Privacy Policy

Boomerang Animal Bedding Ltd is the data controller for this website. You can reach us at:

Dublin Road, Thurles, County Tipperary, E41 WF96
Tel: 0504 90402
Email: sales@boomerang.ie

We run a lightweight, first-party analytics layer so we can see which pages are useful. For every visit we record: the page visited, the referring domain (e.g. google.com), an approximate dwell time, your country/city/ISP looked up from your IP, and basic browser/device info.

We never store your raw IP address. Before anything is written to disk your IP is one-way hashed and the network portion is truncated (a /24 block for IPv4, /48 for IPv6) so an event cannot be tied back to a single household.

• bbab_sid — first-party analytics session identifier. 30 days. SameSite=Lax.
• bbab_consent — remembers your cookie-banner choice. 365 days. SameSite=Lax.
• bbab_session / bbab_pre_mfa — admin login cookies. Only set if you have an admin account and are signed in. HttpOnly, SameSite=Strict.

If you click Decline on the cookie banner we will clear bbab_sid and only record an anonymous page count for traffic-volume purposes (no session, no referrer, no UTM, no dwell). We also honour the Do Not Track header and Global Privacy Control signal automatically — no banner is shown if either is set.

When you submit the quote form we receive: your name, business / yard / farm name, phone, email, county, the product you are enquiring about, quantity, whether you need delivery, and any message you add. We use this information to respond to your enquiry and to keep a record for our business books. It is not shared with third parties for marketing.

• Legitimate interest — for anonymised first-party analytics (GDPR Art. 6(1)(f)).
• Consent + contract — for handling your quote enquiry (Art. 6(1)(a) and 6(1)(b)).

• hCaptcha — used on the quote form to block automated submissions. hCaptcha may receive your IP and browser information. See the hCaptcha Privacy Policy.
• MaxMind / ipapi.co — used to look up country/city/ISP from your IP for analytics. Your IP is sent for resolution only; we do not store it in raw form ourselves.

We do not run any third-party advertising trackers (no Google Analytics, no Facebook Pixel, no programmatic ads).

• Anonymised analytics events: 180 days, then deleted.
• Aggregated analytics (counts only): retained indefinitely.
• Quote enquiries: 7 years for business records (Irish tax / contract requirements).
• Admin audit log: 12 months.

You have the right to access, correct, delete, restrict, port and object to processing of your personal data. To exercise any of these rights, email sales@boomerang.ie. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the supervisory authority: Data Protection Commission, Ireland — dataprotection.ie.

If we change anything material we will update the "Last updated" date at the bottom of this page and (where appropriate) re-trigger the cookie banner so existing visitors can review their choice.