Privacy Policy

Effective Date: 1 February 2026
Last Updated: 19 January 2026

Introduction

The Parkfield Collective (a trade name of Parkfield Commerce, operating under Vellum Technologies Ltd – Teicneolaíochtaí Vellum Teoranta and its subsidiaries, collectively "Parkfield," "Vellum," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, use our services, or interact with us. 

Operating Entities

• Vellum Technologies Ltd – Ireland (HQ, trading as Parkfield Commerce in Ireland, UK, Canada)
• Vellum UK Ltd – United Kingdom (in formation)
• Vellum NI R&D Ltd – Northern Ireland
• Vellum Americas Inc – Canada (in formation)
• Vellum Agency Services – United States

Executive Headquarters

Pollexfen House, Wine Street, Sligo, F91 A3FD, Ireland

Data Protection Officer

Email: privacy@parkfieldcollective.com

Jurisdictional Compliance

• GDPR (EU and UK)
• PIPEDA (Canada)
• CCPA/CPRA (California, USA)
• Other applicable privacy laws

What Information We Collect

• Contact Info: name, email, phone, job title, etc.
• Account Info: login credentials
• Communication Data: messages and emails
• Project Data: submitted for consulting/services
• Technical Data: IP, browser, device, location, etc.
• Analytics Tools: PostHog, Google Analytics, Meta Pixel, etc.
• Third Parties: Shopify, BigCommerce, and others

How We Use Your Information

• Service Delivery (Contract): Delivering services and support
• Business Operations (Legitimate Interest): Internal improvements
• Marketing (Consent/Legitimate Interest): Email updates, newsletters</li>
• Legal Compliance (Obligation): Legal and regulatory requirements

Cookie Policy Summary

We use minimal cookies and give you control over settings.

• Strictly Necessary
• Analytics (PostHog, Google)
• Marketing (Meta, LinkedIn)

Information Sharing

• Service Providers: Hosting, analytics, CRM, AI, etc.
• Platform Partners: Shopify, BigCommerce, etc.
• Legal Requirements: As required
• Business Transfers: Upon mergers or acquisitions

International Data Transfers

Data may be transferred outside of originating countries. Safeguards include:

• EU SCCs, adequacy decisions
• Contractual safeguards for Canada
• Disclosures for California residents

Security & Data Protection

• Encrypted communications (Proton ecosystem)
• Compliance oversight by internal committee
• Data encrypted at rest and in transit
• SOC 2 and ISO 27001 aligned practices

Data Retention

• Project Data: 7 years post-engagement
• Marketing Data: Until opt-out or deletion request
• Analytics: 26 months (Google), 1 year (PostHog)
• Chatbot: 90 days, then anonymized
• Financial Records: 7 years

Your Privacy Rights

GDPR: Access, correct, delete, restrict, object, portability, withdraw consent, lodge complaint.
PIPEDA: Access, correct, withdraw, file complaint.
CCPA/CPRA: Know, delete, opt-out, correct, limit use, non-discrimination.

Exercising Your Rights

Email: privacy@parkfieldcollective.com
Response Times: 30–45 days based on jurisdiction

Security Measures

• TLS/SSL encryption
• Penetration testing and backups
• Secure development lifecycle
• Confidentiality, vendor due diligence
• Incident response plans

Children’s Privacy

Not directed at children under 16 (or younger depending on jurisdiction). Data deleted if discovered.

Policy Updates

We will notify users of significant changes via website notices and email where applicable.

Contact Information

Email: privacy@parkfieldcollective.com
Mail: The Parkfield Collective, Pollexfen House, Wine Street, Sligo, Ireland
Supervisory Authority: www.dataprotection.ie