Impact Academies & Camps, operated by IMPACT KIDSTECH MC2025 LIMITED (“Impact Academies & Camps”, “Impact A&C”, “we”, “us” or “our”), respects your privacy and is committed to protecting the personal information we process.
This Privacy Policy explains how we collect, use, store, protect and disclose personal data in connection with our website, applications, portals, courses, academies, camps, events and other services.
We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679) (“GDPR”), the Data Protection Act 2018 and applicable Irish electronic communications and ePrivacy requirements.
This Privacy Policy should be read together with our Terms & Conditions and any applicable Cookie Policy, registration forms, consent forms or other privacy notices provided to you.
If you have any questions about this Privacy Policy or how we process personal data, please contact us at:
Email: cork@impactacademiesie.com
Telephone: +353 (85) 110 6075

1. Who We Are
The data controller responsible for the personal data covered by this Privacy Policy is:
IMPACT KIDSTECH MC2025 LIMITED
Trading as Impact Academies & Camps
The Carraig Centre
Old Fort Road
Ballincollig
Cork, Ireland
P31 PV20
Email: cork@impactacademiesie.com
Telephone: +353 (85) 110 6075
Where we use third-party organisations to process personal data on our behalf, those organisations may act as data processors or, depending on the circumstances, as separate data controllers.

2. Personal Data We Collect
The information we collect depends on how you interact with Impact Academies & Camps.
2.1 Parents, guardians and customers
We may collect:

• full name;
• address;
• telephone/mobile number;
• email address;
• payment and transaction information;
• booking and enrolment information;
• information about courses, programmes, camps or services purchased;
• records of communications with us;
• information submitted through enquiry, registration or booking forms;
• information required to manage your account or membership;
• information relating to subscriptions and recurring payments;
• information you choose to provide to us;
• marketing preferences and communication preferences.

Payment card details may be processed by our payment service providers, including Stripe. We do not intend to store complete payment card details ourselves where the payment is processed through the relevant payment provider.
2.2 Children enrolled with Impact Academies & Camps
Because our services may be provided to children and young people, we may collect information relating to an enrolled child, including:

• child's name;
• date of birth;
• gender, where relevant;
• school;
• school year;
• parent/guardian contact details;
• attendance information;
• course or programme information;
• educational information relevant to providing the service;
• information about the child's progress;
• relevant medical, dietary, accessibility, additional-support or educational information where necessary;
• safeguarding information where necessary;
• records of relevant communications concerning the child.

Where we process information concerning a child, we will apply appropriate safeguards and seek information or consent from a parent or legal guardian where required.
Some information concerning a child's health, disability, educational needs or other circumstances may constitute special category personal data under the GDPR. We will only process such information where an appropriate legal condition under applicable data protection law applies.
2.3 Enquiries and communications
If you contact us by telephone, email, website form, social media or another communication channel, we may retain relevant information from the communication so that we can respond to your enquiry, provide our services and maintain appropriate records.
2.4 Staff and applicants
Where relevant to employment or recruitment, we may process information such as:

• name and contact details;
• date of birth;
• employment history;
• qualifications;
• referee details;
• immigration or right-to-work information;
• identification documents;
• payroll and payment information;
• next-of-kin information;
• medical or dietary information where relevant;
• information required for safeguarding and employment purposes;
• Garda Vetting information where legally required;
• other information necessary for recruitment, employment and legal compliance.

Where criminal conviction or offence data is processed, we will do so only where permitted and required by applicable law and with appropriate safeguards.

3. How We Collect Personal Data
We may collect personal data:

• directly from you;
• from a parent or legal guardian;
• when you register for a course, academy, camp or event;
• when you purchase our services;
• when you make an enquiry;
• when you communicate with us;
• through our website or online forms;
• through our booking or payment systems;
• through our applications or portals, where applicable;
• from schools or other organisations where information is provided lawfully and, where required, with appropriate authorisation;
• from service providers supporting our business;
• from third parties where permitted by applicable law.

