Glenveagh logo
Customer site
Home
About us

What we do

Investors

Sustainability

Corporate news

Careers

Glenveagh logo
  • Customer site
  • NUA Manufacturing
  • About us
  • What we do
  • Investors
  • Sustainability
  • Corporate news
  • Careers

Shareholder Privacy Notice

Glenveagh Properties plc and its subsidiaries, (together “Glenveagh”, “the Group”, “us”, “we” or “our”), is the Data Controller, operate Glenveagh websites, and has created this privacy notice to demonstrate our firm commitment to privacy and it sets out how we collect and use personal data on our websites.

About this Notice

This Privacy Notice explains how we collect, process and protect your personal data in connection with your shareholding and interactions with us as a shareholder. Please read this Notice carefully. If you have any questions about this Notice, please contact us using the contact details below.

This Notice sets out detailed information regarding our privacy practices in respect of personal data relating to all our shareholders. For the purposes of this Notice, “personal data” includes any information about identified or identifiable natural individuals. The Notice applies to all shareholders whose personal data we process in connection with the maintenance of our statutory registers, minute books, and other corporate governance records required under Irish company law, such as shareholder registers. Where shares are held by a corporate entity, this Notice does not apply to that entity. While Glenveagh's shareholder base is primarily comprised of corporate investors, we also have a small number of individual shareholders to whom this Notice applies.

We may update this Privacy Notice from time to time. When required by applicable privacy laws, we will notify you of any changes to this Notice by posting an update on our website and/or seek your consent before making material changes to the way we handle personal data previously collected from you. This Notice was last amended on 6 August 2026.

Your Data Controller

This Notice is provided by your data controller. Your data controller is Glenveagh Properties plc.

Glenveagh Properties plc is the Data Controller of your personal data for the purposes of this Notice. Our registered office is located at Block C, Maynooth Business Campus, Straffan Road, Maynooth, Co. Kildare, Ireland.

Personal Data We Collect About You

We collect personal data about you in connection with your shareholding and our statutory record-keeping obligations. This includes personal identification information such as your name and home address.

Glenveagh only collects personal data that is strictly necessary for legitimate business purposes, including:

  • Personal Identification: Full name and contact details, including home address.
  • Shareholding Information: Share trading history (i.e., number of shares bought or sold).

How We Collect Your Personal Data

We collect personal data about you directly from yourself.

We collect personal data directly from you when you acquire, hold, transfer, or otherwise manage shares in Glenveagh, or where you provide information in connection with your shareholding.

How We Use Your Personal Data

We process your personal data to comply with our legal obligations to maintain Group statutory registers, minute books, regulatory records and filings as a public listed company.

We may use your personal data in the following ways:

  • To maintain our shareholder statutory register: As a public listed company, we are required by Irish company law to maintain a register of shareholders. The register must be completed for registration of a share interest. Without this information, we cannot meet our statutory obligations, and your shareholding cannot be registered.
  • To comply with other legal and regulatory requirements: As a public listed company, we are subject to a wider range of legal and regulatory obligations,including securities exchange, residency, revenue, tax, anti-money laundering, and other legal provisions. In certain circumstances, we may need to process shareholder information to comply with these obligations.
  • To communicate Group and governance activities to you: In order to communicate with you we need to maintain contact details for you or your appointed agents.

Lawful Bases We Rely on to Process Your Data

In processing your personal data for the purposes set out in this Notice, Glenveagh relies on the necessity of the processing to comply with its legal obligations.

We rely on the following lawful bases for processing your personal data:

  • To comply with a legal or regulatory obligation to which we are subject.

How We Share Your Personal Data

We may share your personal data with Glenveagh subsidiaries and affiliates, third-party suppliers, service providers, regulatory bodies and other government agencies.

We may disclose your personal data with the following categories of recipients:

  • Glenveagh subsidiaries and affiliates: We may share your personal data within our group of companies, which includes parents, corporate affiliates, subsidiaries, business units and other companies that share common ownership, for the purposes, and relying on the lawful bases set out in this Notice. This includes our Corporate Governance office.
  • Third party goods and service providers: We may share your personal data with third parties working on our behalf to facilitate our interactions with you or to support our relationship with you, including technology product and professional service providers, such as audit firms.
  • Regulatory bodies and other government agencies: We may share your personal data with regulatory bodies and/or other government agencies to comply with the law or legal requirements applicable to us.

International Transfers of Personal Data

In some instances, we may need to transfer your personal data to another jurisdiction for processing. Where data is transferred outside the European Economic Area (EEA), we implement appropriate legal mechanisms to ensure that it remains adequately protected upon reaching its destination, as required by applicable privacy laws.

While Glenveagh primarily processes and stores personal data within the EEA, some of the technology providers we use process or host personal data in the United Kingdom (UK), which benefits from an adequacy decision adopted by the European Commission.

How Long We Keep Your Personal Data

The length of time for which we retain personal data will depend on the nature of the information, the purpose for which it is processed, and any legal, regulatory, or contractual requirements that apply. We are under a legal obligation under Irish company law to retain shareholder information indefinitely, for as long as we remain an active company. Once the applicable retention period has expired, and unless continued retention is required or permitted by law, we securely delete, anonymise, or otherwise dispose of the personal data in accordance with our retention protocols.

Your Rights and How to Exercise Them

Individuals whose personal data we process are afforded a number of rights in relation to such data. To exercise your data protection rights please contact us using the contact details below. We will respond to reasonable requests in accordance with applicable privacy laws.

The specific data protection rights applicable to you are detailed in below. Please note that these data protection rights are not absolute and there may be circumstances where we may legitimately deny a request as permitted by applicable privacy laws. You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights stated below), although we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your data protection rights. This is a security measure to ensure the confidentiality and integrity of your personal data. We may also contact you to ask you for further information in relation to your request to speed up our response. We will only collect strictly necessary information to ensure that we only honour legitimate requests received from you or your authorised representative. We strive to respond to all legitimate requests within a month. Occasionally it may take us longer to respond if your request is particularly complex or you have made a number of different requests. In this case, we will notify you of estimated response timelines.

  • Right to Information: The right to receive the information set out in this Notice regarding our processing of your personal data.
  • Right of Access: The right to receive a copy of or otherwise access personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
  • Right to Erasure: The right to request that we correct or complete inaccurate personal data we might hold about you.
  • Right to Restriction of Processing: The right to ask us to restrict the processing of your personal data in certain circumstances, for example while the accuracy of your data is being verified after you have contested it.
  • Right to Object/Opt Out: The right to opt out of our processing of your personal data in certain circumstances (e.g., automated decisions, profiling).
  • Right to Data Portability: The right to obtain and reuse your personal data for your own purposes across different services.
  • Right to Withdraw Consent: The right to withdraw consent at any time that you may have provided to us for processing your personal data (where the lawful basis for processing that we rely on is consent).
  • Right to Lodge a Complaint: The right to lodge a complaint with a competent supervisory authority and/or appeal directly to us against a decision regarding personal data.

How We Keep Your Personal Data Secure

We take the security of your personal data seriously and have implemented appropriate safeguards designed to keep it protected. [Read More]

Glenveagh has implemented technological and operational security procedures designed to protect your personal data against accidental or unlawful disclosure, loss, misuse, alteration or use. We limit access to your personal data only to those Glenveagh employees, other staff and third parties on a business need to know basis. They will only process your personal data upon our instructions, and they are subject to a duty of confidentiality. We have implemented procedures to respond appropriately to any suspected personal data breach or security incident and will notify you and relevant data protection regulators where we are legally required to do so.

Contact Us

If you have any questions concerns, and/or complaints regarding this Notice, or if you wish to exercise your data protection rights, please contact us using the contact details below. You also have the right to lodge a complaint with the data protection authority in the territory where you are located, should your matter remain unsettled or otherwise unsatisfied.

The Company Secretary

Glenveagh Properties plc

Block C, Maynooth Business Campus

Straffan Road, Maynooth

Co. Kildare, Ireland

Email: dataprivacy@glenveagh.ie