Legal information
Privacy notice
How MyParty.ie uses and protects personal data for its directory, supplier accounts, contact services and optional analytics. Effective 4 August 2026.
- Version
- 2026-08-04.v2
- Next review
- 2026-11-02
- Directory boundary
- Supplier listings use public business information and link directly to supplier websites. Booking and payment take place with the supplier, not MyParty.ie.
Who operates MyParty.ie
MyParty.ie is operated by Mindaugas Rimkus trading as Unified Networks, Irish registered business name number 790195. This operator is the data controller for the platform. Use the MyParty.ie contact and rights form for privacy questions or requests. The form routes privately and does not publish its destination.
What this notice covers
The service is a nationwide Irish party-supplier directory. Visitors can discover suppliers and contact them directly. Adult supplier representatives can register, claim or submit a listing and propose changes. MyParty.ie moderates those proposals. The platform does not currently process bookings, consumer payments, reviews, marketing subscriptions or consumer accounts.
Data, purpose and basis assessment
| Activity and minimum data | Purpose | Assessed basis |
|---|---|---|
| Public browsing: requested route and ordinary hosting/security metadata | Deliver and secure the requested page | Legitimate interests in operating and protecting the service |
| Supplier-hosted catalogue image: requested image URL, IP address, request time and ordinary browser/network information received by the supplier website or its image host | Display a reviewed equipment image from its recorded public source without MyParty.ie copying or storing the image | Legitimate interests in presenting a useful and accurate directory, subject to source, privacy and suppression checks |
| Optional analytics after acceptance: page path, public category/county/supplier references, action type, broad device, country and acquisition information; no submitted form text | Understand organic discovery and which directory pages and direct-supplier actions are useful | Consent, which can be withdrawn through Privacy choices |
| Supplier account: adult name, email, credential hash, session, MFA and security state | Create and secure the requested account and supplier relationship | Steps toward/performance of the supplier service contract; legitimate interests for security and abuse prevention |
| Claim or listing proposal: supplier relationship, proposed business facts and proportionate verification evidence | Confirm authority, prevent takeover, moderate accuracy and keep an audit trail | Contract steps and legitimate interests in directory accuracy, fraud prevention and legal claims |
| Contact or support: name, email, relationship, topic, optional listing reference and message | Answer and evidence the request | Legitimate interests or contract steps, depending on the request |
| Privacy, correction or removal request: the contact fields above, request type, status and minimum verification | Identify, assess, answer and evidence a rights or accuracy request | Legal obligation where data-protection law applies; legitimate interests for business-listing accuracy and dispute handling |
| Security/audit: opaque account, session, supplier or request references, controlled event/result codes and timestamps | Detect abuse, investigate incidents, enforce decisions and protect legal claims | Legitimate interests and applicable security/legal obligations |
MyParty.ie does not use analytics consent as a condition for ordinary browsing, account, security or rights processing. The optional choice is separate, specific and as easy to withdraw as to give.
Public supplier information and sources
Public profiles are intended to contain reviewed business facts such as trading name, service categories, service area, business contact route, website and supplier-provided descriptions. Sole-trader, home-location or named-contact details can still be personal data. Every real source or batch must be recorded, assessed and linked to a transparency, correction and suppression process before publication. MyParty.ie will not infer coverage, insurance, safety, availability, price or certification.
Some public catalogue pages may load a reviewed equipment image directly from the supplier's public website or its documented image host. The visitor's browser then requests that image from the external host, which receives the requested image URL, IP address, request time and ordinary browser or network information. MyParty.ie does not intentionally include account details, form content, analytics identifiers or the referring MyParty.ie page in that request.
Supplier-hosted image delivery is part of the requested public page, not optional analytics, and does not depend on the visitor's analytics choice. MyParty.ie records the public source and review evidence but does not copy or cache the image. A reference is suppressed if its source, content or rights checks fail, and a rights, privacy or removal report causes takedown first while the issue is reviewed. The external supplier or image host controls its own server records and may host them outside the European Economic Area.
Who receives data
Access is limited to the operator and authorised platform administrators for a recorded purpose. Hostinger provides hosting and database infrastructure. Resend receives the destination address and minimum service message needed for account verification, security and request delivery. Advisers, insurers, law enforcement, courts or regulators receive information only when necessary and lawful. Private requester, credential, evidence, source and moderation data is never part of a public listing.
If optional analytics is accepted, Google Ireland Limited provides Google Analytics and receives the limited analytics information described above. Google Analytics is configured without advertising, personalised signals, User-ID or user-provided data. MyParty.ie also keeps privacy-minimised first-party action totals on Hostinger.
On catalogue pages that use a supplier-hosted image, the relevant supplier website or its documented image-delivery provider receives the limited technical request information described above. This happens independently of Google Analytics and is not used by MyParty.ie to measure the visitor.
Resend dispatches MyParty.ie email through its Ireland region, while account data, email metadata, logs and API records may be stored in the United States. MyParty.ie relies on Resend's data-processing addendum and incorporated Standard Contractual Clauses for applicable transfers and reviews its subprocessor list.
Retention
| Record | Target deletion or review |
|---|---|
| Unverified registration and verification tokens | Delete within 7 days of expiry |
| Sessions, reset and invitation tokens | Expire at their configured limit; delete token rows within 30 days |
| Active supplier account and membership | Keep while active; review and minimise within 30 days of approved closure |
| General contact/support content | Delete or anonymise 12 months after closure |
| Rights, correction, removal, claim and appeal case | Delete private content 24 months after final closure unless a documented dispute or legal hold requires a reviewed extension |
| Security and controlled audit records | Review at 12 months; delete or pseudonymise by 24 months unless needed for an active incident, abuse pattern or legal claim |
| First-party analytics actions and daily aggregates | Delete raw actions after 14 days and aggregates after 400 days |
| Google Analytics reporting data | Retain event-level reporting data for 14 months |
| Suppression marker | Keep the minimum pseudonymous marker while the relevant source remains in use; review every 24 months |
| Deleted data in production backups | Isolate from normal use and expire within 35 days under the final production backup schedule |
These periods apply unless a documented legal hold, unresolved request, security incident or legal claim requires a reviewed extension. Requester content is erased automatically at expiry while the minimum non-content audit record follows its own schedule.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may complain to the Irish Data Protection Commission. Use the contact form and choose the privacy-rights topic. MyParty.ie will acknowledge, record and normally answer a rights request within one month. A permitted extension of up to two further months will be explained before the first month expires.
Identity evidence is not requested by default. If there are reasonable doubts, MyParty.ie will ask only for proportionate evidence and will not accept passwords or unnecessary identity-document copies through the ordinary form.
You can read the Data Protection Commission’s rights guidance.
Security, incidents and automated decisions
MyParty.ie uses access controls, MFA for privileged users, encrypted transport, private/public data separation, bounded input, rate limits, immutable audit and tested backup/recovery controls. No security measure removes all risk. Every suspected personal-data breach is recorded and assessed. A breach presenting risk is notified to the Data Protection Commission within 72 hours where required; affected people are informed without undue delay where high risk is likely.
MyParty.ie does not make solely automated decisions producing legal or similarly significant effects. Public results use declared filters and neutral ordering. Supplier restrictions, claims, corrections and publication decisions require controlled human review.
Changes and complaints
Material changes receive a new version and review date. The notice available when data is collected is recorded with the request or account. Contact MyParty.ie first if possible so the issue can be investigated, but this does not limit your right to contact the Data Protection Commission.