4. Why We Process Personal Data
We may process personal data for the following purposes:

• providing our courses, academies, camps and other services;
• processing registrations and bookings;
• managing memberships and subscriptions;
• processing payments and recurring payments;
• issuing invoices and receipts;
• communicating with customers and parents/guardians;
• communicating with students where appropriate;
• managing attendance;
• monitoring educational or programme progress;
• providing online sessions;
• managing safeguarding and child-protection requirements;
• responding to enquiries and complaints;
• managing staff and recruitment;
• complying with legal and regulatory obligations;
• maintaining business and financial records;
• protecting our property, systems and people;
• preventing fraud or misuse;
• improving our services;
• managing our website and online systems;
• sending service-related communications;
• sending marketing communications where permitted by law and, where required, with your consent;
• managing photographs, video or other media where appropriate consent or another lawful basis exists;
• exercising or defending legal claims;
• managing corporate or business changes where legally permitted.

5. Legal Bases for Processing
Depending on the circumstances, we may rely on one or more of the following legal bases under the GDPR:
Contract
Processing may be necessary to enter into or perform a contract with you, for example to provide a course, camp, academy programme or other service that you have purchased.
Legal obligation
We may process personal data where necessary to comply with a legal or regulatory obligation.
Consent
We may rely on your consent where consent is required or is the appropriate legal basis.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Legitimate interests
We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
Examples may include managing our business, maintaining records, protecting our systems, improving services, dealing with enquiries and defending legal claims.
Vital interests
In limited circumstances, personal data may be processed where necessary to protect someone's vital interests.
We will not rely on a legal basis that does not apply to the particular processing activity.

6. Special Category Data
Some information we may receive, particularly information relating to health, disability, medical requirements, additional educational needs or safeguarding, may constitute special category data under the GDPR.
We will only collect and process such information where it is necessary and where an appropriate legal condition under applicable data protection law applies.
Examples may include information needed:

• to safely deliver a course, camp or activity;
• to respond appropriately to medical or accessibility requirements;
• to provide reasonable adjustments;
• to protect a child's welfare;
• to meet legal or safeguarding obligations.

We ask parents/guardians to provide only information that is relevant and necessary for the safe and appropriate provision of our services.

7. Payments and Financial Information
We may process information relating to payments, purchases, invoices, subscriptions and transactions.
Where payments are processed through third-party payment providers, such as Stripe, payment information may be processed directly by those providers in accordance with their own privacy policies and terms.
For subscription services, we may receive information necessary to manage the subscription, such as payment status, transaction information, subscription status and relevant payment identifiers.
We may also use accounting providers, including Xero, to maintain financial and accounting records.

8. Recurring Payments and Subscriptions
Where you purchase a subscription or recurring payment product, we will process information necessary to establish and manage that subscription.
This may include:

• customer identification details;
• subscription details;
• payment status;
• transaction records;
• payment method information handled by the payment provider;
• subscription start and cancellation information;
• records of communications relating to the subscription.

Recurring payments are processed through our designated payment provider, including Stripe where applicable.
The recurring payment arrangements are explained at checkout and in our Terms & Conditions.

9. Marketing Communications
Where permitted by law, we may communicate with you about our courses, academies, camps, events, services and offers.
Marketing communications may be sent by:

• email;
• SMS;
• WhatsApp;
• telephone;
• other electronic communication methods where permitted.

Where consent is required, we will obtain appropriate consent before sending electronic direct marketing.
You can object to direct marketing at any time, and where you object to direct marketing we will stop using your personal data for that purpose as required by applicable law.
Service-related communications, such as booking confirmations, payment notifications, important programme information, safety communications or other communications necessary to provide a service you have requested, may continue where necessary.

10. SMS and WhatsApp Communications
Where you provide your mobile telephone number and opt in to receive SMS or WhatsApp communications, we may use that number to send:

• booking and registration information;
• programme reminders;
• schedule updates;
• important service notifications;
• customer support messages;
• promotional communications where legally permitted and appropriately consented to.

Message frequency may vary.
Standard charges imposed by your mobile or telecommunications provider may apply.
You may opt out of marketing communications at any time by contacting us or using the unsubscribe/opt-out mechanism provided in the relevant communication.
Where technically supported, you may also use “STOP” or another provided opt-out instruction for SMS marketing.
Opting out of marketing will not necessarily stop essential service-related communications.

11. Photographs and Video
We may take photographs or record video during activities, courses, camps, events or programmes.
Where required, we will obtain the appropriate consent before using identifiable photographs or video for promotional, marketing, website, social media or other public-facing purposes.
Where you have provided consent, you may withdraw that consent for future use by contacting us.
Withdrawal of consent does not affect the lawfulness of use that occurred before withdrawal.

