Website Privacy Notice

Glenveagh Properties plc and its subsidiaries, (together “Glenveagh”, “the Group”, “us”, “we” or “our”), is the Data Controller, operate Glenveagh websites, and has created this privacy notice to demonstrate our firm commitment to privacy and it sets out how we collect and use personal data on our websites.

About this Notice

This Privacy Notice explains how we collect, process, and protect your personal data when you use our website or otherwise interact with Glenveagh. Please read this Notice carefully. If you have any questions about this Notice, please contact us using the contact details below.

This Notice applies to individuals whose personal data we process in connection with our website and business activities. This includes existing and prospective homeowners, visitors, suppliers, landowners, public officials, media representatives, and members of the public.

If you are a shareholder, please see our Shareholders Privacy Notice.

If you are an employment candidate, please see our Employment Candidate Privacy Notice.

For more information about personal data, we collect through the use of cookies, please see our Cookie Notice.

Any third-party websites through which you may interact with us are not covered by this Notice. Glenveagh accepts no responsibility or liability for the use and protection of any personal data which you provide to third-party websites. You should exercise caution and read the privacy notice of the relevant third party before providing any personal data.

For the purposes of this Notice, "personal data" includes any information about identified or identifiable individuals and includes sensitive information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric or health data or sexual orientation.

We may update this Notice from time to time. If you have any concerns about changes to this Notice, please contact us. When required by applicable privacy laws, we will notify you of any changes to this Notice by posting an update on our website and/or seek your consent before making material changes to the way we handle your personal data. This Notice was last amended in August 2026.

Your Data Controller

This Notice is provided by your data controller, Glenveagh Properties plc, the parent company of the Glenveagh Group.

Glenveagh Properties plc is the overarching data controller for the personal data covered by this Notice. The specific Group entity acting as data controller may vary depending on the nature of your relationship with Glenveagh. For example, Glenveagh Homes Limited generally acts as the data controller for existing and prospective homeowners, while NUA Manufacturing MMC Limited acts as the data controller for visitors to our manufacturing facilities.

Personal Data We Collect About You

We collect different categories of personal data about you depending on the nature of your relationship and your interactions with us. Glenveagh only collects personal data that is necessary for the purposes described in this Notice. The categories of personal data we may collect are set out below.

Personal Identification: Name, date of birth, age, gender, nationality, signature, location.
Contact Information: Postal address, e-mail, phone number.
Property Purchase Records: Buyer type (e.g. first-time buyer), buyer status, registration of interest (property type, location and development preferences), lead tier, renting status, length of residency, home sale status, development selection criteria, financial status, mortgage documentation, property purchase deposit, Help to Buy Scheme application details, property sale agreement, Sale Advice Notice (SAN), signature, customer unique identifier.
Customer Interactions: Request or complaint details, audio recordings, appointment details, satisfaction rating, feedback, and testimonials.
Supplier Payment Details: PPSN, invoice data, bank account information.
Professional Information: Company entity, department, job title role.
Visit Information: Purpose of visit, visit date and time, car registration number.
Imagery: Photographs, video recordings.
Browsing Information: IP address, browsing time, cookie information.
Consent Records: Consent preferences.
Membership Information: Membership information, records of personal properties.
Children's Data: Children's name, city, photos, video recordings. Glenveagh does not provide products or services directly to children and does not routinely collect personal data relating to children. We may occasionally process the limited personal data described above in relation to children, subject to parental or legal guardian consent, where you choose to register your child in a seasonal campaign, educational programme, community event, or similar activity organised or sponsored by Glenveagh.

Certain personal data is required for us to comply with our legal obligations or to take steps at your request prior to entering into a contract with you at your request (see the section about How We Use Your Personal Data). Where you do not provide personal data that is necessary for these purposes, we may be unable to provide you with the relevant product or service or to comply with the law.

How We Collect Your Personal Data

We collect personal data about you from several sources, including directly from you, from third parties, and through automated means. [Read More]

We collect personal data about you in several ways including:

Direct Collection: We collect personal data directly from you when you access our websites, register your interest in a Glenveagh development, reserve a property, enter into a property sale agreement, complete a survey, register to attend an event, contact our customer care teams, register as a visitor at Glenveagh premises, participate in our festive campaigns or educational programmes, or otherwise engage with us directly.
Third-Party Collection: We collect personal data about you indirectly from third parties such as estate agents, solicitors, local authorities, and co-purchasers.
Automated Collection: We collect personal data about you through tracking technologies in use on our websites such as cookies, pixels, and/or tags, CCTV equipment, and/or construction site cameras.

