Privacy policy
Your visit. Your choices.
Useful information should come with clear explanations. Here is what this website keeps in your browser, when it connects to other services and how you can take control.
Prepared & reviewed · 28 October 2026Who looks after your information?
This website is operated for Dundalk Business Improvement District, Dundalk BID CLG. For questions about the website or personal information handled by the BID, contact info@dundalktown.ie, or write to Dundalk BID, Market Square, Dundalk, County Louth.
This notice describes the public application reviewed on 28 October 2026. It covers visitors, people who contact the BID through the website’s contact links, and people whose professional details or photographs appear in its listings and editorial content. Separate booking platforms, venues, transport providers and other linked websites are responsible for their own services and privacy information.
The short version.
- No account needed. You can browse the town, news, events and business information without registering.
- Local choices. Reading settings, your chosen theme, saved places and trail progress are stored on this browser when you use those features.
- No advertising or audience analytics configured by this site. Necessary hosting and error diagnostics are separate, and external services can receive technical requests.
- Maps are a choice. You can switch external map tiles off. Lists, addresses, local boundary images and other text information remain available.
- Email stays an explicit action. Contact and enquiry buttons prepare an email in your chosen mail application. A message is sent only when you send it there.
What information, for what reason?
Personal data can include technical information such as an IP address, as well as a name or email address. We use the relevant GDPR basis for each purpose; reading this policy is not consent to every form of processing.
| Information & source | Purpose & basis | Who is involved |
|---|---|---|
| Request and error data | IP address, page requested, time, browser/device information and error details arise from network requests. Delivery, reliability and security rely on legitimate interests in running a safe, useful website, subject to your rights. | Website hosting, network and relevant technical-support providers. See the service inventory below. |
| Browser preferences & saved visit | Choices and place/stop identifiers provide the reading, display, navigation and planning functions you request. These remain in the browser rather than becoming a visitor account. Non-essential tracking, if introduced, would require a separate choice where applicable. | Your browser; website code running there. See the detailed cookie policy. |
| Enquiries you send | Your name, contact details and message are used to answer you and manage relevant follow-up. The basis is legitimate interests in handling enquiries, steps before a service or contract where applicable, and legal obligations for records that must be kept. | The receiving BID or Tourist Office team and its email/communications provider. A mail link alone does not submit a message. |
| Public business, event & editorial information | Professional names, business contact details, locations, biographies, photographs and attributed public-source information support visitor information and local business discovery. The basis is legitimate interests in maintaining an accurate local directory and editorial resource; consent or other permission may apply to particular supplied material. | The BID, its authorised website maintainers and public visitors. Public content can be indexed by search engines and copied by others. |
Searches, selected categories and map views help the application display matching results. Some selections are part of the page address and can therefore appear in browser history, shared links and technical logs. Do not enter sensitive personal information into a directory search. The application does not ask for live GPS access or upload a personal movement trail.
Providing enquiry details is voluntary. Without a return address or enough context, the team may be unable to answer. You can browse without an account, save nothing, and use text listings with external maps disabled.
The technology behind your visit.
This inventory distinguishes code delivered with the website, browser connections to another provider, and development infrastructure. Using a library or keeping source code on GitHub does not by itself send every visitor to that company.