12. Sharing Personal Data
We may share personal data where necessary and lawful with:

• payment service providers;
• accounting providers;
• IT and software providers;
• website and hosting providers;
• booking and registration providers;
• communication providers;
• email and marketing providers;
• video-conferencing providers;
• cloud storage providers;
• professional advisers;
• insurers;
• legal advisers;
• auditors;
• government authorities and regulators;
• safeguarding or child-protection authorities where appropriate;
• schools or educational organisations where lawful and necessary;
• other service providers supporting the operation of Impact Academies & Camps.

We do not sell personal data as a business practice.
We will only disclose personal data where there is an appropriate legal basis and where the disclosure is relevant to the purpose for which the data is being processed or otherwise permitted by law.

13. Third-Party Service Providers
We may use third-party providers to support the operation of our business.
Depending on the services we use, these may include:
Marketing and communications

• Meta;
• X / Twitter;
• Campaign Monitor;
• WhatsApp.

Analytics and website services

• Google Analytics;
• Tilda.

Online classes and meetings

• Webex;
• LogMeIn;
• Bomgar;
• Zoom.

Student and business information

• Google Drive;
• Kommo.

Payments and accounting

• Stripe;
• Xero.

Safeguarding and vetting

• National Vetting Bureau / Garda Vetting services, where applicable.

Payroll

• our external accountant or payroll provider.

The actual providers used by Impact Academies & Camps may change from time to time.
We will only list or use providers that are actually relevant to our current operations.
Where third-party providers process personal data on our behalf, we seek to ensure that appropriate contractual and security arrangements are in place.
Third-party providers may also have their own privacy policies and terms, which may apply to their processing of personal data.

14. International Transfers
Some third-party service providers may process or store personal data outside Ireland or the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that appropriate safeguards are in place where required.
Depending on the circumstances, safeguards may include an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.

15. Children's Personal Data
We provide services to children and young people and recognise that children's personal data requires particular care.
We aim to:

• collect only information that is relevant and necessary;
• explain processing in clear language;
• involve parents or legal guardians where appropriate;
• apply appropriate security measures;
• limit access to personal information to people who need it;
• use children's information only for appropriate and lawful purposes;
• comply with applicable safeguarding and data protection requirements.

Parents and legal guardians may contact us regarding the exercise of data protection rights relating to a child's information, subject to applicable law and the child's own rights.
The Data Protection Commission recognises that children merit specific protection in relation to the processing of their personal data.

16. Security of Personal Data
We take reasonable and appropriate technical and organisational measures to protect personal data against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• disclosure;
• misuse.

Where appropriate, information may be protected through access controls, passwords, encryption, secure systems, backups and restricted access.
Physical documents containing personal data will be stored securely and, where no longer required, securely disposed of.
No internet-based transmission or storage system can be guaranteed to be completely secure. However, we take reasonable steps to reduce the risks associated with the processing of personal data.

17. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required or permitted by applicable law.
Different categories of information may have different retention periods.
For example, information may need to be retained for:

• the duration of a customer's relationship with us;
• the period necessary to provide the relevant service;
• accounting and tax purposes;
• legal or regulatory requirements;
• safeguarding purposes;
• resolving disputes;
• establishing or defending legal claims;
• maintaining appropriate business records.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.
Because retention requirements can vary depending on the type of information, we may determine retention periods using applicable legal requirements, business requirements, the purpose of processing and the risk associated with retaining the information.

18. Your Data Protection Rights
Depending on the circumstances and subject to applicable legal limitations, you may have the following rights:
Right of access
You may request a copy of personal data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
You may ask us to delete personal data in certain circumstances.
This right is not absolute. For example, we may need to retain certain information where we have a legal obligation or another lawful basis to do so.
Right to restriction
You may ask us to restrict processing in certain circumstances.
Right to object
You may object to certain processing, including direct marketing.
Where you object to direct marketing, we will stop processing your personal data for that purpose as required by applicable law.
Right to data portability
In certain circumstances, you may request that personal data you provided to us is transferred to you or another organisation in a structured, commonly used and machine-readable format.
Right to withdraw consent
Where we process your information on the basis of consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect processing carried out before the withdrawal.

