How we use your order-request details.

Who is responsible

Patrick McGlone is the data controller for information submitted through the form. For privacy questions or to exercise your rights, email patmcglone+babybubble@gmail.com.

What we collect

We collect your name, email address, whether the support is for your household or someone else, and the practical-support details you provide. A phone number, area or Eircode, and preferred timing are optional.

Please do not provide payment, medical or emergency information. Baby Bubble does not intentionally request that information through this form.

Why we use it

We use the information only to assess your request and contact you about its scope, location, timing and possible price. Patrick McGlone and authorised Baby Bubble team viewers may access it for that purpose. Submitting the form does not create a booking. We do not use order-request details for marketing and we do not sell them.

Our legal basis is your consent, which you give using the unticked checkbox before submission. You can withdraw consent at any time by emailing the privacy contact. Withdrawal does not affect processing that was lawful before you withdrew it.

Providing the required fields is not a statutory or contractual requirement, but we cannot assess or respond to the request without them.

Storage, recipients and transfers

Cloudflare provides the Worker hosting, D1 database and Turnstile bot protection used by the form. Cloudflare therefore processes data on our behalf to deliver, store and protect the service. Access to stored requests is not public.

Authorised Baby Bubble team viewers are invited individually and sign in with their own passkey. They are expected to keep request details confidential, use a device protected by its normal security controls, and access the details only to help assess and respond to requests. Their access can be revoked at any time.

Turnstile evaluates browser and request signals to distinguish people from automated traffic. Baby Bubble sends the request IP address to Cloudflare for this verification but does not store the IP address or user-agent in its order-request database. Turnstile does not receive the form entries from Baby Bubble.

Cloudflare may process personal data outside the European Economic Area. For restricted transfers, Cloudflare's Data Processing Addendum provides for the European Commission's Standard Contractual Clauses and additional safeguards. You may ask the privacy contact for more information about these safeguards.

How long we keep it

Each order request is assigned a deletion deadline 90 days after it is received and is automatically deleted after that deadline. You may ask us to delete it sooner.

Automated bot protection

Turnstile automatically decides whether a form submission appears to come from a person rather than a bot. A failed check prevents that submission from being stored, but it does not produce a legal or similarly significant decision about you. You can retry the form or contact us at the privacy email address.

Your rights

Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, or a portable copy, and you may withdraw consent. To make a request, email the privacy contact above. We may need enough information to confirm that the request relates to you.

You may also lodge a complaint with Ireland's Data Protection Commission.