Privacy Policy

1. Who we are

ChessCraft provides chess programmes, live online lessons, workshops and related services to schools.

For data protection purposes, the data controller is:

Legal name: ChessCraft
Address: Kerry, Ireland
Email: website@chesscraft.ie
Website: chesscraft.ie

2. Information we collect

Depending on how you use our website and services, we may collect:

• Your name, email address and telephone number.
• Your school’s name and contact details.
• Account registration and login information.
• Information submitted through contact, enquiry or free taster forms.
• The subscription plan selected by your school.
• Subscription status, transaction references and limited billing information supplied by Stripe.
• Emails and other communications exchanged with ChessCraft.
• Technical information such as your IP address, browser, device type and website activity.
• Cookie preferences and information collected through permitted analytics tools.

Fields marked as required must be completed so that we can provide the requested account or service.

3. How we use your information

We may use personal information to:

• Create and manage school accounts.
• Provide ChessCraft and Chess4Schools Live services.
• Process and manage subscriptions.
• Confirm whether an account has an active subscription.
• Arrange free taster sessions, workshops and school programmes.
• Respond to enquiries and provide support.
• Send service-related messages and programme updates.
• Maintain the security and operation of our website.
• Improve our programmes, website and customer experience.
• Maintain financial and administrative records.
• Comply with legal and regulatory obligations.
• Send marketing communications where you have consented or where otherwise permitted by law.

You can unsubscribe from marketing communications at any time by using the unsubscribe link in the message or by contacting us.

4. Our legal bases for processing

We process personal information under one or more of the following legal bases:

• Contract: where processing is necessary to provide an account, subscription, lesson or other requested service.
• Legitimate interests: where necessary to operate, secure and improve our services, respond to enquiries or manage relationships with schools.
• Legal obligation: where information must be retained or processed to comply with applicable law.
• Consent: where you have chosen to receive marketing communications or accepted non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawing consent does not affect processing that took place before the withdrawal.

5. Payments and subscriptions

Subscription payments are processed by Stripe. Stripe processes payment details under its own privacy and security practices.

ChessCraft may receive information such as:

• The selected subscription.
• Payment and subscription status.
• Stripe customer or subscription identifiers.
• Transaction references.
• Limited billing and contact details.

ChessCraft does not ordinarily receive or store your complete payment-card details.

You can read Stripe’s privacy policy at stripe.com/privacy .

6. Information about children

Our website accounts and subscriptions are intended to be managed by schools, teachers or other authorised adults.

Pupils are not normally required to create individual ChessCraft website accounts. We do not knowingly collect personal information directly from children through the website unless it is required for a specific programme and appropriate information and safeguards have been provided.

Where a school provides pupil information for programme delivery, the respective data-protection responsibilities of the school and ChessCraft will be addressed through the relevant programme terms or data-processing arrangements.

7. Who we share information with

We may share personal information with trusted service providers where necessary to operate our services, including:

• Stripe and other payment-service providers.
• Website hosting and IT-support providers.
• Email and communications providers.
• Account-management and programme-delivery systems.
• Analytics providers where you have accepted the relevant cookies.
• Professional advisers such as accountants, insurers or legal advisers.
• Public authorities where disclosure is required by law.

These providers may only use the information as permitted by their agreements with us and applicable law.

We do not sell personal information.

8. International transfers

Some service providers may process information outside Ireland or the European Economic Area.

Where this occurs, we take appropriate steps to protect the information, such as using providers located in countries covered by an adequacy decision or relying on approved contractual safeguards.

9. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may depend on:

• How long an account or subscription remains active.
• Whether information is required to deliver a programme.
• Applicable accounting, tax or legal requirements.
• The need to resolve enquiries, disputes or complaints.
• Security and fraud-prevention requirements.

When information is no longer required, it will be deleted, anonymised or securely disposed of.

10. Cookies

Our website may use cookies and similar technologies to:

• Provide essential website functionality.
• Maintain account sessions and security.
• Remember your preferences.
• Understand how visitors use the website.
• Measure and improve website performance.

Non-essential cookies will only be used after you provide the required consent. You can change your choices through the website’s cookie settings.

Further information is available in our Cookie Policy.

11. Your data-protection rights

Subject to applicable law, you may have the right to:

• Request access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your information.
• Ask us to restrict how your information is used.
• Object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent.
• Complain to a data-protection supervisory authority.

To exercise these rights, email website@chesscraft.ie . We may need to confirm your identity before completing your request.

12. Complaints

If you have concerns about how we process personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Website: dataprotection.ie
Phone: +353 (0)1 765 0100

13. Security

We use reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no online service or method of electronic storage can be guaranteed to be completely secure.

14. Automated decision-making

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

15. Links to other websites

Our website may contain links to external websites. ChessCraft is not responsible for the privacy practices or content of those websites. You should review their privacy policies before providing personal information.

16. Changes to this policy

We may update this Privacy Policy when our services, legal obligations or data-processing activities change.

The latest version will be published on this page with an updated revision date.

17. Contact us

For questions about this policy or how ChessCraft handles personal information, contact us: