Privacy Policy

1. Introduction

Subber Technologies Limited ("we", "us", "our") operates the Subber platform, including subber.ie and the Subber mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

Subber Technologies Limited is the data controller for the personal data processed through the platform.

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 2018.

2. Information We Collect

3. How We Use Your Information

We use your information to:

• Connect schools with substitute teachers.
• Create and manage your account.
• Facilitate and manage bookings.
• Send booking confirmations and reminders.
• Respond to support or sales enquiries you send through the Crisp chat widget.
• Improve our platform and user experience.
• Analyse website usability and identify points of friction where you have consented to optional analytics.
• Comply with legal obligations.

4. Legal Bases for Processing

We process personal data under the following legal bases under GDPR Article 6:

• Performance of a contract: to provide the Subber service to you.
• Steps taken at your request: to respond when you contact us through support channels such as Crisp chat.
• Legitimate interests: platform security, fraud prevention, and service improvement.
• Legal obligation: where required by Irish or EU law.
• Consent: for optional communications, push notifications, and website analytics where required by law.

5. Information Sharing

We may share your information with:

• Schools and teachers: limited profile information to facilitate bookings.
• Service providers: cloud hosting providers; Crisp, which provides our website chat service as a processor on our behalf; and, if you accept optional analytics, Google Analytics and Microsoft Clarity.
• Legal authorities: when required by law.
• We do not sell your personal information.

6. Data Hosting and International Transfers

Subber’s primary platform data is hosted in Supabase’s Ireland region.

Where specialist service providers process personal data outside the EU or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal data while your account remains active. Inactive accounts may be deleted after a reasonable period unless we are required to retain data for legal or regulatory purposes.

Crisp states that a chat session which does not become a conversation, including its associated IP address, expires after about 30 minutes of inactivity. When you start a conversation, the messages and associated technical records remain available to Subber in Crisp until they are deleted under our support-retention process. Crisp may retain IP and security logs for longer, including at least one year where required under French law and longer where needed to protect the service against abuse and spam.

You can request deletion of your data at any time.

8. Your Rights under GDPR

Under GDPR, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data.
• Restriction: request we limit processing of your data.
• Objection: object to processing based on legitimate interests.
• Portability: receive your data in a portable format.
• Withdraw consent: where processing is based on consent.

9. Data Security

We use encryption, secure authentication, and access controls to protect your data.

10. Cookies and Tracking

The Subber website uses Google Analytics and Microsoft Clarity only after you explicitly accept optional analytics. Google Analytics measures page visits, traffic sources, navigation paths, and browser or device information. Clarity helps us understand clicks, scrolling, and usability through heatmaps and session recordings. Contact-form fields are masked from recordings.

Support chat is separate from analytics consent. The Crisp script is not loaded until you choose the Chat with Subber control. After that explicit interaction, Crisp may use functional crisp-client/* cookies to keep the conversation working across pages and restore message history. Crisp states that these cookies expire after six months by default and that their expiry is renewed when an existing visitor loads the chat again.

When you choose to use chat, Crisp may process chat content, your IP address, browser or device details, session identifiers, and related technical metadata to route, secure, and operate the conversation. Crisp acts as our processor for this service and is not used by Subber for advertising analytics. For more detail, see Crisp's Privacy Statement at https://crisp.chat/en/privacy/ and Crisp's Cookie Policy at https://help.crisp.chat/en/article/crisp-cookie-policy-1147xor/.

Advertising storage and personalisation remain disabled. You can reject analytics without losing access to the website and can change or withdraw your choice at any time through the Analytics settings control. Both analytics services remain off if you do not make a choice.

11. Changes to This Policy

We may update this Privacy Policy periodically and will notify you of significant changes via email or in-app notification.

12. Contact Us

Data Controller: Subber Technologies Limited

Email: sean@subber.ie

Website: subber.ie

For complaints, you may contact the Irish Data Protection Commission at www.dataprotection.ie.