Last updated: 29 September 2026
Boxworks CoWork Space Ltd (“BoxWorks”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you visit boxworks.ie, contact us, book a tour or become a member, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.
1. Who we are
The data controller is Boxworks CoWork Space Ltd, 40 Patrick St, Waterford, X91 X3KF, Ireland.
For anything related to your personal data, contact us at info@boxworks.ie or call +353 87 237 9550.
2. What we collect and why
When you send an enquiry or book a tour
Your name, email address, phone number, the product you are interested in and anything you write in your message. We use it to reply to you and arrange your visit.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
When you become a member or buy a service
Your name, contact details, business name and address, billing and payment details, membership type and dates of use, and your door access code. We use it to provide your desk, office, meeting room or virtual office, to invoice you and to keep the building secure.
Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligations, for example keeping accounting records for Revenue (Art. 6(1)(c)).
Virtual Office and mail handling
If you use our business address, we record the post we receive for you and ask for photo ID and proof of address to confirm who you are before we release mail.
Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligations under Irish anti-money-laundering law (Art. 6(1)(c)).
CCTV
We operate CCTV at entrances and common areas to protect members, visitors and property. Signs show where cameras are in use. Recordings are kept only for a short period and are then automatically overwritten, unless they are needed to investigate an incident.
Legal basis: our legitimate interest in security (Art. 6(1)(f)).
Wi-Fi
Our network may log device identifiers and connection times for security and fair-use purposes.
Legal basis: legitimate interest (Art. 6(1)(f)).
News and offers
If you opt in, we send occasional updates about events and offers. You can unsubscribe at any time using the link in each email.
Legal basis: consent (Art. 6(1)(a)).
Website analytics and advertising
With your consent, we use cookies to understand how visitors use our website (Google Analytics) and to measure and target our adverts on Facebook and Instagram (Meta Pixel). See section 8.
Legal basis: consent (Art. 6(1)(a) GDPR and the ePrivacy Regulations 2011, S.I. 336/2011).
For the Meta Pixel, BoxWorks and Meta Platforms Ireland Ltd are joint controllers for collecting and sending the data to Meta. Meta is responsible for what it does with the data afterwards, as described in Meta’s Privacy Policy.
Photos and member stories
We only publish photos, names or quotes of members on our website or social media with the member’s permission, which can be withdrawn at any time.
3. Who we share your data with
We never sell your data. We share it only with service providers who help us run BoxWorks, under contracts that require them to protect it:
- Website hosting: Hostinger
- Email: Google Workspace / Microsoft 365
- Sending emails from our website (form notifications, newsletter): Twilio SendGrid
- Analytics and tag management: Google Ireland Ltd (Google Analytics 4, Google Tag Manager), only with your consent
- Advertising: Meta Platforms Ireland Ltd (Meta Pixel), only with your consent
- Maps and video: Google (Google Maps, YouTube), loaded only with your consent
- Cookie consent: CookieYes (runs on our own website)
- Form spam protection: Google reCAPTCHA
- Newsletter: the Newsletter plugin, which runs on our own website
- Payments: our card payment provider and PayPal
We may also disclose data where required by law, for example to Revenue or An Garda Síochána.
4. Transfers outside the EU
Some providers (for example Google, Microsoft, Meta, Twilio SendGrid and PayPal) may process data in the United States. Where this happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
5. How long we keep your data
- Enquiries that do not lead to membership: 12 months after our last contact
- Virtual Office ID documents: 5 years after the service ends, as required by anti-money-laundering law
- Member and billing records: 6 years after membership ends (Irish tax and company law)
- CCTV: automatically overwritten after a short period, unless needed for an incident
- Newsletter: until you unsubscribe
- Analytics data: 14 months
6. Your rights
You have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, where we have no legal reason to keep it
- restrict or object to how we use it, including for direct marketing
- receive your data in a portable format
- withdraw consent at any time, without affecting anything done before
To use any of these rights, email info@boxworks.ie. We will reply within one month. There is no charge.
If you are unhappy with how we handle your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, www.dataprotection.ie. We would appreciate the chance to put things right first.
7. Security
Our website uses HTTPS encryption. Access to personal data is limited to the people who need it, and our providers are chosen for their security standards.
8. Cookies
We use only strictly necessary cookies by default. Analytics and advertising cookies are set only with your consent. Full details, and how to change your choice, are in our Cookie Policy.
9. Children
Our services are for businesses and adults. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.