Privacy Notice 

This is the Privacy Notice of Doran Management Financial Services Limited.
Our registered office is at 59-60 O’Connell Street, Limerick, V94 E95T, Ireland. 

Introduction 

This notice describes how we in our role as a Data Controller collect, store, transfer and use personal data.  It tells you about your privacy rights and how the law protects you.  In the context of the law and this notice, ‘personal data’ is information that clearly identifies you as an individual or which could be used to identify you if combined with other information.  Acting in any way on personal data is referred to as ‘processing’.  Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’. 

Our Privacy Notice complies with the law in Ireland, specifically with the Data Protection Act 2018 (the ‘Act’) accordingly incorporating the EU General Data Protection Regulation (‘GDPR’) and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011. 

Personal data we process 

1: How we obtain personal data 

The information we process about you includes information: 

• • you have directly provided to us as a result of how you use our website or our services 

2: Types of personal data we collect directly 

When you use our website, we ask you to provide personal data.  This can be categorised into the following groups: 

3: Our use of aggregated information 

We may aggregate anonymous information such as statistical or demographic data for any purpose.  Anonymous information is that which does not identify you as an individual.  Aggregated information may be derived from your personal data but is not considered as such in law because it does not reveal your identity. 

For example, we may aggregate usage information to assess whether a feature of our website is useful.  However, if we combine or connect aggregated information with your personal data so that it can identify you in any way, we treat the combined information as personal data, and it will be used in accordance with this privacy notice. 

If a basis on which we process your personal data is no longer relevant then we shall immediately stop processing your data. 

4: Information we process for the purposes of legitimate interests 

We may process information on the basis there is a legitimate interest, either to you or to us, of doing so.  Where we process your information on this basis, we do after having given careful consideration to: 

• • whether the same objective could be achieved through other means whether processing (or not processing) might cause you harm whether you would expect us to process your data, and whether you would, in the round, consider it reasonable to do so. For example, we may process your data on this basis for the purposes of:
  • Improving our service
  • record-keeping for the proper and necessary administration of our organisational or business
  • responding to unsolicited communication from you to which we believe you would expect a response
  • preventing fraudulent use of our services
  • exercising our legal rights, including to detect and prevent fraud and to protect our intellectual property
  • insuring against or obtaining professional advice that is required to manage organisational or business risk
  • protecting your interests where we believe we have a duty to do so

5: Sharing of your personal data 

We do not share or disclose to a third party, any information collected through our website or services, subject to the following exceptions: 

Service Providers: 

Carefully selected companies that provide services for or on behalf of us, such as companies that help us with IT support and security.  We work closely with these third parties and they are also committed to protecting your data. 

Other Parties When Required by Law or as Necessary to Protect Our Services: 

For example, it may be necessary by law, legal process, or court order from governmental authorities to disclose your information For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. We will challenge any such requests that are not valid. 

Other Parties in Connection with Corporate Transactions: 

We may disclose your information to a third party as part of a merger or transfer, acquisition or sale, or in the event of a bankruptcy. 

Other Parties with Your Consent or at Your Direction: 

We may share information about you with third parties when you separately consent to or request such sharing.  

6: Data may be processed outside the European Union 

Our websites and EU-related personal data are hosted in Ireland. 

We may also use outsourced services in countries outside the European Union from time to time in other aspects of our business. 

Accordingly data obtained within Ireland or any other country could be processed outside the European Union. 

We use safeguards with respect to data transferred outside the European Union including transfer clauses written by or approved by a supervisory authority, such as the Standard Contractual Clauses. 

7: Control over your own information 

Under the General Data Protection Regulation, you have the following rights, which DM Financial will always work to uphold: 

a) The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in the ‘Contact Us’ section.

b) The right to access the personal data we hold about you. ‘Contact Us’ below will tell you how to do this.

c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. It is important that your personal data is kept accurate and up to date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.

d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we hold. Please contact us using the details in the ‘Contact Us’ section to find out more.

e) The right to restrict (i.e. prevent) the processing of your personal data.

f) The right to object to us using your personal data for a particular purpose or purposes.

g) The right to withdraw consent. This means that, if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.

h) The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.

i) Rights relating to automated decision-making and profiling. We do not use your personal data in this way.

j) the right to lodge a complaint with the Data Protection Commission, if you have any cause for complaint about our use of your personal data. We would welcome the opportunity to resolve your concerns ourselves however, so please contact us first, using the details in the ‘Contact Us’ section.

8: Complaints 

If you are not happy with our Privacy Notice, or if you have any complaint, then we would ask you to let us know at privacy@dmfinancial.com so that we can resolve this with you. 

If you are in any way dissatisfied about how we process your personal data, you have a right to lodge a complaint with the Data Protection Commission (DPC). This can be done at https://www.dataprotection.ie/docs/complaints/1592.htm.  We would, however, appreciate the opportunity to talk to you about your concern before you approach the DPC. 

9: Security of your data 

DM Financial is committed to protecting the security of your personal data. We use a different security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as these procedures are, no security system is always fully secure. We have implemented strict internal processes to ensure that your personal data is safeguarded within our organisation.  

10: Retention period 

Except as otherwise mentioned in this privacy notice, we keep your personal data only for as long as required by us: 

• • to provide you with the services you have requested 
  • to comply with other law, including for the period demanded by our tax authorities 
  • to support a claim or defence in court 

11: Processing of children’s’ data 

DM Financial does not provide services to children, nor do we market to children. If you are under the age of 18, please do not submit any personal information through our website. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce this Privacy Notice by instructing their children never to provide personal information via our website without their parent or guardian’s consent. 

Contact Us 

To contact us about anything to do with your personal data, including to make a subject access request, please use the following details (for the attention of Data Protection Team): 

Registered address: 59-60 O’Connell Street, Limerick, V94 E95T, Ireland.  

Email address: privacy@dmfinancial.com 

12: Review of this Privacy Notice 

We shall update this Privacy Notice from time to time as necessary. This was last updated on 1st March 2025.