Privacy Policy

Last updated: October 2026

Empowerment Plus CLG, trading as Eplus ("we", "our", "us"), is committed to protecting your privacy. This policy explains how we collect, use, share and protect personal data when you visit www.eplus.ie or contact us through it, and explains your rights under the General Data Protection Regulation (GDPR) and Irish data protection law.

1. Who We Are

EPlus is the controller of the personal data described in this policy.

Empowerment Plus CLG
10 Earlsfort Terrace, Dublin 2, Ireland, D02 T380
Registered Charity No: 19021
CRA No: 20074043
Company No: 461361
Email: contactus@eplus.ie
Phone: 087 901 2324

2. Information We Collect

2.1 Information you give us

Referral updates: Referrals to Eplus currently come through the Social Work Department. If you ask to be notified when we are accepting referrals from parents and guardians, we collect your email address so we can let you know.

Contact and enquiries: Your name, email address, phone number and any information you include in your message.

Feedback: Information you provide when you submit our feedback form.

Job applications: Applications for social care worker roles are made through a Microsoft Forms page, which collects the information requested in the form, such as your name, contact details, qualifications and experience. Applications for other roles are made by email, and we collect whatever information you include, such as your CV and cover letter. Our Recruitment Privacy Notice, available on our Governance page, explains in more detail how we handle applicants' information.

Donations: Donations are processed by Stripe on Stripe's own secure website. We never receive your full card number or security code. Stripe shares with us the information needed to record and acknowledge your donation, such as your name, email address, donation amount, and the type and last four digits of the card used.

2.2 Information collected automatically

With your consent, we use Google Analytics to collect information about how visitors use our website. This includes the pages you visit, how long you stay, the type of device and browser you use, your approximate location and how you arrived at our site. See section 9 for full details of the cookies we use.

3. How We Use Your Information

We use your information to:

  • let you know when we are accepting referrals from parents and guardians, where you have asked us to
  • respond to your enquiries and feedback
  • assess job applications and manage recruitment
  • record and acknowledge donations and meet our financial and legal reporting obligations
  • understand how our website is used so we can improve it, where you have consented to analytics cookies
  • protect our website and forms from spam and abuse
  • comply with our legal and regulatory obligations, including safeguarding and child protection obligations

4. Legal Basis for Processing

We only process your personal data where we have a lawful basis to do so:

Consent: for analytics cookies, for notifying you when parent and guardian referrals reopen, and for any other purpose where we ask for your consent. You can withdraw consent at any time.

Contract: where processing is necessary to take steps at your request before entering into a contract, such as assessing a job application.

Legal obligation: where we must process data to comply with the law, including safeguarding, child protection, employment, tax and charity regulation requirements.

Legitimate interests: where processing is necessary for our legitimate interests, such as responding to enquiries, recording donations and protecting our website from abuse, provided these interests are not overridden by your rights.

5. Who We Share Your Information With

We do not sell, trade or rent your personal data. We share it only where necessary with:

Service providers who process data on our behalf, under contracts that require them to protect it:

  • Webflow, Inc., which hosts our website and stores the information you submit through our forms before it is sent to us by email
  • Microsoft, which provides our email and office systems (Microsoft 365) and our application form for social care worker roles
  • Google, which provides website analytics (with your consent) and spam protection for our forms (reCAPTCHA)
  • Stripe, which processes donations

Statutory agencies, such as Tusla, the HSE and An Garda Síochána, where this is necessary or where we are required by law to do so, including for child protection and safeguarding purposes.

Legal and regulatory authorities, where we are required to by law or need to protect the rights, property or safety of EPlus, the people we support or others.

