Privacy Policy

Irifar Ltd ("Irifar", "we", "us") is the controller of the personal data described in this policy. We are a company registered in Ireland, with our office at Work Hub, 77 Camden Street Lower, Dublin 2, D02 XE80, Ireland.

For any question about this policy or your personal data, contact us at info@irifar.com.

This policy explains how we handle personal data when you visit irifar.com, use the contact form on it, or write to us by email or telephone. It is provided under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018.

We collect only what we need to run the website and answer you:

• Contact form: your name, company, country, the option you choose under "I am a", your email address and your message.
• Email and telephone: the details you choose to give us when you contact us directly.
• Technical data: when you visit, the servers that host this website process your IP address, browser type and the pages requested, as needed to deliver the site and keep it secure.
• Abuse protection: to stop the contact form being misused, the server keeps a count of recent submissions linked to a one-way coded form of your IP address and email address. The code cannot be turned back into either.

• To answer your enquiry and manage any resulting business relationship. Legal basis: our legitimate interest in responding to people who contact us, or steps you ask us to take before entering into a contract (GDPR Article 6(1)(f) and 6(1)(b)).
• To send an automatic confirmation that your message arrived. Legal basis: legitimate interest.
• To keep the website and contact form secure and prevent abuse. Legal basis: legitimate interest.
• To meet legal obligations, for example if a message reports a suspected side effect of a medicine, which we may be required to record and pass to the relevant health authority. Legal basis: legal obligation (GDPR Article 6(1)(c)).

Please do not send us personal health information through the contact form or by email. If you need medical advice, consult a qualified healthcare professional. If you report a suspected side effect, include only what is needed for the report.

This website does not use cookies, does not store anything on your device, and does not use analytics, advertising or tracking of any kind. Fonts and all other files are served from this website itself, so your visit is not disclosed to third-party services. For that reason there is no cookie banner: there is nothing to consent to.

We do not sell personal data or share it for marketing. We share it only with:

• our website hosting and email provider, which processes data on our behalf under a data processing agreement;
• professional advisers, such as lawyers and accountants, where needed;
• regulators, authorities and courts, where the law requires it.

If personal data is transferred outside the European Economic Area, we make sure it is protected by an adequacy decision of the European Commission or by appropriate safeguards such as the Commission's Standard Contractual Clauses.

• Enquiries and correspondence: for as long as needed to deal with your enquiry and any business relationship that follows, and then deleted, unless the law requires us to keep them longer.
• Abuse protection counts: deleted automatically within two days.
• Server logs: kept by our hosting provider for a short period for security and troubleshooting, then deleted.

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these rights, write to info@irifar.com. We will reply within one month, and there is no charge.

If you are unhappy with how we handle your personal data, please tell us first so we can put it right. You also have the right to complain to the Data Protection Commission, the supervisory authority in Ireland (www.dataprotection.ie), or to the supervisory authority in the EU country where you live or work.

The website is served over an encrypted connection, the contact form sends mail only through our own authenticated mailbox, and access to our systems is limited to the people who need it.

This website is intended for business partners and healthcare professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time. The date at the top of this page shows when it was last changed.