Last updated: 2 March 2026 | Effective date: 1 January 2026 | Controller: Haybaleman IE
1. Who We Are
Haybaleman IE ("we", "us", "our") operates the website at ie.haybaleman.com. We are the data controller for personal data collected through this website. For GDPR purposes, our establishment is in the European Union and this policy is governed by Irish law and the EU General Data Protection Regulation (GDPR) 2016/679.
2. Data We Collect
We collect personal data in the following circumstances:
- Contact form submissions: Name, email address and message content when you use our contact form.
- Analytics data: IP address (anonymised), browser type, pages visited, time on site, referral source. Collected via Google Analytics 4 with IP anonymisation enabled.
- Cookies: Session cookies (functional), analytics cookies (with consent) and affiliate tracking cookies (disclosed separately).
- Affiliate tracking: When you click an affiliate link, the destination casino may set tracking cookies. We do not control third-party cookie data collection.
3. Legal Basis for Processing
- Consent (Art. 6(1)(a) GDPR): Analytics cookies and non-essential cookies are only set with your explicit consent via our cookie banner.
- Legitimate interests (Art. 6(1)(f) GDPR): Site functionality, fraud prevention and basic analytics to improve editorial quality.
- Contract performance (Art. 6(1)(b) GDPR): Processing contact form submissions to respond to your enquiry.
4. How We Use Your Data
- Responding to enquiries submitted via our contact form
- Analysing site traffic to improve content quality and user experience
- Detecting and preventing spam or fraudulent activity
- Compliance with legal obligations
We do not sell personal data to third parties. We do not use your data for targeted advertising.
5. Cookies
We use the following cookie categories:
- Strictly necessary: Session cookies required for site function. No consent required.
- Analytics (with consent): Google Analytics 4 with IP anonymisation. Tracks page views, session duration, referral sources. You may opt out via the cookie banner or Google's opt-out tool.
- Affiliate tracking: When you click affiliate links, destination sites may set their own cookies. These are governed by the third party's privacy policy, not ours.
6. Third-Party Data Processors
- Google Analytics 4 — Website analytics (data stored in USA under EU-US Data Privacy Framework)
- Cloudflare Pages — Website hosting (data stored in EU data centres where possible)
- Google Fonts — Font delivery (IP address transmitted to Google servers)
7. Data Retention
- Contact form data: Retained for 12 months then deleted
- Analytics data: 14 months (Google Analytics default retention period)
- Server logs: 30 days
8. Your Rights Under GDPR
As an Irish resident, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Correct inaccurate personal data
- Right to erasure: Request deletion of your personal data ("right to be forgotten")
- Right to restrict processing: Request we limit how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for cookie-based processing at any time
To exercise any right, contact us via our contact page. We will respond within 30 days.
9. Complaints
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Data Protection Commission of Ireland:
- Website: www.dataprotection.ie
- Phone: +353 57 868 4800
- Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28
10. Affiliate Disclosure
Haybaleman IE earns affiliate commissions from casino operators when users click our links and register accounts. This commercial relationship does not affect how we handle personal data. We disclose all affiliate links clearly on site. Clicking affiliate links may result in third-party cookies being set; these are governed by the destination site's privacy policy.
11. Children
Our site is intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this privacy policy periodically. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
13. Contact
For any privacy-related queries, please use our contact page and select "General Question" as the subject. We aim to respond within 5 business days.