Directory privacy notice
How we collect, publish and protect business details in the Irish Jewellery Trade Directory.
Version 1, October 2026. This notice covers the directory only. The main JMS Dev Lab privacy policy covers the rest of the website.
Who runs the directory
The directory is run by John Moore, trading as JMS Dev Lab, Cork, Ireland ("we"). We are the data controller for the details held in it. Contact: [email protected].
What we hold
- Published listing details you choose to give us: business name, skills and services, county and town, who you work for, a short description, and optionally a website, a public phone number and a public email address.
- Private contact details: your name and the email you use to confirm and manage the listing. These are never published.
- Consent record: when you agreed, which version of the consent wording you saw, and when you confirmed your email address.
If you are a sole trader or partnership, your business details can identify you, so we treat all of them as personal data.
Where the details come from
Most listings are added by the business itself. We may also prepare a draft listing using only details a business already publishes on its own website or public business listings. A draft listing is never published. We email the business once, at the address it publishes for business enquiries, to ask whether it wants to be listed. That email links to this notice and says where we found the details. If you don't confirm, the draft is deleted after 60 days. If you say no, it is deleted at once and we won't contact you about the directory again.
Why we use it, and our legal basis
- Publishing your listing: your consent (GDPR Article 6(1)(a)). Nothing is published until you tick the consent box, confirm your email or your invitation, and we check the listing.
- Holding a draft listing and sending the single invitation: our legitimate interest in building a useful trade directory, balanced against yours (Article 6(1)(f)). We limit this to details you already publish, one email to your published business address, and deletion after 60 days. You can object at any time.
- Sending you edit and remove links, and service messages about your listing: needed to run the listing you asked for.
- Occasional directory news (no more than four a year): only if you tick that separate box. Untick it, or reply "stop", at any time.
Who else sees it
Published listing details are public on jmsdevlab.com, so anyone can see them, including search engines. We use these service providers to run the directory: Cloudflare (website hosting and database) and Resend (sending emails). They act only on our instructions. Some of their systems are outside the EU; where that happens, transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell or rent directory data, and we don't share the private contact details with anyone.
How long we keep it
- Live listings: for as long as the listing is live, until you remove it.
- Submissions whose email address is never confirmed: deleted after 30 days.
- Draft listings we prepared that are never confirmed: deleted after 60 days. If you decline, the draft is deleted at once. We then keep only a one-way scrambled (hashed) copy of the email address for three years, so that we never invite you again.
- Listings we decide not to publish: deleted after 30 days.
- Removed listings: all business and contact details are deleted immediately. We keep only the page address, so that it can't reappear, and the dates consent was given and withdrawn (no contact details), for three years.
Your rights
You can see, correct, download or delete your details, withdraw consent, or object, at any time. The quickest way to edit or remove your listing is the edit or remove page. Removal takes effect immediately: your listing page is taken down at once and your listing stops showing in the directory, and it is deleted from the directory's saved pages at the next update. For anything else, email [email protected]; we reply within one month. Withdrawing consent doesn't affect anything we did before you withdrew it.
You can also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, dataprotection.ie.
Accuracy
Businesses write their own listings. We check each one for obvious errors and abuse before it goes live, but we don't vouch for any business, and a listing isn't an endorsement.