Rylax ("we", "us", "our") is a property development management platform operated from Senan House, Wexford, Ireland. We are the data controller for personal data collected through our website at rylax.ie, our platform, and related services.
For any data protection queries, you can contact us at info@rylax.ie.
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU 2016/679) ("GDPR"), the Irish Data Protection Act 2018, and the ePrivacy Regulations (S.I. No. 336 of 2011, as amended).
This policy applies to all personal data collected through:
This policy covers website visitors, platform users (property developers, estate agents, solicitors, portfolio holders), leads captured via QR codes, and anyone who submits an enquiry or contacts us.
| Purpose | Legal Basis (GDPR Article 6) |
|---|---|
| Providing the platform service — managing accounts, enabling property development management features, storing portfolio data | Performance of a contract (Art. 6(1)(b)) |
| Processing demo bookings and sales enquiries — responding to requests submitted via forms and Typeform | Pre-contractual steps at your request (Art. 6(1)(b)) |
| Lead capture and management — collecting and processing leads from QR codes, web forms, and API integrations on behalf of our clients | Legitimate interests (Art. 6(1)(f)) or consent (Art. 6(1)(a)), depending on the context |
| Customer support and communications — responding to your enquiries and providing support | Legitimate interests (Art. 6(1)(f)) |
| Website analytics and improvement — understanding how visitors use rylax.ie | Consent (Art. 6(1)(a)) for analytics cookies |
| Marketing communications — sending emails about Rylax services | Consent (Art. 6(1)(a)) for new contacts; legitimate interests (Art. 6(1)(f)) for existing customers (soft opt-in) |
| Compliance and legal obligations — tax records, regulatory requirements, responding to legal requests | Legal obligation (Art. 6(1)(c)) |
| Security and fraud prevention — protecting the platform and its users | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your rights and freedoms.
Rylax acts in different capacities depending on the context:
We may share personal data with the following categories of recipients:
We do not sell your personal data to third parties.
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity. We will notify affected individuals of any such transfer.
Rylax operates across Ireland, the UK, Europe, and the Middle East. Your personal data may be transferred outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are as follows:
When data is no longer needed, it is securely deleted or anonymised.
Under the GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at info@rylax.ie. We may need to verify your identity before processing your request. We will respond within one month of receiving your request. This period may be extended by a further two months for complex or multiple requests, in which case we will notify you. Requests are free of charge unless they are manifestly unfounded or excessive.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with GDPR Article 32. These measures include:
While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33.
Where a breach is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay, in accordance with GDPR Article 34.
Our website uses cookies and similar technologies. Under Irish ePrivacy Regulations (S.I. No. 336 of 2011, as amended), we obtain your consent before setting any non-essential cookies.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect your experience of our website.
We comply with Irish ePrivacy Regulations (S.I. No. 336 of 2011, as amended by S.I. No. 426 of 2022) in relation to electronic marketing.
Every marketing email includes an unsubscribe mechanism. To opt out at any time, use the unsubscribe link in any email or contact us at info@rylax.ie.
Rylax services are not directed at children. We do not knowingly collect personal data from anyone under the age of 16 (the digital age of consent in Ireland under Section 31 of the Data Protection Act 2018). If we become aware that we have collected data from a child under 16, we will delete it promptly.
Our website may contain links to third-party websites and services (including Typeform). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal data.
Third-party platforms may push enquiry data to Rylax via API on behalf of our clients. In these cases, our clients are responsible for ensuring they have a lawful basis for sharing personal data with us. Our processing of such data is governed by Data Processing Agreements with our clients.
Rylax conducts Data Protection Impact Assessments (DPIAs) where processing is likely to result in a high risk to the rights and freedoms of individuals, in accordance with GDPR Article 35. This includes assessments for large-scale processing of developer portfolio data, QR code lead capture systems, and new third-party integrations.
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority.
Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Phone: +353 (0)1 765 0100 / 1800 437 737
Email: info@dataprotection.ie
Website: www.dataprotection.ie
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
You also have the right to lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
We may update this privacy policy from time to time. Any material changes will be reflected by updating the "Last updated" date at the top of this page. For significant changes, we may also notify you by email where appropriate. We encourage you to review this policy periodically.
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Rylax
Senan House, Wexford, Ireland
Email: info@rylax.ie