Effective Date: 1 February 2026
Last Updated: 19 January 2026
Introduction
The Parkfield Collective (a trade name of Parkfield Commerce, operating under Vellum Technologies Ltd – Teicneolaíochtaí Vellum Teoranta and its subsidiaries, collectively "Parkfield," "Vellum," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, use our services, or interact with us.
Operating Entities
- Vellum Technologies Ltd – Ireland (HQ, trading as Parkfield Commerce in Ireland, UK, Canada)
- Vellum UK Ltd – United Kingdom (in formation)
- Vellum NI R&D Ltd – Northern Ireland
- Vellum Americas Inc – Canada (in formation)
- Vellum Agency Services – United States
Executive Headquarters
Pollexfen House, Wine Street, Sligo, F91 A3FD, Ireland
Data Protection Officer
Email: privacy@parkfieldcollective.com
Jurisdictional Compliance
- GDPR (EU and UK)
- PIPEDA (Canada)
- CCPA/CPRA (California, USA)
- Other applicable privacy laws
What Information We Collect
- Contact Info: name, email, phone, job title, etc.
- Account Info: login credentials
- Communication Data: messages and emails
- Project Data: submitted for consulting/services
- Technical Data: IP, browser, device, location, etc.
- Analytics Tools: PostHog, Google Analytics, Meta Pixel, etc.
- Third Parties: Shopify, BigCommerce, and others
How We Use Your Information
- Service Delivery (Contract): Delivering services and support
- Business Operations (Legitimate Interest): Internal improvements
- Marketing (Consent/Legitimate Interest): Email updates, newsletters
- Legal Compliance (Obligation): Legal and regulatory requirements
Cookie Policy Summary
We use minimal cookies and give you control over settings.
- Strictly Necessary
- Analytics (PostHog, Google)
- Marketing (Meta, LinkedIn)
Information Sharing
- Service Providers: Hosting, analytics, CRM, AI, etc.
- Platform Partners: Shopify, BigCommerce, etc.
- Legal Requirements: As required
- Business Transfers: Upon mergers or acquisitions
International Data Transfers
Data may be transferred outside of originating countries. Safeguards include:
- EU SCCs, adequacy decisions
- Contractual safeguards for Canada
- Disclosures for California residents
Security & Data Protection
- Encrypted communications (Proton ecosystem)
- Compliance oversight by internal committee
- Data encrypted at rest and in transit
- SOC 2 and ISO 27001 aligned practices
Data Retention
- Project Data: 7 years post-engagement
- Marketing Data: Until opt-out or deletion request
- Analytics: 26 months (Google), 1 year (PostHog)
- Chatbot: 90 days, then anonymized
- Financial Records: 7 years
Your Privacy Rights
GDPR: Access, correct, delete, restrict, object, portability, withdraw consent, lodge complaint.
PIPEDA: Access, correct, withdraw, file complaint.
CCPA/CPRA: Know, delete, opt-out, correct, limit use, non-discrimination.
Exercising Your Rights
Email: privacy@parkfieldcollective.com
Response Times: 30–45 days based on jurisdiction
Security Measures
- TLS/SSL encryption
- Penetration testing and backups
- Secure development lifecycle
- Confidentiality, vendor due diligence
- Incident response plans
Children’s Privacy
Not directed at children under 16 (or younger depending on jurisdiction). Data deleted if discovered.
Policy Updates
We will notify users of significant changes via website notices and email where applicable.
Contact Information
Email: privacy@parkfieldcollective.com
Mail: The Parkfield Collective, Pollexfen House, Wine Street, Sligo, Ireland
Supervisory Authority: www.dataprotection.ie