How We Use Your Personal Data

We use your personal data for a variety of purposes depending on the nature of your relationship and interactions with Glenveagh. For example, we may use your personal data to support the homebuyer journey, manage supplier and business relationships, operate our websites, facilities, and events, communicate with you, and to comply with legal obligations. The specific purposes for which we process your personal data are set out below.

We may use your personal data in the following ways:

To manage the property sales process: This includes processing registrations of interest in Glenveagh properties, assessing readiness to buy, managing your online customer account (where applicable), supporting property reservations, supporting deposit payments, facilitating contract preparation and execution, coordinating solicitor communications, providing construction progress updates, arranging inspections, managing snagging requests, facilitating key handover, and communicating with you throughout the homebuyer journey. This processing is necessary for the taking pre-contractual steps at your request.
To manage affordable purchase scheme transactions: This includes receiving and recording your affordable purchase scheme approval status from the relevant local authority, managing affordable purchase scheme information throughout the sales process, and progressing the purchase of your property in accordance with the approved scheme arrangements. This processing is necessary for taking pre-contractual steps at your request.
To provide customer care services: This includes responding to customer queries, requests, and complaints, arranging service appointments, and recording calls for training and monitoring purposes. This processing is necessary for the performance of a contract with you.
To manage land acquisitions and related agreements: This includes assessing land opportunities, engaging with landowners, negotiation and managing land transactions, and entering into agreements related to land purchases, easements, licenses, leases, and other land interests. This processing is necessary for taking pre-contractual steps at your request.
To manage supplier onboarding and tendering: This includes identifying and engaging with prospective vendors, carrying out commercial prequalification activities, maintaining approved vendor lists, inviting vendors to participate in tender processes, and communicating tender and contract award outcomes. This processing is necessary for our legitimate interests in facilitating business requirements for supplier products and services, conducting associated business due diligence verifications and maintaining our security certification status.
To manage post-award supplier engagements: This includes executing contracts with successful vendors, maintaining contractual records, managing supplier contact details, and supporting the administration of supplier engagements following contract award. This processing is necessary for taking pre-contractual steps at your request.
To manage supplier payments: This includes setting up suppliers in our financial systems, verifying supplier payment details, processing invoices, issuing purchase orders, and administering payments for goods and services supplied to Glenveagh. This processing is necessary for the performance of a contract with you.
To send you marketing communications: This includes sending you e-mail alerts, brochures, viewing opportunities, and information about Glenveagh developments and events. This processing is based on your consent where you choose to receive marketing communications.
To facilitate introductions to selected third-party providers: This includes sharing your contact details with utility and providers of home-related goods and services providers following the completion of your home purchase so that they can contact you directly about their products and services. This processing is based on your consent.
To manage events organised or sponsored by us: This may include organising and delivering community events, sales and marketing events, educational programmes such as the Nature Heroes Awards, and other sponsored events, including managing registrations, attendance, post-event feedback, and event photography and videography. This processing is based on your consent, including parental or legal guardian consent insofar as the processing may concern children’s data.
To conduct surveys, gather feedback, and engage with our communities: This includes conducting customer satisfaction and community impact surveys, customer closing surveys, satisfaction surveys, and addressing community feedback. This processing is necessary for our legitimate interests in understanding customer and community experiences, responding to feedback, improving our developments, services, and customer experience, and maintaining high standards of customer care.
To support applications for government funding: Applying for and administering government grants and funding programmes, including evidencing project activities, costs, and resource allocation to meet funding and verification requirements. This processing is necessary for our legitimate interests in securing funding for our research and development.
To promote the Glenveagh brand: This includes publishing photography, videography, testimonials, and other promotional content on our websites, social media channels, and other communication platforms to showcase Glenveagh, our developments, and our communities. Where such content contains identifiable individuals, we rely on your consent (including parental consent where applicable). We may also organise competitions and similar promotional activities through our social media channels, which are carried out in pursuit of our legitimate interests in promoting the Glenveagh brand and engaging with the wider market.
To deliver seasonal campaigns: This includes operating seasonal and community-based campaigns, providing interactive digital experiences, generating personalised campaign content, facilitating participation in campaign activities, and communicating campaign-related materials requested by participants. This processing is based on our legitimate interests in promoting community engagement and awareness of the Glenveagh brand.Where a seasonal campaign involves the processing of personal data relating to children, we rely on parental or legal guardian consent for such processing.
To manage our website performance and digital experience: This includes using cookies and similar tracking technologies to understand how visitors interact with our website content,personalise website functionality, and improve website performance. This processing is based on your consent where you choose to allow the use of cookies.
To ensure the health, safety, and security of individuals and property: This includes operating CCTV equipment and systems. This processing is necessary for pursuing our legitimate interest in ensuring the health, safety, and security of individuals present on our premises and property.
To manage visitor access to Glenveagh premises: This includes managing and restricting access to Glenveagh premises, facilities, and sites to authorised individuals for health, safety, and security purposes. This includes the use of fob systems, access cards, and visitor logs. This processing is necessary to comply with our legal obligations in relation to maintaining a safe and secure working environment, including for visitors.
To monitor the progress of construction projects: Tracking the progress of construction works using camera footage to capture time lapse imagery of the construction process over time. This processing is necessary for pursuing our legitimate interest in ensuring that construction projects are delivered to target timelines.
To manage planning observations and disputes: This includes monitoring planning application observations, responding to -related enquiries and complaints, and addressing concerns relating to Glenveagh planning applications and developments. This processing is necessary for our legitimate interests in adequately assessing risk in relation to the outcome of planning applications, work toward dispute resolution and prevent delays in the execution of development projects.
To support external corporate communications: Informing external stakeholders such as journalists, policy makers, and industry bodies about Glenveagh's performance, position on policy matters, and broader industry developments. This processing is necessary for our legitimate interests in in maintaining transparent and effective external communication.
To comply with legal obligations: This includes supporting board reporting, maintaining directors' statutory registers, reporting on lobbying activities, and documenting risk assessment method statements. This processing is necessary to comply with our legal obligations under health and safety, lobbying and company laws and listing rules applicable to us.
To support business reporting and analytics: This includes producing buyer, lead, customer care, and financial reports. This applies to buyers, potential buyers, customers, and sole traders. This processing is necessary for our legitimate interests in supporting business performance reporting, improving the sales lifecycle and customer experience, facilitating the effective resolution of customer queries, and informing lessons learned and process improvements to maintain customer satisfaction.
To support technology solution enhancements and customisations: This includes designing, developing, testing, and maintaining add-on functionality, workflow automations, and customisations that automate, centralise, and minimise the collection and management of buyer data within Glenveagh's secure technology environment. This processing is necessary for our legitimate interests in improving the functionality and performance of our technology solutions.
To establish, exercise, or defend legal claims: We may process your personal data where necessary for the establishment, exercise, or defence of legal claims. This processing is necessary for our legitimate interest in obtaining legal advice and representation on behalf of the Group.
Facilitate data subject rights requests: Assessing and responding to requests from you to exercise your personal data rights under applicable data protection laws. This processing is necessary to comply with our legal obligations in relation to personal data protection.

