Privacy & data

Privacy Policy

Read the policy, legal and data-handling information that applies to CRI Ireland and the company directory.

This Privacy Policy explains how CRI Ireland handles information connected with the website, directory, contact forms, registration enquiries, user access and optional analytics. CRI Ireland is an independent company-information directory and not the Companies Registration Office or a Government of Ireland service.

Information shown in the company directory

Company profiles may display information derived from public company-register datasets, including company names, company numbers, status, legal type, registration dates, registered-office information and activity classifications where those fields are present in the imported source. CRI normalises source data before presentation and removes known placeholder or malformed values.

Information you provide to CRI

When you use a contact form, registration enquiry, access request or other interactive feature, CRI may process the information you submit, such as your name, email address, telephone number, company name, CRO number, business enquiry and message. We use that information to respond to the request, administer the service, prevent abuse and maintain records of legitimate business enquiries.

Technical and security information

Hosting, WordPress, security tools and server logs may process technical data including IP address, browser information, device information, timestamps, requested URLs and security events. This information can be necessary to deliver the site, investigate abuse, protect accounts and diagnose technical faults.

Cookies and analytics

Essential cookies may be used for security, WordPress functions, form processing or account sessions. Optional analytics should only be enabled in accordance with the visitor’s consent choice where consent is required. See the Cookie Policy for the current categories and preference controls.

Sharing and service providers

CRI may use hosting, email, security, analytics or technical service providers to operate the website. Information is shared only to the extent reasonably necessary for the service being provided or where required by law. CRI does not treat the public company-directory dataset as a list of private subscriber information.

Retention

Contact and business-enquiry information may be retained for as long as reasonably necessary to handle the enquiry, maintain business records, protect the site or satisfy legal obligations. Technical logs are retained according to the configuration of the hosting and security services in use.

Your choices

You can use the cookie-settings control to revisit optional cookie choices. You can contact CRI about information you submitted through the website or about CRI editorial information. A request to change official company-register data may need to be directed to the authority that owns the original register.

Security

CRI uses reasonable technical and organisational measures appropriate to the website. No internet service can guarantee absolute security. Do not send passwords, payment-card numbers or unnecessary sensitive personal information through a general contact form.

Changes to this policy

The policy may be updated when site functionality, service providers or legal requirements change. The current published version applies from the date shown on the page.

Legal bases and purpose limitation

CRI processes information for defined purposes connected with operating the website, responding to enquiries, maintaining security, providing account functionality and managing legitimate business relationships. Where consent is the appropriate basis for optional technologies, the visitor should be able to make a meaningful choice. Where processing is necessary to provide a requested service, such as submitting a contact form or maintaining a logged-in session, the service may need to process the relevant data in order to function.

CRI should not collect personal information merely because it may be useful later. Forms should request only the information reasonably needed for the stated purpose. If a new feature requires additional categories of personal data, the privacy information should be updated before or when that feature is introduced.

Public company data and personal information

Company-register datasets can contain information that relates to identifiable people in a professional or statutory context. CRI treats such information differently from private account credentials or contact-form messages. Public register information is displayed for company research and directory purposes, while private submissions are handled as service communications. The existence of a value in a public source does not mean CRI should republish every possible detail without considering relevance, accuracy and the purpose of the directory.

Data requests and corrections

If you contact CRI about information you personally submitted, provide enough detail to identify the relevant account, form submission or correspondence. If you contact CRI about a company page, include the company name and CRO number. CRI can correct its own editorial layer and presentation. If the disputed value comes directly from an official source dataset, the official record may need to be corrected first or a refreshed dataset may need to be imported before CRI can reflect the change.

International services and processors

Some hosting, email, security, analytics or technical suppliers may process information outside Ireland or the European Economic Area depending on the final production configuration. The site owner should review the contracts, data-processing terms and transfer mechanisms of any such supplier. This policy describes the intended CRI approach but should be kept aligned with the actual services enabled on the live site.

Children and sensitive information

CRI is a business and company-information service and is not designed to collect information from children. General enquiry forms should not be used to submit health information, government identifiers, passwords, payment-card numbers or other highly sensitive personal data unless a specific secure workflow has been created for that purpose.

Contacting CRI about privacy

Privacy questions can be submitted through the Contact page. Explain the nature of the request and provide a reliable contact email. CRI may need to verify identity before responding to a request involving private account information. Requests concerning official company-register records may need to be referred to the authority responsible for those records.