1. Who We Are — Data Controller 

Slí Nua Careers Ltd is the Data Controller responsible for your personal data. We are registered in Ireland and operate the website www.slinua.org. 

Legal name  : Slí Nua Careers Ltd 

Registered office : Co. Mayo, Ireland 

Website :  www.slinua.org 

Privacy contact : admin@slinua.org 

Supervisory authority : Data Protection Commission (DPC), Ireland — www.dataprotection.ie 

This Privacy Policy applies to all personal data collected through: 

• The Slí Nua website (www.slinua.org) 

• Our career writing services, including Alex:  the AI-powered Career Writing Assistant 

• Email, phone, and other direct communications 

• Third-party platforms through which we deliver services 

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a minor, please contact us at admin@slinua.org and we will delete it without delay. 

3.1 Data You Provide Directly 

• Name, email address, phone number, and postal address 

• Career information: CV, cover letter, personal statements, work history, qualifications 

• Communications you send us via contact forms, email, or phone 

• Marketing consent preferences 

3.2 Data Collected Automatically 

• Website usage data via analytics tools (pages visited, time on site, device type) 

• IP address and browser user agent string (for security and spam detection) 

• Cookies — see Section 7 for full details 

3.3 Data from Third Parties 

We may receive data from social media platforms, advertising networks, analytics providers, and payment processors. Any such data is handled in accordance with this policy. 

3.4 Special Categories of Data 

We do not intentionally collect special category data as defined under GDPR Article 9 (such as health, disability, racial or ethnic origin, or religious beliefs). If you voluntarily include such information in documents you share with us, we will treat it with heightened confidentiality and process it solely for the purpose you have provided it. 

Under GDPR Article 6, we process your personal data on the following lawful bases:

• Responding to enquiries and delivering services: we process your data on the basis of performance of a contract (Art. 6.1.b), as this is necessary to fulfil the service you have requested from us.
• CV and career writing services: processing is carried out on the basis of performance of a contract (Art. 6.1.b), as it is necessary to deliver the career writing or coaching service agreed with you.
• Sending marketing communications: we rely on your consent (Art. 6.1.a). You may withdraw this consent at any time by contacting us or using the unsubscribe link in any marketing email.
• Website analytics and performance monitoring: we process data on the basis of our legitimate interests (Art. 6.1.f) in understanding how our website is used and improving the experience we offer to visitors.
• Compliance with legal obligations: certain processing is necessary to meet our legal obligations under Irish and EU law (Art. 6.1.c), including obligations under tax, employment, and data protection legislation.
• AI-assisted processing (Alex): depending on the context, processing may be based on legitimate interests (Art. 6.1.f) in providing an enhanced service, or on your consent (Art. 6.1.a) where applicable.
• Fraud prevention and security: we process data on the basis of our legitimate interests (Art. 6.1.f) in protecting our services, our users, and our systems from misuse, fraud, or security threats.

• To deliver career writing and coaching services you have requested 

• To respond to your enquiries and communicate with you 

• To send marketing communications, where you have given consent 

• To improve and personalise your experience on our website 

• To analyse website usage and enhance our services 

• To comply with legal and regulatory obligations 

• To detect and prevent fraud, spam, or misuse 

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

• Enquiry and contact form data is retained for 12 months from the date of last contact, after which it is securely deleted unless a service relationship has been established.
• Client service records are retained for 6 years in line with statutory requirements under Irish law, including obligations arising from contract and employment legislation.
• Financial and billing records are kept for 7 years in accordance with the requirements of the Revenue Commissioners and the Companies Act.
• Marketing consent records are retained for the duration of your consent, plus one additional year following withdrawal, to demonstrate compliance in the event of a complaint or audit.
• Website analytics data is retained for 26 months, in line with standard analytics platform defaults, after which it is aggregated or deleted.
• Website comments and associated metadata are retained indefinitely to support automated spam detection and to allow us to recognise and approve follow-up comments without holding them in a moderation queue.
• Alex (AI Assistant) session data is not retained beyond the duration of your session. Any files or content processed during a session are discarded once the session ends, unless explicitly downloaded by you.
• User profile data for registered users is retained for as long as your account remains active. You may request deletion of your account and associated data at any time by contacting us at admin@slinua.org.

