Privacy Policy

This policy explains how Shannon Coiled Springs Ltd (SCS) handles the personal information you share with us. SCS is the data controller for that information.

We are based at Crossagalla Industrial Estate, Ballysimon Road, Limerick, V94 F5X7, Ireland. For anything to do with your data, or this policy, contact us at sales@scspring.ie or +353 61 311 666.

We keep the personal data we collect to what an enquiry actually needs. In practice that is:

• Contact details, the name, company, email address and phone number you enter into a contact or enquiry form, or send us by email.
• Enquiry content, the specification, drawing, quantities or message you send so we can quote or answer.
• Technical data, basic, largely anonymous information your browser sends when you visit (such as approximate location and pages viewed), used only to keep the site working and secure.

We do not ask for special-category data, and we ask that you don’t send it. Please don’t include payment-card or financial details in a form or email.

Under the GDPR we have to tell you the lawful basis on which we process your information, not just what we do with it. For this site there are two, and which one applies depends on why you got in touch.

• Steps prior to entering a contract, and performance of a contract (Article 6(1)(b)). When you send an enquiry, a drawing or a specification, we handle it in order to quote and, if it goes ahead, to supply.
• Legitimate interests (Article 6(1)(f)). Keeping a record of enquiries so we can answer follow-up questions, and keeping the site secure and working. We have weighed this against your interests and it is limited to what running a B2B engineering enquiry actually needs.

We do not rely on consent for enquiries, so declining optional analytics does not affect your enquiry in any way. Where you do give consent, for the optional analytics counter, you can withdraw it at any time.

Concretely, when you submit a form on this site:

• The details are sent to SCS over an encrypted connection.
• They are emailed to the SCS sales team, and stored as a record in the website’s own administration area so an enquiry cannot be lost if an email fails.
• If you attached a drawing or specification, it travels with that email. It is not published anywhere and is not indexed by search engines.
• You receive an automatic acknowledgement confirming we have it.
• Your IP address is recorded with the enquiry. It is used to limit automated abuse of the form, not to profile you.

There is no automated decision-making and no profiling. A person reads every enquiry.

Under the GDPR we rely on the following lawful bases:

• To respond to your enquiry and quote, on the basis of taking steps at your request before entering a contract, and our legitimate interest in running the business.
• To fulfil an order and stay in touch about work in progress, on the basis of performing our contract with you or your employer.
• To meet legal and quality obligations, for example traceability and record-keeping tied to our ISO 13485 quality system.
• To keep the website secure and improve it, on the basis of our legitimate interest, balanced against your privacy.

We do not sell your data. We do not make automated decisions about you that have any legal or similarly significant effect. We do sort incoming enquiries automatically, by the market and the level of detail you have given, purely so the right engineer sees yours first. A person reads every enquiry.

We share personal data only where it’s needed to do the job you’ve asked for or to run the business responsibly:

• Trusted service providers who host our systems or handle email on our behalf, under contract.
• Couriers and logistics partners, where despatch of an order requires it.
• Google. Three separate things, and they are not the same:
  • Google Analytics receives visit and page data.
  • Our sales spreadsheet is hosted on Google Workspace, so the enquiry you send us, including its message, is stored there as our own record.
  • If you accept advertising cookies, Google Ads receives a one-way scrambled (hashed) version of your email address and phone number so we can tell which of our adverts led to your enquiry. The scrambling happens in your browser, Google never receives the plain values, and none of this happens at all if you decline advertising cookies.
  • If you accept advertising cookies and came to us from one of our adverts, the phone number shown on this site may be a Google forwarding number. It rings us as normal. Google then tells us the call came from an advert, when it was made, how long it lasted and the caller’s area code, but not who you are.
• Our marketing automation provider receives your contact details, your enquiry and your IP address, so that the right person is alerted and your enquiry is not lost in an inbox.
• Professional advisers, or authorities, where the law requires us to disclose.

Any such provider may only use the data to deliver their service to us, not for their own purposes.

We are based in Ireland and keep data within the EEA wherever we can. If a provider we use processes data outside the EEA, we ensure an appropriate safeguard is in place, typically an adequacy decision or the European Commission’s Standard Contractual Clauses.

We keep personal data only as long as needed for the purpose it was collected, and to meet our legal, accounting and quality-record obligations, after which it is deleted or anonymised. Specific retention periods are being finalised as part of our records policy and will be stated here once confirmed.

Under the GDPR you have the right to:

• Ask for a copy of the personal data we hold about you.
• Have inaccurate data corrected, or incomplete data completed.
• Ask us to erase your data, or to restrict how we use it, in certain circumstances.
• Object to processing carried out on the basis of our legitimate interests.
• Ask us to port data you gave us to another provider, where that right applies.

To exercise any of these, email sales@scspring.ie. We will respond within one month. There’s no charge for a reasonable request.

This site carries no social media pixel and sells no personal data. It uses Google Analytics to understand which pages people find useful, and Google Ads to see which of our adverts lead to a real enquiry. Both set cookies, both share your visit with Google, and both are off until you allow them in the cookie banner. Every item stored, Google’s included, is named and explained with its lifetime in our Cookie Policy.

The cookie settings link in the footer controls SCS’s own event counter. Google Analytics currently loads whichever answer you give it; blocking storage in your browser will stop it. The site works either way.

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to the people who need it. No transmission over the internet is ever completely secure, but we take the security of your information seriously.

We may update this policy from time to time. The current version always lives at this address, and the “last reviewed” date above reflects the most recent change.

If you have a question, or want to make a request, contact us at sales@scspring.ie or +353 61 311 666.

You also have the right to complain to the Irish supervisory authority, the Data Protection Commission, though we’d appreciate the chance to put things right first.