| Technology / provider | Role & information involved | When involved & your control |
|---|---|---|
| Lovable | The project is connected to Lovable for editing, builds and publication. Existing runtime error hooks can forward an error message, stack, route and technical context when the platform supplies its reporting service. Editor-preview diagnostics are distinct from public audience analytics. Lovable privacy policy ↗ | Development/publication; diagnostics when available and an error occurs. Hosting and diagnostics are not disabled by the map switch. |
| Hosting / network delivery, including the Cloudflare build target | The build configuration supports Cloudflare through Nitro. The actual deployed host and its network/security services deliver pages and assets and may process IP addresses, requested URLs, timestamps, browser details and security/error logs. A build target alone does not establish a provider contract or log-retention period. Cloudflare privacy information ↗ | When the site or its assets are requested. Contact the BID for the current deployment-specific recipient, retention and transfer arrangements. |
| GitHub | Source-code version control and synchronisation with Lovable. Repository material includes website code and published content; maintainer account/commit information is handled by GitHub. Saved visits and browser reading choices are not submitted to the repository. GitHub privacy statement ↗ | Maintenance and publication. The public application has no GitHub login, tracking widget or script loaded from GitHub for ordinary browsing. |
| React, TanStack Start / Router / Query, Vite, Nitro, Tailwind CSS, Radix UI & Lucide | Application rendering, routing, data handling, builds, styles, accessible dialog primitives and icons. Browser libraries are bundled with the website. TanStack’s scroll-restoration entry is listed in the cookie policy. | Site delivery and interaction. These dependencies do not inherently make a visitor connection to their authors’ websites. |
| Locally hosted fonts & media | Anton, Barlow Condensed, Inter and Oswald font files, icons and many optimised photographs are served by this website. Fonts originated from open-source font projects; the visitor does not need to contact Google Fonts to load them. | Page delivery and ordinary browser caching. No remote Google Fonts stylesheet is configured in the public application. |
| Leaflet & OpenStreetMap Foundation | Leaflet is bundled locally. Interactive maps request tiles from tile.openstreetmap.org; the provider receives technical request data and the requested map area. Local GeoJSON and BID boundary artwork are separate. | When an allowed interactive map loads or is panned/zoomed. Disable external map tiles in Cookie settings. See the map details below. |
| Event, venue & image providers | External image URLs can contact Eventbrite’s image host, Wix’s image CDN, Wikimedia, local venues and other providers. IP address and browser/request information are involved in delivering an image. | As a relevant image is requested. The current domain inventory and limitations of the map switch are set out below. |
| Public event & property sources | Eventbrite, Visit Louth, Dundalk.ie, An Táin Arts Centre, Spirit Store, Dundalk Stadium and property agents supply public listing information. Server-side import/refresh jobs obtain published information; they do not forward your browser’s saved visit as part of that import. | Content refresh, independent of your local preferences. A resulting external image or clicked booking link creates a separate browser connection. |
| Google Maps, EPSO, bookings, social platforms & other linked sites | Directions, street-art stories, venue bookings, transport, property details and social posts are reached through ordinary links. A selected place or route may appear in the destination URL. Kamrok’s design credit is also an outbound link, not an embedded tracking SDK. | When you choose a link. The destination controls its own service, storage, account and payment processing. |
| Google Analytics, Google Tag Manager, Google Ads, Meta Pixel & session replay | Not configured in the reviewed application. No GA4 measurement ID or Tag Manager container is installed by this code. | Inactive. See the analytics section; a future integration requires a fresh notice and appropriate consent controls. |
Hosting/platform settings can change independently of source code. If you encounter an unexpected script or cookie on the published domain, contact the BID with the page and observation so it can be checked against this inventory.
Google Analytics and other tracking.
Google Analytics is not currently configured by this public application. Neither are Google Tag Manager, Google Ads conversion tags, Meta Pixel, behavioural advertising or session replay. Google Maps directions links and self-hosted fonts are separate from Analytics.
If measurement is added, its purpose, provider, data categories, recipients, actual retention, international-transfer safeguards and cookie details must be disclosed before activation. Where consent is required, optional tags must wait for an affirmative choice, refusal must remain available and withdrawing consent must be straightforward. Some analytics products can send data without cookies; disabling cookie storage alone is not the same as blocking a script or its network requests.
The cookie policy’s Analytics section explains the difference and marks Google’s example cookie names as inactive. A generic settings button does not authorise trackers added later.
When another service is involved.
Interactive maps
Our interactive maps use locally supplied place or trail information with map tiles from tile.openstreetmap.org. Loading a map sends requests to OpenStreetMap’s infrastructure, which can include your IP address, browser information and the map area requested. This is a map-delivery connection, even if no cookie is set.
Map tiles are allowed by default when you open a map. In Cookie settings, you can switch them off across this site; existing interactive maps are removed and a text panel lets you choose whether to enable them again. The official BID boundary image is hosted locally and remains available. The website does not request your live GPS location.
OpenStreetMap Foundation privacy policy ↗Photographs and media
Many images and fonts are served from this website. Some event, venue or property photographs and business logos can load from their originating provider or image service, including business websites, shopping centres, public business directories, Eventbrite, local event organisers and property-listing providers. Those image hosts receive the technical information needed to deliver the image. Turning map tiles off does not block these separate image requests.