Cookies are small text files placed on your device when you visit our website. We use cookies to ensure the website functions correctly and to understand how visitors use our site.

7.1 Consent

When you first visit www.slinua.org, you will be asked to consent to non-essential cookies via our cookie banner. Essential cookies, which are required for basic site functionality, do not require your consent. You may withdraw or manage your consent at any time through our cookie settings panel.

7.2 Cookies We Use

• We use a session cookie to manage your login session for the duration of your visit; this is essential to the functioning of the site and expires when you close your browser. Similarly, WordPress display preference cookies (wp-settings-*) are set to remember how you prefer to view the site and are retained for one year; these are also essential.
• When you leave a comment on the site, a comment opt-in cookie may be saved to store your name, email address, and website for your convenience, so you do not need to re-enter these details next time. This cookie lasts for one year and is non-essential. A login cookie is set when you log into your account, lasting two days under normal circumstances or fourteen days if you select the “Remember Me” option; this cookie is essential for maintaining your logged-in state.
• We also use two Google Analytics cookies which are non-essential and require your prior consent. The _ga cookie collects anonymised usage statistics and is retained for 26 months. The gid cookie tracks session-level activity and expires after 24 hours. Both can be declined via our cookie banner without affecting your ability to use the site.

We work with trusted third-party service providers who process personal data on our behalf. All sub-processors are bound by data processing agreements and are required to protect your data in accordance with GDPR.

OpenAI provides the AI platform through which our career writing assistant, Alex, operates. Data is processed in the United States, and this transfer is governed by Standard Contractual Clauses (SCCs) as approved by the European Commission.

Google LLC provides our website analytics service (Google Analytics), enabling us to understand how visitors use our site. Data is processed in the United States under Standard Contractual Clauses (SCCs).

Automattic / Gravatar is used to display profile images alongside comments left on our website. Data is processed in the United States and the transfer is covered by Standard Contractual Clauses (SCCs).

Our website hosting provider is responsible for the infrastructure on which www.slinua.org operates. Details of the provider, their location, and the applicable transfer safeguards will be updated in this section shortly.

Our email and marketing platform is used to manage and send marketing communications to users who have given their consent. Details of the provider, their location, and the applicable transfer safeguards will be updated in this section shortly.

If you would like further information about any of our sub-processors or the safeguards in place for international data transfers, please contact us at admin@slinua.org.

Some of your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. Such transfers are made only where appropriate safeguards are in place, specifically Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR Article 46. 

You may request a copy of the safeguards applicable to your data by contacting us at admin@slinua.org. 

As a data subject under GDPR, you have the following rights in relation to your personal data.

• Under your Right of Access (Art. 15), you may request a copy of all personal data we hold about you at any time, along with information about how and why we process it.
• Your Right to Rectification (Art. 16) allows you to request the correction of any personal data we hold that is inaccurate or incomplete, ensuring your information is kept up to date.
• The Right to Erasure (Art. 17) — sometimes referred to as the “right to be forgotten” — entitles you to request the deletion of your personal data where there is no compelling reason for us to continue processing it.
• Your Right to Restrict Processing (Art. 18) means you can ask us to limit how we use your data in certain circumstances, for example while the accuracy of the data is being contested or an objection is being considered.
• The Right to Data Portability (Art. 20) allows you to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Under your Right to Object (Art. 21), you may object at any time to processing carried out on the basis of our legitimate interests, including profiling, or to the use of your data for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Your Right to Withdraw Consent (Art. 7) applies wherever our processing is based on your consent. You may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Finally, you have the Right to Lodge a Complaint with Ireland’s supervisory authority, the Data Protection Commission (DPC), if you believe your data has been processed unlawfully or that your rights have not been respected. The DPC can be contacted at www.dataprotection.ie.