6. Transfers Outside the European Economic Area

Some of our service providers, including Google, Webflow, Stripe and Microsoft, are based in or connected to the United States. Where personal data is transferred outside the European Economic Area, we make sure it is protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

7. How Long We Keep Your Information

We keep personal data only for as long as necessary for the purposes it was collected for, or as long as the law requires. When deciding how long to keep information, we consider the purpose it was collected for and our legal, regulatory and safeguarding obligations. In particular:

  • Referral update requests: your email address is kept until we have let you know that parent and guardian referrals have reopened, or until you ask us to remove it.
  • Enquiries and feedback are kept for as long as needed to deal with them and any follow up.
  • Job applications: if your application is unsuccessful, we keep it for up to 12 months after the recruitment process ends. If your application is successful, it becomes part of your employee personnel file.
  • Donation records are kept for as long as required for financial and tax purposes, which is generally six years.
  • Website analytics data: Google Analytics keeps detailed activity data for 2 months and user level data for 14 months from your last visit to our website.

When information is no longer needed, it is securely deleted or anonymised.

8. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. Access to the information you send us is restricted to staff who need it to do their work. No method of internet transmission is completely secure, so we cannot guarantee absolute security.

9. Cookies

9.1 What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage, work in a similar way. We refer to all of these as cookies.

9.2 Your choices

When you first visit our website, a banner lets you accept all cookies, allow essential cookies only, or choose which types of cookies to allow. We do not set analytics cookies unless you agree to them.

You can change your choices at any time using the "Cookie settings" button, which stays visible at the bottom of your screen on every page. You can also delete or block cookies through your browser settings, although some parts of the site may not work properly if you block essential cookies.

9.3 Cookies we use

Strictly necessary cookies

These are needed for the website to work and to keep it secure. They cannot be switched off.

CookieScriptConsent is set by CookieScript. It remembers your cookie choices so we don't ask you again on every visit. It lasts for 30 days.

_cfuvid is set by Cloudflare, which provides part of our website hosting. It helps protect the site against excessive or malicious traffic. It is deleted when you close your browser.

Analytics cookies

These help us understand how visitors use our website so we can improve it. They are only set if you consent.

_ga is set by Google Analytics. It distinguishes one visitor from another so we can measure how the site is used. It lasts for 13 months.

_ga_EJSQXPRNB8 is set by Google Analytics. It keeps track of your current visit. It lasts for 13 months.

_gcl_ls is stored in your browser's local storage by Google as part of the Google tag used for analytics. It can be used to measure whether visits came from Google advertising. It is only set if you consent, and it remains until you clear your browser data.

Form protection

Our forms use Google reCAPTCHA to protect against spam and automated abuse. When you tick the reCAPTCHA box on one of our forms, Google sets a cookie called _GRECAPTCHA on its own domain, which lasts for 6 months. Google's use of this information is covered by the Google Privacy Policy policies.google.com/privacy

9.4 External services

When you click to donate, you are taken to a payment page operated by Stripe. When you apply for a social care worker role, you are taken to an application form operated by Microsoft. These services may set their own cookies on their own websites, and these are covered by their own privacy and cookie policies (stripe.com/privacy and privacy.microsoft.com).

10. Your Rights

Under the GDPR, you have the right to:

  • Access a copy of the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data in certain circumstances
  • Restrict how we process your data in certain circumstances
  • Data portability, meaning you can receive your data in a commonly used format or ask us to transfer it to another organisation
  • Object to processing based on our legitimate interests
  • Withdraw consent at any time, where we rely on your consent

Some rights may be limited where we need to keep information for legal, safeguarding or child protection reasons.

To exercise any of these rights, email contactus@eplus.ie. We will respond within one month.

We do not make decisions about you based solely on automated processing.

11. Right to Complain

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
www.dataprotection.ie

12. Third Party Websites

Our website contains links to other websites, including our partners, network memberships and social media pages. We are not responsible for the privacy practices of these websites, and we encourage you to read their privacy policies.

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

14. Contact Us

If you have any questions about this policy or how we handle your data, please contact us:

Eplus, 10 Earlsfort Terrace, Dublin 2, Ireland, D02 T380
Email: contactus@eplus.ie
Phone: 087 901 2324

‍