Business images use the supplied external image address where it is suitable, rather than copying every file to this website. Our shared image component uses a no-referrer policy for external images, so it does not send the current page address with those image requests. A labelled illustration or other fallback is shown if an image is unavailable.
Frostival promotional films are hosted on this website and use the browser’s own video player. A video is requested only after you choose a film; it does not load a third-party video-hosting or social-media player. Other videos and event bookings are reached through external links. Opening a link takes you to the provider, where its own privacy choices and policies apply. A provider may use cookies or other tools after you arrive.
External image origins in the reviewed content
The following hosts occur in the current event, business and visitor image datasets. A particular page requests only the images it displays, not every host in this list. Refreshed listings can introduce a new originating image host.
a.mktgcdn.comabclive1.s3.amazonaws.comaidanbrennanjewellers.ieaivendingsolutions.iealanclarkeandco.ieanordmardix.comapcpackaging.ieapply.tesco-careers.comaspiremedia.ieassets-eu-01.kc-usercontent.comassets.gov.ieastorymedia.iebellewlaw.iebkforklifts.comboi-public-assets.s3-eu-west-1.amazonaws.combuildingirelandmagazine.comcathedralrestaurant.iecdn.our.iecdn.prod.website-files.comcdn.sanity.iocdn.shopify.comcdns3.fitfit.fitnesscentretravel.iecertaireland.iecfc.iechristymcgee.comcommons.wikimedia.orgconnected-health.iecrystalclean.ied2egcvq7li5bpq.cloudfront.netdbbd.iedngduffy.iedreambeanscoffee.iedundalkfm.iedundalklighting.iedundalkoil.iedundalkretailpark.iedundalkskillnet.ieduprint.iedurninpumps.iedyn.eu.mktgcdn.comdynl.mktgcdn.comeagleblinds.ieeamonnarthur.ieeirehobbies.comelaveskincare.comentertainment.ieflc.ieflipdish.imgix.netgreenbeanroasters.comheatpumpsireland.iehouseproudfurnishings.myshopify.comi0.wp.comibahstore.comimages.lteplatform.comimages.squarespace-cdn.comimages.teamupstatic.comimg.evbuc.comimg.goldenpages.ieimg.near-place.comimg1.wsimg.comirishtalents.comirishweddingdjs.ieirp-cdn.multiscreensite.comirp.cdn-website.comjoannewoodsbeauty.comjohnmacmahon.comjohnocallaghan.iekmr.ielallyselectrical.ieleavys.ielh3.googleusercontent.comlh5.googleusercontent.comlinktr.eelocalmintweb.blob.core.windows.netmarshesshopping.commartinfoodequip.commccannmotors.iemckennaman.commeasuresoft.commedia.interflora.co.ukmedia.licdn.commediaserver.4pm.iemichaellynchmenswear.iemineshop.eumo-chara.iemulhollandlaw.ienoksauce.comoakgym.ieoffices.ebs.ieolivermatthewsandcompany.ieoptimumresults.ieorielcentre.ieoxigen.iepherr.iephoenixwaste.iepinstripepunk.iepirates-den.comprimary.jwwb.nlptiernansolicitors.compwssigns.comreal-events.ierituals.scene7.comrs-menus-api.roocdn.comseantoreilly.ieseetec.iesherryproperty.ieshoplocaldundalk.iesinnfein.iesiro.ieskipsrus.comsolv-x.comspiritstore.iestafflinerecruit.comstatic.wixstatic.comstauntonofficesupplies.comstorage.googleapis.comswitchforme.iethebanks.euthehomebakery.ietherapieclinic.comthumb.wikimedia.orgupload.wikimedia.orgwww.4ie.iewww.airbound.iewww.ajg.iewww.anpost.comwww.antain.iewww.atamidundalk.comwww.autoyas.comwww.bathroomstore.iewww.bespoketrustees.iewww.brendanreid.iewww.brianberrills.iewww.brubakers.iewww.bsharpmusic.iewww.buildinginfo.comwww.byrneandmaguire.iewww.camile.iewww.casaluna.iewww.catherinefeesolicitors.comwww.cefltd.iewww.cmtsupplies.iewww.constructionireland.iewww.courts.iewww.creggangranite.comwww.curves.euwww.customerperceptions.iewww.customssupport.comwww.cyclecentre.comwww.donnellysurveyors.comwww.dpfservice.iewww.dundalk.iewww.dundalksolicitors.comwww.dundalkstadium.comwww.dundalkwines.comwww.easydry.comwww.employabilitylouth.iewww.energiefitness.comwww.esbnetworks.iewww.essentialmarketing.iewww.fexcocurrency.comwww.franksfurniture.iewww.fresha.comwww.fsl.iewww.gatewayhotel.iewww.genetiqsoftware.comwww.glenart.iewww.glengathouse.comwww.gr8entertainment.iewww.hestiadesign.iewww.hickeyspharmacies.iewww.homecaremedicalsupplies.iewww.idonate.iewww.igbc.iewww.imhotel.iewww.insomnia.iewww.lidl.iewww.localenterprise.iewww.logiconautomation.comwww.louthcoco.iewww.macguill.iewww.malone.iewww.me2you.iewww.mintjewellers.comwww.morancctv.iewww.mullensdundalk.iewww.ortho.iewww.phonealarms.iewww.pizzahutdelivery.iewww.prometric.comwww.pureheat.iewww.svp.iewww.thebusinesscentre.iewww.thehotelimperial.iewww.townglass.iewww.truformlaserdies.comwww.uniquely.iewww.visitlouth.iewww.zoma.ie