How to Exercise Your Rights 

Submit your request in writing to: admin@slinua.org. We will respond within 30 days of receiving your request, in line with GDPR Article 12. There is no charge for exercising your rights. If your request is complex or numerous, we may extend this period by a further 60 days, and will notify you accordingly. 

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals, as described under GDPR Article 22. 

We may use automated tools and analytics to improve our services, personalise content, and deliver relevant communications. These processes are advisory only and do not override your rights. You may opt out of such processing where applicable. 

Alex, our AI-powered Career Writing Assistant, does not make automated decisions with any legal or significant effect on users. All outputs are advisory, require human review, and are entirely subject to the user’s own discretion. 

We employ industry-standard security measures to safeguard your personal data against unauthorised access, disclosure, alteration, and destruction. These include: 

• Encryption of data in transit and at rest 

• Firewalls and intrusion detection systems 

• Access controls limiting data to authorised personnel only 

• Regular security reviews and staff training 

• Data Processing Agreements with all third-party processors 

In the event of a personal data breach, we have established procedures to promptly identify, contain, and mitigate the breach. Our response protocol includes: 

• Notifying the Data Protection Commission (DPC) within 72 hours where required under GDPR Article 33 

• Notifying affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms (GDPR Article 34) 

• Investigating the cause of the breach and implementing measures to prevent recurrence 

• Providing support to affected individuals as appropriate 

We will only add you to our marketing database with your express prior consent. Every marketing communication we send will include a clear and easy means to unsubscribe or withdraw consent. We do not share your contact information with third parties for marketing purposes. 

15.1 Comments 

When you leave a comment on our website, we collect the data shown in the comment form, along with your IP address and browser user agent string for spam detection. An anonymised hash of your email address may be shared with the Gravatar service to display a profile image. 

15.2 Media Uploads 

If you upload images to the website, you should remove any embedded location data (EXIF GPS) before uploading. Visitors to the website may be able to extract location data from uploaded images. 

15.3 Embedded Content 

Pages on this site may include embedded content from third-party websites (such as videos or social media). Embedded content behaves as if you visited the originating website directly and may collect data, use cookies, and track your interaction. 

• What Alex Does 

Alex is an AI-powered career writing assistant developed by Slí Nua Careers Ltd to help users craft CVs, cover letters, LinkedIn profiles, and personal statements. 

• Anonymisation Requirement 

To protect your privacy, all material provided to Alex must be fully anonymised before use. We do not collect, transmit, or process any personally identifying information through Alex, including names, addresses, contact details, employer names, dates, or locations. 

Users are responsible for ensuring all input to Alex is anonymised or fictionalised before submission. 

• What Alex Processes 

Alex may temporarily process the following types of anonymised input during a session: 

• Job titles, experience summaries, and career goals 

• Educational background, skills, and industry context 

• Uploaded sample documents (for content structure or tone reference only) 

• Data Retention for Alex 

No personal information is stored, retained, or shared beyond the session. Uploaded files are processed temporarily and are not saved after your session ends unless explicitly downloaded by you. 

• 16.5 Third-Party Platform 

Alex operates through OpenAI’s platform. For details on how OpenAI processes data, please refer to OpenAI’s Privacy Policy at: https://openai.com/privacy 

•  No Automated Decisions 

Alex does not make automated decisions with legal or significant effects on any user. All outputs are advisory and subject entirely to the user’s own judgement and review. 

Privacy Enquiries 

Email: admin@slinua.org 

Website: www.slinua.org 

Data Protection Commission (DPC) — Ireland 

You have the right to lodge a complaint with Ireland’s supervisory authority at any time: 

Website: www.dataprotection.ie 

Telephone: +353 (0)57 868 4800 

Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland 

We may update this Privacy Policy periodically to reflect changes in our services, legal obligations, or best practice. The version history table at the top of this document records all changes. We encourage you to review this policy periodically. 

Last updated: March 2026   |   Version 2.0