Privacy Policy
Last Updated: 21.02.2026
This Privacy Policy explains how Nasc, the Migrant and Refugee Rights Centre, collects and uses personal data through this website. This policy applies only to personal data collected through our website. It does not apply to personal data collected through our in-person services, casework, events, or recruitment processes. Separate privacy notices apply in those contexts.
Who we are
Nasc, the Migrant and Refugee Rights Centre
34 Paul Street
Cork City
Ireland
Email: [email protected]
Nasc is the controller of personal data collected through this website.
If you have any questions about how your data is used, you may contact Fiona Hurley at [email protected]
What information we collect
We do not require users to create accounts or sign up to access our website.
We may collect the following categories of data:
Website usage data
When you visit our website, we collect limited technical information such as IP address, browser type, device type, pages visited, and time spent on pages. This is collected through Google Analytics and cookies (see Section 6 below).
Donation Information:
If you make a donation, we receive confirmation details from our payment providers (Stripe and iDonate), which may include:
- Your name
- Email address
- Postal address (if provided)
- Transaction reference and date
We do not receive or store your full payment card details.
How we use your information
We use personal data for the following purposes:
- To operate and maintain our website
- To monitor website performance and improve usability
- To process and record donations
- To meet our legal and financial reporting obligations
We do not use website data for marketing purposes.
Legal basis for processing
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:
- Consent: Analytics and non-essential cookies are only activated after you provide consent through our cookie banner (Cookiebot).
- Legitimate Interests: We process limited technical data to ensure the security, functionality and improvement of our website.
- Legal Obligation: We retain donation records to comply with financial, audit and charity law requirements.
- Donations: Online donations are processed securely through Stripe and iDonate. These providers act as payment processors and may process your personal data on our behalf. We receive confirmation details of your donation but do not have access to your full payment card information.
Cookies, Tracking & Analytics
Our website uses cookies and similar technologies to improve your experience and analyse how our site is used.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you interact with the site.
Analytics
We use Google Analytics (GA4) to understand how visitors use our site. This helps us improve content and accessibility.
- IP anonymisation is applied automatically in GA4.
- Event data is retained for 2 months.
- User-level data is retained for up to 14 months.
- The retention period resets if a user returns to the site.
- Analytics cookies are only placed after you provide consent through Cookiebot.
You may withdraw or change your cookie preferences at any time through the cookie settings link on our website.
Embedded content
Our website may contain embedded content such as YouTube videos, social media feeds, or maps. These third-party services may set their own cookies once activated. Where required, these are blocked until consent is provided.
Services and international transfers
We work with trusted third-party service providers who process personal data on our behalf. These include:
- Website hosting providers
- Email service providers
- Payment processors for donations
- Database and IT support services
These providers act as data processors and are required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational security measures.
We primarily store and process personal data within the European Economic Area (EEA).
Some of our service providers, including Google, Stripe and Cloudflare, may process personal data outside the European Economic Area. Where this occurs, transfers are carried out in accordance with recognised legal safeguards, in accordance with Chapter V of the GDPR.
These safeguards may include:
- Transfers to organisations located in countries recognised by the European Commission as providing an adequate level of data protection (including participation in the EU–US Data Privacy Framework)
- Standard Contractual Clauses approved by the European Commission
- Other legally approved transfer mechanisms where applicable
Data Retention
We retain:
- Analytics data for up to 14 months (as described above)
- Donation records for eight years
- Aggregated statistical data may be retained for longer as it does not identify individuals.
Data Security
We use appropriate technical and organisational measures to protect personal data. This includes:
- Secure hosting within the European Union
- SSL/TLS encryption
- Restricted access to authorised personnel
Children
This website is intended for adults. We do not knowingly collect personal data from children under 18.
Third-Party Websites
Our website may contain links to external websites, including those of our partners and funders.
This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies.
Your Rights
Under data protection law, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data (in certain circumstances)
- Request restriction of processing
- Object to processing based on legitimate interests
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Data Protection Commission in Ireland
You can exercise your rights by contacting us at [email protected].
The supervisory authority in Ireland is the Data Protection Commission (www.dataprotection.ie).
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website with the updated date shown above.