Privacy Statement

Last updated: June 2025

Your privacy, trust, and support are of utmost importance to Merchants Quay Ireland (MQI). This Privacy Statement explains how we collect, use, and protect your personal data when you interact with us via our website, social media, or other platforms.

Who We Are

Merchants Quay Ireland (MQI) (“we” or “us”) is the Data Controller for personal data processed through this website.
We are registered with:

Companies Registration Office: Company No. 176421
Charities Regulatory Authority: Charity No. 20026240
Revenue Commissioners: CHY No. 10311

Contacting Us

For questions about this Privacy Statement or how your data is handled, please contact our Data Protection Officer (DPO) at: 📧 patrice.osullivan@mqi.ie

You also have the right to lodge a complaint with the Data Protection Commission (DPC) via www.dataprotection.ie. We do ask that you contact us first so we can try to resolve any concerns directly.

Data Protection Commitment

We take our responsibility to protect your data seriously. We will not collect personal information without your knowledge and consent. All data is handled in line with:

General Data Protection Regulation (GDPR) 2016/679
ePrivacy Regulations S.I. 336/2011
Data Protection Acts 1988–2018

Your personal data will only be used for the stated purposes and any reasonable, related purposes.

When using data for research or statistical purposes, we apply safeguards such as pseudonymisation, data minimisation, and access controls, in line with Article 89 GDPR.

What Personal Data We Collect

We may collect the following information:

Name, date of birth, postal address, email address, phone number
Payment details (e.g. credit/debit card)
Interactions with MQI (donations, emails, calls, forms, etc.)
Information submitted when donating, applying for jobs, requesting information, volunteering, fundraising, completing surveys, or entering competitions.

Technical Data Collected via Website

We collect non-identifiable data such as:

IP address
Browser type and operating system
Referring website and search terms
Pages visited, duration, and files downloaded (via Google Analytics)

We do not attempt to identify individual visitors or link technical details to any person. Data is only used for statistical and administrative purposes and is not shared with third parties, except for our service providers bound by confidentiality.

Why We Process Your Personal Data

We use your data to:

Respond to queries
Process donations (via Stripe)
Claim tax relief from Revenue
Personalise our services to you
Administer your job application
Provide fundraising or donation updates (with your consent)
Analyse anonymised data to improve services
Contribute pseudonymised or anonymised administrative data to statistical or research projects in the public interest (e.g. the EU Homelessness Count), where permitted by law and subject to appropriate safeguards and a compatibility assessment

Marketing Communications

We may contact you about MQI’s activities, appeals, and how your donations help. We will always ask for your consent first. You can opt out at any time by emailing fundraising@mqi.ie.

Legal Bases for Processing Your Data

We process data under one or more of the following legal grounds:

Consent – e.g. marketing communications
Legitimate Interests – e.g. to respond to queries
Legal Obligation – e.g. CHY3 tax forms
Contractual Obligation – e.g. processing job applications
Public Interest – where processing is necessary for tasks carried out in the public interest, including contributions to research and policy development
Research Purposes – where special category data is processed for scientific or statistical research under Article 9(2)(j) GDPR, subject to appropriate safeguards as outlined in Article 89

Sharing Your Information

We never sell or rent your personal data. We only share it:

When legally required
With trusted partners (e.g. payment processors, IT support, mailing services) under strict contracts and data protection agreements
With trusted research partners (e.g. Focus Ireland) for scientific or statistical research purposes, using only anonymised or pseudonymised data, and with safeguards in place to protect your rights. Any such sharing is subject to a compatibility assessment under GDPR

What is Pseudonymisation?

Pseudonymisation is a process that replaces identifying details (e.g. names or full dates of birth) with a code, so that individuals cannot be directly identified. The key to reverse the code is kept separately and securely. This reduces the risk to individuals if data is used for research.

Automated Decision-Making and Profiling

MQI does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Petitions via Website or Social Media

By signing a petition with us, your full name may be shared with the target of the action (via email or printed delivery).
If you sign via Meta’s lead form, your email may also be added to our list and you may receive a follow-up call. You can opt out at any time by contacting fundraising@mqi.ie.

Data Security

We use physical, electronic, and managerial safeguards to protect your data, such as:

Secure servers and SSL encryption
Access limited to authorised personnel
Secure destruction of data when no longer needed

Despite these efforts, no internet transmission is 100% secure. Data shared with us is done at your own risk, and we are only responsible for data once received.

International Data Transfers

In rare cases, your data may be processed outside the EEA. This only occurs with appropriate safeguards in place, such as:

An EU adequacy decision
Standard Contractual Clauses (SCCs)

Children’s Data

This website is not intended for children under 16. If you are under 16, you must have parental/guardian consent before submitting personal data.

Communication Preferences

You can change how we contact you at any time by calling (01) 524 0139 or emailing info@mqi.ie. Email messages include an unsubscribe or preference link.

Social Media

We manage pages on Facebook, Twitter/X, Instagram, LinkedIn and YouTube. This Privacy Statement only applies to how MQI uses data from these pages—not how social media platforms themselves collect and process data. Please refer to each platform’s privacy policies.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites.

Your Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict or object to processing
Data portability (receive your data in a common format)

To exercise these rights, contact our DPO at patrice.osullivan@mqi.ie. We may request photo ID for verification purposes. This ID is not stored and will be securely destroyed once verification is complete.

Data Retention

We only retain personal data for as long as necessary for the purposes outlined above or as required by law.

Cookies

You can set your browser to refuse cookies or alert you to their use. Some site features may not function properly if cookies are disabled. For full details, please refer to our Cookie Policy.

Use of CCTV

CCTV monitoring is in place at MQI locations for the safety of staff, service users, and visitors. Signage is clearly displayed, and all footage is handled in line with our CCTV Policy.

Governing Law and Jurisdiction

This Privacy Statement and all related matters are governed by Irish law and subject to the jurisdiction of the Irish courts.

Changes to this Statement

We may update this Privacy Statement occasionally. Any updates will be posted on this page and, where appropriate, communicated by email.

📅 Last updated: June 2025