Privacy Policy

This Privacy Policy explains how Captain.Legal collects, uses, stores and protects your personal data, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Data Protection Act 2018.

The controller is Camines LLC, publisher of this website. For any question about your data or to exercise your rights, please use our contact form.

We only collect the data needed for the purposes described below:

• Identification data: email address, first name, last name
• Data entered in the questionnaires: information needed to generate a document (which may relate to third parties, under your responsibility)
• Order and billing data: documents purchased, amount, date, history and, where applicable, company registration number (CRO) and VAT number
• Payment data: processed directly by PayPal; we never access your full card or bank details
• Technical and connection data: IP address, access logs, pages visited, session length

Captain.Legal never asks for your Personal Public Service Number (PPSN). If you enter it in a document yourself, you do so under your own responsibility and within the limits set by Irish law on the use of the PPSN.

Each processing operation relies on a legal basis under Article 6 GDPR:

• Processing and delivering your order, sending the receipt — performance of a contract
• Managing your account and the customer relationship — performance of a contract
• Keeping invoices and accounting records — legal obligation
• Security, fraud prevention and service improvement — legitimate interests
• Marketing communications and non-essential cookies — your consent, which you may withdraw at any time

Your data is never sold. It may be shared with processors acting on our behalf and bound by confidentiality obligations (Article 28 GDPR): PayPal (payments), OVH SAS (hosting within the European Union), our email service provider, technical service providers and audience-measurement providers. Your data may also be disclosed where required by law or at the request of a competent Irish or European authority.

As the publisher, Camines LLC, is established in the United States, some data may be transferred to or accessed from outside the European Economic Area. Such transfers are covered by appropriate safeguards under Articles 44 and following of the GDPR, in particular the European Commission's standard contractual clauses. Hosting takes place within the European Union.

• Account data: up to 3 years after the last activity
• Order and billing data: 6 years (Irish tax and VAT record-keeping obligations)
• Data entered in the questionnaires: for the time needed to supply the document, unless linked to an order
• Marketing data: 3 years from the last contact
• Connection data: 12 months

At the end of these periods, data is erased or anonymised.

We implement appropriate technical and organisational measures (HTTPS/TLS encryption, access control, secure hosting, PCI-DSS compliant payment providers) in accordance with Article 32 GDPR. In the event of a personal data breach likely to result in a high risk to your rights, you will be informed in accordance with Articles 33 and 34 GDPR; where required, the Data Protection Commission will be notified within 72 hours.

Under Articles 15 to 22 GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time.

You can exercise your rights through our contact form; we will reply within one month. You may also lodge a complaint with the Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (dataprotection.ie), or bring proceedings before the competent Irish courts.

Our website uses cookies whose nature, purpose and duration are explained in our Cookie Policy. In accordance with Regulation 5 of the ePrivacy Regulations 2011 (S.I. No. 336 of 2011), non-essential cookies are only set after you have given your consent, which you may withdraw at any time.

The website is not intended for persons under the age of 16, the age of digital consent set in Ireland by section 31 of the Data Protection Act 2018. We do not knowingly collect data from minors without the consent of the person holding parental responsibility.

This policy may be amended at any time; the date of the last update appears at the top of this page. For any question, please write to us through our contact form.