Privacy Policy

A legal disclaimer

Last updated: 8 September 2025

This Privacy Policy explains how SPA Transport, we collects, uses, discloses, and protects your personal information when you visit spatransport.ie (the “Website”) or interact with us.

1) Who we are (Data Controller)

SPA Transport
Registered company name if different: SPA Transport Ltd
Address: Claureen, Lahinch road, Ennis Co. Clare V95 WC79 Ireland
Email: info@spatransport.ie
Phone: +353 065 682 4376
If you have questions about this policy or your data, contact us at the details above.
If we appoint a Data Protection Officer (DPO): DPO contact: info@spatransport.ie.

2) Personal data we collect

We may collect and process the following categories of personal data:

Contact & Identity Data: name, company, role, email, phone number, postal address.
Enquiry & Service Data: messages you send via contact forms, RFQs/quotes, booking details, collection/delivery addresses, consignment references, POD details.
Billing Data: invoicing details, VAT number, payment details processed via our payment provider (we do not store full card details).
Technical & Usage Data: IP address, device info, browser type/version, pages viewed, time on page, referral source, cookies and similar technologies.
Recruitment Data (if applicable): CV/resume, cover letter, work history, qualifications, references.
Safety & Security Data: server logs, fraud prevention information.

3) How we collect your data

Directly from you: when you submit a form, request a quote, email or call us, create an account (if available), or apply for a job.
Automatically: via cookies, analytics, and server logs when you browse our Website.
From third parties: carriers, logistics partners, payment providers, background check/reference providers (for recruitment), and publicly available sources (e.g., company registries).

4) Why we use your data (Legal bases)

We process your data under the EU/UK GDPR legal bases below:

Contract (Art. 6(1)(b)): to respond to enquiries, provide quotes, perform transport & logistics services, manage collections/deliveries, issue invoices, and provide customer support.
Legitimate Interests (Art. 6(1)(f)): to operate and improve our Website, prevent fraud/abuse, keep records, and market similar services to existing customers. We balance these interests against your rights.
Consent (Art. 6(1)(a)): where required for optional cookies/analytics and certain marketing. You can withdraw consent anytime.
Legal Obligation (Art. 6(1)(c)): to comply with tax, accounting, and regulatory requirements, including safety and insurance obligations.

5) How we use your data

Provide and manage transport, warehousing, and related services.
Respond to requests for quotes, bookings, and customer support.
Issue invoices, process payments, and manage accounts.
Improve our Website, services, and user experience.
Send service updates and, where permitted, marketing about similar services (you can opt out at any time).
Ensure security, prevent fraud, and maintain records.

6) Cookies & analytics

We use cookies and similar technologies to run the site and understand usage.

Strictly Necessary Cookies: required for core functionality (e.g., security, form submissions).
Performance/Analytics Cookies (e.g., Google Analytics): help us understand how the site is used. Set only with your consent where required.
Functionality Cookies: remember your preferences.

You can manage cookies via our cookie banner and your browser settings. For analytics providers, IP addresses may be truncated/anonymised where supported.

7) Disclosures and transfers of data

We may share personal data with:

Service providers / processors: hosting, email, IT support, analytics, CRM, payment processors, auditors, insurers, and professional advisers—bound by contracts and confidentiality.
Operational partners: carriers, freight forwarders, agents, and depots strictly as needed to perform our services.
Authorities or third parties: where required by law, to protect rights, safety, or to establish/exercise legal claims.
Business transactions: in the context of a merger, acquisition, or asset sale, subject to appropriate safeguards.

International transfers: If data is transferred outside the EEA/UK, we use lawful safeguards (e.g., EU Standard Contractual Clauses, UK IDTA/Addenda, adequacy decisions).

8) Data retention

We keep personal data only as long as necessary for the purposes described above:

Customer & operational records: typically 6–7 years for tax/accounting and contractual limitation periods.
Enquiries/quotes: typically 12–24 months from last contact.
Recruitment data: typically 6–12 months if unsuccessful, or longer with your consent; successful applicants’ data becomes part of the employee record.
Website logs/analytics: typically 12–26 months, or as configured by the provider.
We may retain data longer where required by law or to establish/exercise/defend legal claims.

9) Your rights (EEA/UK)

Subject to conditions and exemptions, you have the right to:

Access your data and obtain a copy.
Rectify inaccurate or incomplete data.
Erase your data (“right to be forgotten”).
Restrict processing in certain circumstances.
Object to processing based on legitimate interests or to direct marketing.
Data portability for data you provided to us under consent or contract.
Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at info@spatransport.ie. We may need to verify your identity. You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland: www.dataprotection.ie.

10) Marketing

We may send existing customers information about services similar to those previously purchased. You can opt out at any time via the unsubscribe link or by contacting us. We will only send non-customer marketing with your consent where required.

11) Security

We implement appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit where appropriate, secure hosting, and staff awareness. However, no method of transmission or storage is completely secure.

12) Third-party links

Our Website may contain links to third-party sites. Those sites have their own privacy policies; we are not responsible for their content or practices.

13) Children

Our services are not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, please contact us to delete it.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the “Last updated” date.

15) Contact us

For questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:
SPA Transport – Privacy
Email: info@spatransport.ie
Address: Claureen, Lahinch road Ennis Co. Clare, Ireland]
Phone: +353 0656824376