19. Exercising Your Rights
To exercise any of your data protection rights, please contact:
Email: cork@impactacademiesie.com
We may need to verify your identity before completing a request.
We will normally respond to a valid data protection request within one month of receiving it.
Where permitted by law, this period may be extended where a request is particularly complex or where multiple requests have been made. Where an extension applies, we will inform you of the reason.
We do not normally charge a fee for exercising your GDPR rights. However, applicable law permits charges in limited circumstances, such as where requests are manifestly unfounded or excessive.

20. Direct Marketing Opt-Out
If you no longer wish to receive marketing communications from us, you may:

• use the unsubscribe link in an email;
• follow the opt-out instructions in an SMS;
• contact us at cork@impactacademiesie.com;
• contact us using another method provided by Impact Academies & Camps.

You may continue to receive essential service-related communications where necessary to provide a service you have purchased or requested.

21. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as:

• essential website functionality;
• remembering preferences;
• website performance;
• analytics;
• measuring website traffic;
• social media functionality;
• marketing or advertising, where applicable.

Where consent is legally required, we will request consent before placing or using the relevant cookies or tracking technologies.
The Data Protection Commission states that consent is normally required for cookies and similar technologies unless a specific exemption applies, such as technologies that are strictly necessary for a service explicitly requested by the user.
Analytics cookies generally require consent in Ireland.
Where we use a cookie consent mechanism, users should be able to make appropriate choices about non-essential cookies and withdraw or change their consent.
Please refer to our Cookie Policy for further information.

22. Third-Party Websites and Social Media
Our website may contain links to websites, applications or services operated by third parties.
This Privacy Policy applies to personal data processed by Impact Academies & Camps. It does not apply to the privacy practices of third-party websites or services.
We recommend that you review the privacy policies of third-party websites before providing personal information to them.
If you interact with our social media pages or with social-media features integrated into our website, the relevant social media provider may also process your personal data under its own privacy policy.

23. Data Received from Third Parties
We may receive personal data from third parties where lawful and necessary.
Examples may include:

• parents or legal guardians;
• schools;
• educational organisations;
• service providers;
• payment providers;
• professional advisers;
• safeguarding organisations;
• government bodies or authorities.

Where required by GDPR, we will provide appropriate information about the processing of personal data that we receive from sources other than the individual concerned.

24. Legal and Regulatory Disclosures
We may disclose personal data where we are legally required or permitted to do so.
This may include disclosures:

• to courts;
• to law enforcement authorities;
• to government departments;
• to regulatory authorities;
• to child-protection or safeguarding authorities;
• to professional advisers;
• to insurers;
• where necessary to establish, exercise or defend legal claims;
• where necessary to prevent or investigate fraud or unlawful activity.

Any disclosure will be limited to what is necessary and lawful in the circumstances.

25. Business Transfers
If Impact Academies & Camps or IMPACT KIDSTECH MC2025 LIMITED is involved in a merger, acquisition, restructuring, sale of assets or other business transfer, personal data may be transferred where legally permitted and where appropriate safeguards are in place.
Where required by law, affected individuals will be provided with appropriate information about such changes.

26. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:

• changes in our services;
• changes to the way we process personal data;
• changes to our service providers;
• changes in applicable law or regulatory guidance;
• changes to our website, applications or systems.

The current version will be published on our website.
Where we make a material change that significantly affects how we process personal data, we will provide additional notice where required.

27. Complaints
If you have a concern about how we process your personal data, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.
Email: cork@impactacademiesie.com
You also have the right to lodge a complaint with the Data Protection Commission (DPC), which is the Irish supervisory authority for data protection matters.

28. Child Safeguarding and Welfare Concerns
Where a concern relates specifically to the safety or welfare of a child, the appropriate safeguarding or child-protection reporting procedures should be followed.
Where appropriate, concerns may be reported to Tusla – Child and Family Agency or another relevant authority.
Tusla information and contact details should be obtained from its current official sources, as contact arrangements may change.

29. Contact Us
If you have any questions about this Privacy Policy, our processing of personal data, or your data protection rights, please contact us:
IMPACT KIDSTECH MC2025 LIMITED
Trading as Impact Academies & Camps
Email: cork@impactacademiesie.com
Telephone: +353 (85) 110 6075
Postal Address:
The Carraig Centre
Old Fort Road
Ballincollig
Cork, Ireland
P31 PV20

30. Effective Date
This Privacy Policy is effective from 24 September 2026.
We recommend reviewing this Privacy Policy periodically to ensure that you are aware of how Impact Academies & Camps processes personal data.