Privacy policy

Last updated 8 September 2026.

Who we are

Cyclone Archive is the document storage, scanning and destruction business of Cyclone Corporate Services Group Limited, registered office Pleasants House, Pleasants Street, Dublin 8. Company registration 274682, VAT 4869044E. The archive operates from Unit 18 North Park, Finglas, Dublin 11, D11 P60W.

We treat the information of customers, job candidates, employees, contractors, suppliers and other interested parties with care and confidentiality, and we gather, store and handle data in accordance with the Irish Data Protection Acts and the EU General Data Protection Regulation.

Two different relationships

Our handling of personal data falls into two distinct roles, and it matters which one applies.

Data we hold about you

When you enquire, open an account or work with us, we are the data controller for your own contact and account information: your name, company, phone number, email address, collection address and the correspondence between us.

Data inside the records we store for you

The boxes we hold contain your documents, and those documents are yours. Where you engage our services as a data controller, we act as data processor on your behalf. In that role we will:

• Process personal data only in accordance with your reasonable written instructions and applicable data protection legislation
• Adopt appropriate technical and organisational measures against accidental disclosure, loss or destruction of personal data
• Inform you promptly of any unauthorised disclosure, loss or destruction of personal data processed on your behalf
• Refer to you any request or communication from a data subject, the Data Protection Commission or any law enforcement agency relating to personal data processed on your behalf
• Ensure that all personnel processing personal data are under an obligation of confidentiality
• Make available the information reasonably necessary to demonstrate compliance with our obligations
• Assist you in responding to data subject requests, reporting personal data breaches, and carrying out data protection impact assessments and prior consultation
• Comply with our obligations to you in respect of sub-processing and transfers outside the European Economic Area
• Delete or return all personal data processed on your behalf when our services to you end

Boxes are opened only where you have asked for cataloguing, and in that work the name written on the outside of a folder is recorded while the contents stay closed. Nothing is destroyed without your instruction.

What we collect and why

Through the quote form, the contact form, email and the telephone, we collect the information needed to price and provide the service: your name, company, phone number, email address, collection address or Eircode, the number and type of boxes, the services you want and any notes you give us.

We process this data on the following bases:

• Contract. Where you have entered into an agreement with us and processing is necessary to provide the service.
• Legitimate interest. To respond to enquiries, manage accounts, handle complaints and keep customers informed about changes to the service we provide them.
• Legal obligation. Where we are required to keep records, for example for revenue, tax or employment purposes, or for the establishment or defence of legal claims.
• Consent. Where you have agreed to a specific use, such as direct marketing. Consent can be withdrawn at any time.

We do not sell, trade or otherwise transfer your personal information to outside parties. That does not include hosting partners and others who assist us in operating the business under confidentiality obligations, and we may release information where doing so is necessary to comply with the law or to protect our rights or those of others.

Visiting this website

Visiting the site does not require you to disclose personal data. Our host records technical data such as the IP address of the server you used, the top level domain you came from, the referring page, your browser type and general traffic data. This is used for administrative and statistical purposes and does not identify you.

The contact page embeds a Google map so you can find the warehouse. Loading that map places cookies set by Google and is subject to Google's own privacy policy.

How long we keep it

We retain personal data for no longer than is permitted under data protection law, and no longer than is necessary for the purpose it was processed for. In deciding how long that is, we consider the amount, nature and sensitivity of the data, the risk of harm from unauthorised use or disclosure, whether the purpose can be achieved another way, and any applicable legal requirement.

Personal data inside the records we store on your behalf is retained for as long as you instruct us to store those records, and is destroyed when you tell us to destroy them.

How we protect it

We take our security obligations seriously and work to prevent unauthorised access to, or alteration or destruction of, the personal data in our possession. Personal information is held behind secured networks and is accessible to a limited number of people with access rights, who are required to keep it confidential. In practice that means:

• Restricted and monitored access to sensitive data
• Transparent data collection procedures
• Staff trained in data protection and security measures
• Secure networks protecting data from attack
• Clear procedures for reporting privacy breaches or data misuse
• Contract clauses and statements setting out how we handle data
• Physical measures including secure premises, access control, confidential destruction, encryption and regular backups

The physical security of the warehouse holding your records is set out on our security and compliance page.

Your rights

You have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data erased where it no longer serves the purpose it was collected for, to restrict or object to processing, and to data portability. There is no fee for making a request.

Where the personal data concerned is inside records we store on behalf of a customer, that customer is the controller, and we will refer the request to them.

Contact and complaints

To exercise any of these rights, or to ask a question about this policy, write to Cyclone Archive, Unit 18 North Park, Finglas, Dublin 11, D11 P60W, email archive@cyclone.ie, or call 01 814 0734.

You also have the right to lodge a complaint with the Data Protection Commission, the supervisory authority for data protection in Ireland, at dataprotection.ie.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.