Lawful Bases We Rely on to Process Your Data

In processing your personal data for the purposes set out in this Notice, Glenveagh relies on a number of lawful bases as permitted by applicable data protection laws, including to enter into a contract with you, to pursue a legitimate business interest, to comply with a legal obligation, or with your consent.

We rely on the following lawful bases for processing your personal data:

To enter into or to perform obligations arising in connection with a contract with you.
To comply with a legal or regulatory obligation to which we are subject.
To pursue our legitimate interest, where it is not overridden by your own legitimate interests and/or fundamental rights and freedoms.
With your consent, where required for the specific processing activities described above.

For further information about the purposes for which we process your personal data, the lawful basis applicable to each processing activity, and the legitimate interests we pursue by processing your personal data, please see the "How We Use Your Personal Data" section of this Notice.

How We Share Your Personal Data

We may share your personal data with Glenveagh subsidiaries and affiliates, third-party service providers, law enforcement and other government bodies.

We may share your personal data with the following categories of recipients:

Glenveagh subsidiaries and affiliates: We may share your personal data within our group of companies, which includes parents, corporate affiliates, subsidiaries, business units and other companies that share common ownership, for the purposes and relying on the lawful bases set out in this Notice.
Third-party goods and service providers and partners: We may share your personal data with third parties working on our behalf, to facilitate our interactions with you or to support our relationship with you, including estate agents, technology product vendors, solicitors and legal service providers, auditors, marketing and advertising providers, survey providers, educational programme partners, and other professional organisations.
Law enforcement and other government agencies: We may share your personal data with law enforcement and/or other government bodies to comply with the law or legal requirements applicable to us and to protect our rights, property, or safety of our employees, customers, and third parties.

