtain personal data directly from you when you:
- submit a form on our website or a Meta Instant Form;
- telephone, email or message us;
- request a quotation, survey, service or repair;
- enter into a contract with us; or
- interact with our website or advertising, subject to your cookie choices.
We may also receive information from an architect, contractor, property manager, business colleague or another person involved in your project. Where information is not obtained directly from you, we will provide the required privacy information within the period required by law.
4. Why we use personal data and our lawful bases
Responding to enquiries and assessing project requirements: Contact and project details Lawful basis: Legitimate interests in responding to genuine business enquiries and, where applicable, steps requested before entering a contract
Preparing quotations, arranging surveys and discussing proposed work: Contact, location and project information Lawful basis: Steps requested before entering a contract; legitimate interests where the enquirer represents a business or property owner
Supplying, installing, servicing or repairing products: Customer, project, contract and payment information Lawful basis: Performance of a contract; compliance with legal obligations
Accounting, taxation, fraud prevention and legal claims: Transaction, identity and correspondence records Lawful basis: Compliance with legal obligations; legitimate interests in protecting our business and legal rights
Operating and securing our website and business systems: Technical, security and usage information Lawful basis: Legitimate interests in operating secure and effective services; consent where required for non-essential cookies or tracking
Measuring advertising and website performance: Cookie identifiers and interaction data Lawful basis: Consent where required; legitimate interests only where permitted by law
Sending marketing communications: Contact details and preferences Lawful basis: Consent or another lawful basis permitted by Irish electronic-marketing law
Providing the information marked as required on an enquiry or quotation form is necessary for us to assess and respond to the request. If it is not provided, we may be unable to respond properly or prepare a quotation. There is no statutory obligation to submit an advertising lead form.
We do not use enquiry or lead data to make decisions producing legal or similarly significant effects solely by automated means.
5. Meta lead advertising
If you submit a Rilox lead form on Facebook or Instagram, Meta Platforms Ireland Limited collects the information through its platform and makes it available to Rilox. Meta processes personal data under its own terms and privacy policy for its separate purposes. Rilox uses the submitted information to assess your enquiry, contact you and discuss suitable next steps.
Submitting a quotation enquiry does not by itself subscribe you to unrelated marketing. Any optional marketing consent will be requested separately and can be withdrawn at any time.
6. Who receives personal data
We may share personal data only where necessary with:
- authorised Rilox personnel and contractors who need it for their work;
- website, hosting, communications, CRM, cloud-storage and IT service providers;
- Meta Platforms Ireland Limited where Meta advertising or lead forms are used;
- Wix.com entities and service providers used to host and operate the Rilox website and process website enquiries on our behalf;
- professional advisers, insurers, auditors, payment providers and accountants;
- suppliers, installers or delivery partners where necessary for the requested project; and
- regulators, courts, law-enforcement bodies or other parties where required by law or necessary to establish, exercise or defend legal claims.
We do not sell personal data.
7. International transfers
Some technology providers may process personal data outside the European Economic Area. Where this occurs, we require an applicable lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards, together with any supplementary measures required by law. Information about relevant safeguards may be requested using the contact details in this notice.
8. How long we retain personal data
We retain personal data only for as long as necessary for the relevant purpose, including applicable legal, accounting and claims requirements.
- unsuccessful enquiries and advertising leads: 24 months after the last meaningful contact;
- quotations not accepted: 24 months after expiry or the last meaningful contact;
- customer, contract, invoice and payment records: at least six years after the relevant accounting period or transaction;
- project photographs and technical records: for as long as reasonably necessary for project support, warranty, legal claims and an approved project portfolio;
- marketing suppression records: retained as necessary to respect an opt-out;
- cookie and analytics data: according to the periods stated in the website cookie settings and relevant provider configuration.
We may retain information longer where necessary for an ongoing dispute, legal claim, regulatory requirement or another documented lawful reason.
9. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is limited to people who need the information for an authorised purpose. No internet or storage system can be guaranteed completely secure.
10. Your data-protection rights
Subject to applicable conditions and exemptions, you may have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete personal data;
- request erasure of personal data;
- restrict processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain data in a portable format;
- withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing; and
- lodge a complaint with the Data Protection Commission.
To exercise a right, contact us using the details in section 1. We may request information reasonably necessary to verify your identity. We normally respond within one month, subject to the extensions allowed by law.
The Irish supervisory authority is:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
Website: https://www.dataprotection.ie
11. Cookies and tracking
Our website may use cookies and similar technologies. Strictly necessary technologies may operate without consent where permitted. We will request consent before using non-essential analytics or advertising technologies where consent is required.
Cookie choices should be available through the website's cookie controls. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.
12. Third-party websites and platforms
Our website may link to third-party websites or platforms. Their operators are responsible for their own processing practices. You should review their privacy information before providing personal data.
13. Changes to this notice
We may update this notice to reflect changes in our processing or legal obligations. The current version will state its effective date and be published on our website. Material changes will be highlighted where appropriate.
This notice should be reviewed regularly and whenever Rilox changes how it collects or uses personal data.