Image requests can include IP address, browser information, the image URL and a referrer subject to browser policy. The website declares a strict-origin-when-cross-origin referrer policy, so cross-origin requests normally disclose the site origin rather than the complete page path. Your browser’s settings and a provider’s own cookies can also affect its handling of requests.
Directions, bookings and enquiries
Google Maps, transport planners, ticket platforms, venue websites and property agents are separate services. An outbound link may include the place or route you selected. We do not receive your payment details or booking information simply because you followed one of these links.
If you contact us, or appear in a listing.
If you send an email, the receiving team and its email provider process the name, email address and information you include to answer the enquiry and manage relevant follow-up. Visitor enquiries sent to the Tourist Office address are handled by that team. Please share only what is needed; you do not need to send medical details to request accessibility help.
We use enquiry information to respond to requests and support the BID’s public information and business services, relying on legitimate interests or, where relevant, steps you request before a service or arrangement. Legal obligations may require some correspondence to be kept. We do not turn an enquiry into a marketing subscription through this website.
The directory and editorial pages contain public business contacts, locations and attributed information from published sources or details supplied for the site. Public professional contact information can still relate to a person. Contact the BID if a listing is inaccurate, includes an inappropriate personal contact or needs to be reviewed.
Sources include the council’s published BID documents, business and venue websites, event organisers, public tourism and heritage sources, and information supplied for publication. A listing may identify an individual proprietor, manager, artist or other professional. If information did not come directly from you, you may ask for its source and how it is used. Corrections, objections and removal requests are considered on their circumstances; being publicly available does not remove your data-protection rights.
Authorised BID personnel and website support providers may access information needed to maintain content or resolve an enquiry. Email and hosting providers process the technical information relevant to their service. Disclosure to an authority may be necessary where law requires it or to establish, exercise or defend legal claims. We do not receive your payment or booking details merely because you follow a venue or ticket link.
Accounts, listing access and manual approval.
You do not need an account to browse. If you register, Lovable Cloud stores your account identifier, email address and profile details. Email/password sign-in uses the authentication service; passwords are not shown to site administrators. If you choose Google, Apple or Microsoft, that provider handles its sign-in and shares the identity information needed to create or recognise your account.
Access requests contain your name, business or organisation, your explanation of your connection to a listing, and the request and review dates. Authorised site administrators review these details and assign listing access. Signing in alone grants no listing-management privileges. Please do not send passwords, identity documents or sensitive personal information in a request.
Approved business and individual accounts can propose changes to assigned listings and submit events. Submissions, the submitting account identifier, review notes and review status are stored in Lovable Cloud. Only the account holder and authorised administrators can read private requests and submissions. Listing and event information approved for publication becomes public and may be indexed or copied by others. Never include private contact details in content intended for publication.
