Privacy Policy
Privacy Policy
Last updated: September 2026
Forestall Risk Management Ltd respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, make an enquiry or otherwise interact with Forestall.
1. Who we are
Forestall Risk Management Ltd (“Forestall”, “we”, “us” or “our”) is an Irish risk, resilience, crisis management and business continuity consultancy.
For the purposes of applicable data protection law, including the EU General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018, Forestall Risk Management Ltd is the data controller in respect of personal data processed for its own business purposes.
If you have any questions about this Privacy Policy or how we use your personal data, please contact:
Email: info@test.forestall.ie
Website: www.forestall.ie
2. Personal data we may collect
The personal data we collect depends on how you interact with us.
It may include:
- your name, job title and organisation;
- business contact details, including email address and telephone number;
- information you provide when contacting us or making an enquiry;
- correspondence and records of our communications with you;
- information required to provide, manage or invoice for our professional services; and
- limited technical information generated when you use our website, such as IP address, browser or device information and website usage information where this is collected through our website or permitted analytics tools.
We may also obtain professional contact information from publicly available sources, professional networks, referrals or business contacts where appropriate.
We do not seek to collect personal data through this website that is unnecessary for our business activities.
3. How and why we use personal data
We may process personal data to:
- respond to enquiries and communicate with you;
- discuss, develop and provide our professional services;
- manage our relationships with clients, prospective clients, suppliers, associates and other professional contacts;
- administer contracts, projects, payments and invoicing;
- maintain appropriate business and financial records;
- operate, secure and improve our website and IT systems;
- maintain the security and integrity of our business;
- communicate relevant information about Forestall and our services where appropriate; and
- comply with legal, regulatory, taxation and other obligations applicable to our business.
We will only use personal data where we have a lawful basis for doing so.
Depending on the circumstances, our lawful basis may be:
Contract – where processing is necessary to enter into or perform a contract with you.
Legitimate interests – where processing is necessary for the legitimate operation, development, security or administration of our business, provided those interests are not overridden by your rights and interests.
Legal obligation – where we are required to process information to comply with applicable law.
Consent – where we have specifically asked for and received your consent. Where processing is based on consent, you may withdraw that consent at any time.
4. Business communications and marketing
Forestall primarily operates on a business-to-business basis.
We may communicate with existing clients, prospective clients and professional contacts about Forestall’s services or matters relevant to our professional activities where we have an appropriate lawful basis to do so.
Where consent is required for a particular communication, we will seek that consent.
You may ask us at any time not to send you marketing communications by contacting info@test.forestall.ie or by using any unsubscribe facility provided with the communication.
5. Sharing personal data
We do not sell personal data.
We may share personal data where reasonably necessary with organisations or individuals that support our business, such as:
- IT, website hosting and technical service providers;
- professional advisers, accountants and other business service providers;
- consultants, associates or subcontractors engaged in delivering our services;
- clients or project partners where this is necessary for an agreed service or project; and
- public authorities, regulators, law enforcement bodies or other parties where disclosure is required by law.
Where another organisation processes personal data on our behalf, we require appropriate data protection and confidentiality arrangements.
6. International transfers
Some technology or service providers may process or store information outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, Forestall will ensure that an appropriate lawful transfer mechanism and safeguards are in place where required by data protection law.
7. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, contractual, accounting and business requirements.
Retention periods vary according to the nature of the information and our relationship with you.
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of as appropriate.
8. Security
Forestall takes reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
Access to personal data is limited to those who require it for legitimate business purposes.
No method of electronic transmission or storage can be guaranteed to be completely secure. We therefore regularly review our arrangements and take reasonable measures appropriate to the nature of the information we hold.
9. Cookies and website analytics
Our website may use cookies and similar technologies that are necessary for the website to operate and, where enabled, to understand how visitors use the site.
Non-essential cookies, including analytics or similar technologies where applicable, will be used in accordance with applicable consent requirements.
You can manage your cookie preferences through the cookie controls provided on the website and through your browser settings.
Further information about the cookies currently used by the Forestall website should be provided through our website cookie notice or cookie preference tool.
10. Your data protection rights
Subject to the circumstances and applicable data protection law, you may have the right to:
- obtain information about how we process your personal data;
- request access to your personal data;
- have inaccurate or incomplete personal data corrected;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing, including direct marketing;
- receive certain personal data in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a data protection supervisory authority.
These rights are subject to the conditions and exemptions provided by law and do not apply in every circumstance.
To exercise your rights or ask a question about your personal data, contact us at info@test.forestall.ie.
We may need to verify your identity before responding to a request.
11. Complaints
If you have concerns about how Forestall processes your personal data, we would encourage you to contact us first so that we can address the matter.
You also have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
www.dataprotection.ie
12. Children
Forestall’s website and professional services are intended for business and professional users and are not directed at children.
We do not knowingly seek to collect personal data relating to children through this website.
13. Third-party websites
Our website may contain links to websites operated by third parties.
Forestall is not responsible for the privacy practices or content of those websites. We recommend reviewing the privacy information provided by the relevant third party when leaving our website.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, technology, services or legal obligations.
The current version will be published on this website, and the date of the latest update will be shown at the top of the policy.
Last updated: September 2026