Privacy Policy

Privacy Policy

Last updated: [18 / 02 / 2026]

Griolladh Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, place an order, submit a franchise enquiry, or otherwise interact with us, in accordance with the EU General Data Protection Regulation (GDPR) and Irish data protection law.

1. Who We Are

Data Controller:
Griolladh Ltd
51 Millview Lawns
Malahide
Dublin
K36 CY22
Ireland

Email: [email protected]

2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Website & Customer Data

  • Name
  • Email address
  • Phone number
  • Delivery or collection details
  • Order-related information (including catering orders)
  • IP address and basic technical data (via cookies and analytics)

b) Franchise Enquiries

When you submit a franchise enquiry form, we may collect:

  • Name
  • Contact details
  • Location information
  • Business or investment-related information relevant to franchising

c) Marketing (Optional)

  • Email address, only if you explicitly sign up to receive marketing communications (e.g. via Mailchimp)

3. How We Use Your Data

We only use your personal data where we have a lawful basis to do so. This includes:

  • Operating and maintaining our website
  • Processing and fulfilling orders
  • Managing catering enquiries and requests
  • Responding to customer or franchise enquiries
  • Assessing franchise applications
  • Improving our website and services
  • Complying with legal and regulatory obligations

Marketing emails are sent only where you have given clear consent, and you can unsubscribe at any time.

3A. Job Applications & Recruitment Data

When you apply for a job with Griolladh Ltd, we collect and process personal data as part of our recruitment process.

What We Collect

We may collect:

  • Name
  • Contact details (email address, phone number, address)
  • CV or résumé information (employment history, qualifications, skills)
  • Cover letter or supporting statements
  • References and referee contact details
  • Interview notes and assessment records
  • Any other information you choose to provide in your application

We do not request special category data (such as health information, religious beliefs, or other sensitive data). If you choose to include such information in your application, it will only be processed where permitted under GDPR and Irish data protection law.

Lawful Basis for Processing

We process recruitment data on the following lawful bases:

  • Taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR)
  • Our legitimate interests in recruiting suitable staff (Article 6(1)(f) GDPR)
  • Compliance with legal obligations under Irish employment law (Article 6(1)(c) GDPR)

Where special category data is processed, it will be handled in accordance with Article 9 GDPR and the Data Protection Act 2018.

How We Use Recruitment Data

We use your personal data to:

  • Assess your suitability for a role
  • Communicate with you regarding your application
  • Arrange interviews
  • Verify references (where applicable)
  • Comply with legal and regulatory requirements
  • Defend or establish legal claims if necessary

Sharing of Recruitment Data

Your application data will only be shared where necessary, including:

  • With relevant managers involved in the recruitment process
  • With professional advisors (such as HR or legal advisors), where required
  • Where required by law or regulatory authorities

We do not sell or use applicant data for marketing purposes.

Data Retention (Recruitment)

If your application is unsuccessful, we will retain your personal data for a limited period after the recruitment process has ended, typically up to 12 months, unless a longer period is required by law or you consent to us retaining your details for future opportunities.

If you are successful, your recruitment data will become part of your employee record and will be retained in accordance with our employee data retention policies.

Your Rights

You have the same data protection rights in respect of your recruitment data as outlined in Section 9 of this Privacy Policy.

4. Payments & Online Orders

All online payments are handled securely by Storekit, our third-party ordering and payment provider.

We do not collect or store payment card details on our website or servers. Payment information is processed directly by Storekit in accordance with their own privacy and security policies.

5. Sharing Your Data

We do not sell your personal data.

We may share your data only where necessary, including:

  • Franchise enquiries: with trusted third-party advisors, consultants, or partners who work with Griolladh Ltd on franchise evaluation and development (e.g. legal, financial, or operational partners).
  • Service providers: such as website hosting, analytics, or email services.
  • Legal obligations: where disclosure is required by law or regulation.

All third parties are required to handle your data securely and in compliance with GDPR.

6. Cookies & Analytics

Our website uses cookies to improve functionality and user experience.

We use third-party tools such as:

  • Google Analytics
  • Meta Pixel

These tools help us understand how visitors use our website. Data is collected in an aggregated or anonymised form where possible.

A cookie consent banner is displayed on our website, allowing you to manage your preferences in line with GDPR requirements.

For more information on our Cookie Policy, please see the dedicated page HERE.

7. Email Marketing (Mailchimp)

If you choose to sign up to our mailing list, your email address will be processed using Mailchimp for the purpose of sending updates, offers, or news.

  • You will only receive emails if you opt in
  • You can unsubscribe at any time using the link in our emails
  • We do not add users to marketing lists without consent

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:

  • Order fulfilment
  • Franchise application assessment
  • Legal, tax, or accounting requirements

When data is no longer required, it is securely deleted or anonymised.

9. Your Data Protection Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where consent is the lawful basis)

To exercise your rights, contact us at [email protected].

You also have the right to lodge a complaint with the Data Protection Commission (Ireland).

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Scroll to Top