Data Protection Notice
Effective Date: [01.01.2025]
Last Updated: [27.06.2026]
This Data Protection Notice is a short summary of how Caron Training and Consulting Limited collects and uses your personal information. The detail behind each section below is set out in our full Privacy Notice.
Who we are:
We are Caron Training and Consulting Limited, the data controller for your personal information. We are regulated by the Central Bank of Ireland.
Address: 35 Windfield Gardens, Clybaun Road, Knocknacarra, Galway. H941 YNA0Phone: 087 6486081Email: James.Caron@carontraining.com
Data protection queries: James.Caron@Carontraining.com
What information we collect and why
To advise you, arrange a product for you and meet our regulatory duties, we collect information such as your contact details, date of birth, PPS number, employment and financial details, health and lifestyle information (where relevant to the product), claims history and details of anyone you wish to insure or name as a beneficiary.
Our legal basis
We use your information on the following GDPR bases:
To perform the contract for the service you have asked for.To meet legal and regulatory duties — including anti-money-laundering and sanctions checks (Criminal Justice (Money Laundering and Terrorist Financing) Act 2010), the Fact Find / Know Your Customer requirements of the Central Bank's Consumer Protection Code (revised 2025, effective 24 March 2026), the Insurance Distribution Regulations 2018, and Revenue and tax obligations.With your consent — for example, for certain health information, criminal-record checks or sending you marketing.For our legitimate interests — for example, preventing fraud, improving our service and managing our business.Where we process special-category data (such as health information) for insurance or pension purposes, we rely on Section 46 of the Data Protection Act 2018 and the safeguards it requires.Who we share your information with
We only share your information where we need to, including with insurers and product providers, credit and identity-verification agencies, fraud-prevention services, medical professionals (for claims or health-related quotes), our IT, payroll and other service providers, legal advisers, auditors, and regulators (including the Central Bank of Ireland, the Revenue Commissioners and the Data Protection Commission).
Where any of these are based outside the European Economic Area (for example, certain cloud providers), we use the safeguards set out in our Privacy Notice — typically an European Commission adequacy decision (including the EU–US Data Privacy Framework for certified US providers) or Standard Contractual Clauses.
We do not sell your information to anyone.
How long we keep your information
We keep records for at least six years after the end of our relationship with you (Central Bank requirements and the Statute of Limitations), and at least five years for anti-money-laundering records under the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010. Some records are kept longer where required by law or where a claim, complaint or legal matter is open. Our full Retention Schedule is available on request.
Your rights
You have the right to access, correct, restrict, port, erase or object to the processing of your personal information. Where we rely on your consent, you can withdraw it at any time — for marketing, every email contains an unsubscribe link. If a decision about you is made solely by automated means you can ask for a human review, give us your point of view, and challenge the decision.
To exercise any of these rights, contact us using the details above. We will respond within one month.
Third-party rights against insurers
Under Section 21 of the Consumer Insurance Contracts Act 2019, a third party who has suffered a loss covered by your liability insurance may, in certain circumstances, have your rights under the policy transferred to them and may seek information about the policy from us. We must respond to such requests within 28 days.
Concerns and complaints
If you have any concerns about how we have handled your information, please contact us first at James.Caron@Carontraining.com or 087 6486081. You may also complain to the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02
Phone: 01 765 0100 / lo-call 1800 437 737
Email: info@dataprotection.ie
Web: www.dataprotection.ie
More information
Full details — including categories of information we collect, recipients, transfers, automated decision-making, children’s information and our cookies — are in our Privacy Notice and Cookie Policy.
Notice last reviewed 27/05/2026