Account delivery and requested access rely on the appropriate service or contractual basis where applicable. Access verification, moderation and security rely on legitimate interests in maintaining an accurate, safe directory, subject to your rights. These are human decisions; creating an account does not subscribe you to marketing. Any optional marketing needs its own lawful basis and choices.
Necessary sign-in information is stored in your browser so your session can be maintained. Signing out clears the active sign-in session. Account records and proposals are separate from the saved-visit preferences already described above. The authentication service controls session/token expiry; clearing local browser storage alone does not delete your account.
To request account deletion, access, correction or a review of a decision, contact info@dundalktown.ie. The BID must confirm and document the retention periods for pending and declined requests, inactive accounts, submissions, moderation history and backups, along with processor agreements, actual hosting region and any international-transfer safeguards. No automatic account-retention or deletion schedule is currently configured. This section describes the current account functions, not a legal certification.
Technical requests, security and retention.
Delivering and protecting a website involves technical request data such as IP addresses, requested pages, timestamps, browser information and error details. Hosting and network providers process this information to serve the site, maintain reliability and investigate problems. The purpose is service delivery and security, based on legitimate interests in a reliable website.
Error information can include the page address and a technical error message. In the development/editor preview, platform error-reporting tools can also receive diagnostics. Please do not put sensitive information into search queries, page addresses or error reports.
Browser preferences remain until you change or remove them. Enquiry correspondence is kept for handling the request, relevant follow-up and applicable legal requirements. Hosting and email log retention depends on the actual service and operational need; contact the BID for the current provider-specific details or information about a particular enquiry.
Hosting, email and external-service infrastructure can involve processing outside the European Economic Area, depending on the provider and service. Ask the BID for the current recipient and transfer-safeguard information relevant to your request. We do not promise that every external service stores information only in Ireland.
Retention is specific to the purpose
- Device preferences and saved plans: the durations and removal controls are listed in the browser storage inventory. The application does not set an automatic local-storage expiry.
- Enquiries: the relevant team needs the message while answering and managing follow-up. Any longer retention must relate to an applicable records requirement, complaint, agreement or legal claim. Ask the team for the schedule applying to your correspondence.
- Directory and editorial content: retained while relevant to the public information purpose, with corrections and review when a concern or change is identified. A historical article can remain relevant after a current listing changes.
- Request, security and error logs: retention is determined by the deployed hosting/diagnostic service and operational need. The code alone cannot establish a specific log period or backup-deletion schedule. The BID can provide the current provider-specific position.
International processing and safeguards
Where the BID’s processors transfer personal data outside the EEA, the relevant arrangements must provide an applicable GDPR transfer mechanism, such as an adequacy decision or approved contractual safeguards where appropriate. The mechanism depends on the recipient and actual contract; listing a vendor’s privacy-policy link does not establish which mechanism applies to every request. External linked services also explain their own transfers in their policies.
Keeping information safe
No internet service can promise absolute security. Keep your browser updated and use a device/profile you trust for saved plans. Local visit settings are not a protected account vault. To report a suspected exposure, email the BID with a brief description and page address; do not include passwords, identity documents or a copy of someone else’s sensitive information.
For families, and for every visitor.
This is a public visitor-information website that includes family activities. It does not provide child accounts or intentionally request children’s personal details, and no behavioural advertising is configured. A parent or guardian can contact the BID about a child’s information or image appearing in published material. Please give enough context to identify the content without sending unnecessary personal details.
Directory search, category filters and map selections organise published listings. They are not used to make automated decisions with legal or similarly significant effects about visitors. The application does not create a server-side accessibility, health or advertising profile from the settings you choose.
Your information. Your rights.
Depending on the processing and applicable conditions, you can ask for access to your personal data, correction, erasure, restriction, portability or object to processing. Where consent is used, you can withdraw it without affecting earlier lawful processing. Some rights have exceptions; we may need proportionate information to confirm identity.
Send a privacy request to info@dundalktown.ie with enough detail to identify the information or concern. Requests are normally addressed within one month, subject to applicable legal extensions. Do not send identity documents unless the team explains what is needed.
You can also complain to Ireland’s Data Protection Commission. Its website explains your data protection rights and the routes for raising a concern.
Use the floating cookie icon or “Cookie settings” in the footer on any page. Material changes to the website’s data use should be reflected in this notice and its review date.