Legal
Privacy Policy
Last updated: 16 September 2026
This privacy policy describes how Ennea ("we", "us", "our") protects and makes use of the information you give us when you use our website (ennea.ie) or communicate with us by other means (email, telephone).
If you are asked to provide information by any of these means, it will only be used in the ways described in this privacy policy. This policy is updated from time to time. The latest version is published on this page.
If you have any questions about this policy, please contact us at info@ennea.ie.
Who we are
Ennea.ie is the trading name of A Star Consulting, a company registered in Ireland. Our address is Smithfield, Dublin 7, Ireland
Our data protection contact can be reached at info@ennea.ie.
The data we collect
We collect only the personal data necessary for the purposes described below. We do not collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) and we do not collect location-based information through the website.
The personal data we may collect includes:
- Name — to identify you and personalise our communications
- Email address — to respond to enquiries, deliver newsletters, and manage bookings
- Phone number — only when you provide it for us to contact you about a session or event
We do not collect data beyond what is necessary for these purposes.
How we collect your data
We collect personal data only when you provide it directly to us:
- When you sign up for our newsletter
- When you email us with an enquiry
- When you book a session with us
- When you register for an event
We do not use automated collection methods such as web scraping, hidden forms, or third-party data brokers.
Why we process your data and our legal basis
Under GDPR, we must have a lawful basis for processing your personal data. The table below sets out each processing activity, its purpose, and the legal basis we rely on:
| Processing activity | Purpose | Lawful basis |
|---|---|---|
| Responding to your enquiries | To answer questions you send us by email or telephone | Legitimate interest (Art 6(1)(f)) |
| Delivering our newsletter | To send you updates and content you signed up for | Consent (Art 6(1)(a)) |
| Managing session bookings | To schedule, confirm, and administer coaching sessions | Contractual necessity (Art 6(1)(b)) |
| Event registration | To register you for events and send related information | Contractual necessity (Art 6(1)(b)) |
Providing your data: Providing your name and email is necessary for us to respond to your enquiry or deliver the service you requested. If you choose not to provide this information, we may not be able to respond to you or provide the relevant service.
Withdrawing consent: Where processing is based on consent (e.g., newsletter), you can withdraw your consent at any time by emailing info@ennea.ie. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Who has access to your data
Your personal data is processed by our staff in Ireland. We do not sell, share, or pass your personal data to third parties for their own purposes.
We use a third-party hosting provider to host our website and store data on our behalf. This provider has access to personal data only to the extent necessary to provide the hosting service, and is bound by contract to process it only on our instructions and in compliance with GDPR.
International data transfers
Our website and data are hosted on servers located in Ireland and the United States.
Transfers of personal data to the United States are made under Standard Contractual Clauses (SCCs) adopted by the European Commission, which provide appropriate safeguards for the protection of personal data in accordance with Article 46(1) of the GDPR. Our hosting provider has signed these clauses and implements supplementary technical and organisational measures (including encryption in transit and at rest) to ensure an essentially equivalent level of protection for your data.
How long we keep your data
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Newsletter subscribers: Your data is retained until you unsubscribe. You can unsubscribe at any time by emailing info@ennea.ie or using the unsubscribe link in our communications.
- Client session records: Retained for the duration of the engagement plus 6 years after the engagement ends, in accordance with professional and legal record-keeping obligations.
- Event registrations: Retained for the duration of the event plus 12 months for follow-up, then deleted.
- General enquiries: Retained for up to 12 months after the enquiry is resolved, then deleted.
Automated decision-making and profiling
We do not use automated decision-making or profiling in relation to your personal data. All decisions about you are made by people.
Security
The security of your personal information is important to us. We use commercially accepted means to protect your personal information, including encryption in transit (TLS/SSL) and access controls that limit who can view your data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Links to other websites
Our website may contain links to other websites. We have no control over websites outside the ennea.ie domain. If you provide information to a website to which we link, we are not responsible for its protection and privacy — you should review the privacy policy of any linked site before providing your personal data.
Your rights under GDPR
You have the following rights regarding your personal data:
- Right of access (Art 15): You can request a copy of the personal data we hold about you.
- Right to rectification (Art 16): You can request that we correct any inaccurate or incomplete personal data.
- Right to erasure (Art 17): You can request that we delete your personal data ("the right to be forgotten"), subject to certain legal exceptions.
- Right to restriction (Art 18): You can request that we restrict the processing of your data in certain circumstances.
- Right to data portability (Art 20): You can request to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
- Right to object (Art 21): You can object to processing based on legitimate interest, and we will cease processing unless we have compelling legitimate grounds.
- Right to withdraw consent (Art 7(3)): Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please contact us at info@ennea.ie. We will respond within 30 days.
We do not charge for exercising your rights unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.
Complaints
If you believe we have mishandled your personal data, you can contact us at info@ennea.ie to have the matter investigated.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you have the right to complain to the Data Protection Commission (DPC), the Irish supervisory authority for data protection:
Data Protection Commission21 Fitzwilliam Square North
Dublin 2
DO2 ND28
Ireland
www.dataprotection.ie
Changes to this privacy policy
If we make any material changes to this privacy policy, we will place a prominent notice on our website.
Your continued use of the website and our services after we post any modifications to the privacy policy on this page will constitute your acknowledgement of the modifications and your consent to abide and be bound by the modified privacy policy.
Where changes affect how we process your data or your rights, we will notify you directly where reasonably practicable.