International Transfers of Personal Data

In some instances, we may need to transfer your personal data to another jurisdiction for processing. Where data is transferred outside the European Economic Area (EEA), we implement appropriate legal mechanisms to ensure that it remains adequately protected upon reaching its destination, as required by applicable privacy laws. [Read More]

While Glenveagh primarily processes and stores personal data within the EEA, some of the technology and service providers we use may process or host personal data outside the EEA, including the United Kingdom (UK), which benefits from an adequacy decision adopted by the European Commission, and the United States. Where personal data is transferred to the United States, we rely on appropriate transfer safeguards in accordance with applicable data protection laws, including the European Commission's Standard Contractual Clauses and, where necessary, UK International Data Transfer Agreements.

How Long We Keep Your Personal Data

We keep your personal data only for as long as necessary for the purposes described in this Notice, unless a longer period is required or permitted by law.

The length of time for which we retain personal data depends on the nature of our relationship with you, the type of information we hold, the purpose for which it is processed, and any legal, regulatory, or contractual requirements that may apply. Once the applicable retention period has expired, and unless continued retention is required or permitted by law, we securely delete, anonymise, or otherwise dispose of your personal data in accordance with our retention protocols.

Your Rights and How to Exercise Them

Individuals whose personal data we process are afforded a number of rights in relation to such data. To exercise your data protection rights please contact us using the contact details below. We will respond to reasonable requests in accordance with applicable privacy laws.

The specific data protection rights applicable to you are detailed below. Please note that these data protection rights are not absolute and there may be circumstances where we may legitimately deny a request as permitted by applicable privacy laws. You will not normally have to pay a fee to access your personal data (or to exercise any of the other rights stated below), although we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your data protection rights. This is a security measure to ensure the confidentiality and integrity of your personal data. We may also contact you to ask you for further information in relation to your request to speed up our response. We will only collect strictly necessary information to ensure that we only honour legitimate requests received from you or your authorised representative. We strive to respond to all legitimate requests within a month. Occasionally it may take us longer to respond if your request is particularly complex or you have made a number of different requests. In this case, we will notify you of estimated response timelines.

Right to Information: The right to receive the information set out in this Notice regarding our processing of your personal data.
Right of Access: The right to receive a copy of or otherwise access personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
Right to Erasure: The right to request that we erase personal data we hold about you in certain circumstances.
Right to Restriction of Processing: The right to ask us to restrict the processing of your personal data in certain circumstances, for example while the accuracy of your data is being verified after you have contested it.
Right to Object: The right to object to our processing of your personal data in certain circumstances (e.g., automated decisions, profiling).
Right to Data Portability: The right to obtain and reuse your personal data for your own purposes across different services.
Right to Withdraw Consent: The right to withdraw consent at any time that you may have provided to us for processing your personal data (where the lawful basis for processing that we rely on is consent).
Right to Lodge a Complaint: The right to lodge a complaint with a competent supervisory authority and/or appeal directly to us against a decision regarding personal data.

How We Keep Your Personal Data Secure

We take the security of your personal data seriously and have implemented appropriate safeguards designed to keep it protected.

Glenveagh has implemented technological and operational security procedures designed to protect your personal data against accidental or unlawful disclosure, loss, misuse, alteration or use. We limit access to your personal data only to those Glenveagh employees, other staff and third parties on a strict business need to know basis. They will only process your personal data upon our instructions, and they are subject to a duty of confidentiality. We have implemented procedures to respond appropriately to any suspected personal data breach or security incident and will notify you and relevant data protection regulators where we are legally required to do so.

Contact Us

If you have any questions, concerns, and/or complaints regarding this Notice, or if you wish to exercise your data protection rights, please contact us using the contact details below. You also have the right to lodge a complaint with the Data Protection Commission, should your matter remain unsettledor otherwise unsatisfied.

The Company Secretary

Glenveagh Properties plc

Block C, Maynooth Business Campus

Straffan Road, Maynooth

Co. Kildare, Ireland

Email: dataprivacy@glenveagh.ie