Effective date: 28 August 2026
Who controls personal data
This website is operated by Shane Hatton under the Bosco’s Garden name. Shane Hatton is the data controller for personal data collected directly through this website. Privacy enquiries and requests may be sent to info@boscosgarden.com.
Information collected without optional consent
The website and its hosting and security services may process limited technical information needed to deliver and protect the site, such as IP address, requested page, date and time, browser or device information, and security events. This processing is based on Shane’s legitimate interests in operating a secure and reliable website. Strictly necessary storage may be used where required to provide a service requested by the visitor.
If a visitor submits a contact form or sends an email, Bosco’s Garden processes the information supplied, such as name, email address and message, to answer the enquiry and take requested pre-contractual steps. Messages are kept only as long as reasonably necessary for the enquiry and any related legal, accounting or record-keeping requirement.
Optional analytics
Google Analytics 4 is used only after a visitor selects the Analytics option. The legal basis is consent under Article 6(1)(a) GDPR and the applicable Irish ePrivacy rules. Analytics remains completely off before consent or after rejection.
When enabled, Analytics may process page views, session and engagement information, referral source, approximate location, and browser or device characteristics. Bosco’s Garden does not intentionally send names, email addresses or other directly identifying information to Google Analytics. Google states that it does not log or store IP addresses for users in the European Union.
| Cookie | Purpose | Default duration |
|---|---|---|
_ga | Distinguishes visitors for statistical measurement. | Up to 2 years, subject to browser limits. |
_ga_<container-id> | Maintains Google Analytics session state. | Up to 2 years, subject to browser limits. |
The GA4 property is configured with Google Signals off, user-provided data collection off, granular location and device collection off, advertising personalisation disallowed in all regions, and optional Google account data-sharing settings off. Event-level data associated with identifiers is retained for 2 months. User data is retained for 14 months and the retention period does not reset on new activity. Aggregated standard reports may be retained separately by Google.
Optional external media
YouTube videos and Google Maps are blocked until a visitor separately selects External media. If enabled, Google or YouTube may receive the visitor’s IP address, browser or device information, the referring page and interaction information, and may set or read cookies according to their own services and policies. This processing is based on consent. Visitors can use the rest of the site without enabling external media.
Consent choices and withdrawal
Analytics and External media are separate, optional choices and neither is preselected. The choices are stored in the visitor’s browser using local storage until they are changed or the browser data is cleared. Consent may be changed or withdrawn at any time through the persistent Privacy settings button. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Recipients and international transfers
Personal data may be processed by service providers that support website hosting, security, email delivery and the services a visitor chooses to enable. Google Ireland Limited and relevant Google group companies provide Google Analytics, YouTube and Google Maps. Some providers may process information outside Ireland or the European Economic Area. Where required, transfers are made using an applicable adequacy decision, the European Commission’s standard contractual clauses or another lawful safeguard. Further information is available in Google’s Privacy Policy and Google’s Data Processing Terms.
Individual rights
Subject to the GDPR and any applicable exceptions, individuals may request access to their personal data, correction, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing relies on consent, consent may be withdrawn at any time. Requests may be sent to info@boscosgarden.com. Identity may need to be verified before a request is completed.
Individuals also have the right to complain to the Irish Data Protection Commission. Information and contact details are available at dataprotection.ie.
Automated decisions and sale of data
Bosco’s Garden does not use website information for decisions producing legal or similarly significant effects, does not sell visitors’ personal data, and does not use Google Analytics for personalised advertising.
Changes to this notice
This notice may be updated when the website or its services change. The effective date above identifies the current version.