Privacy notice

NCT-Bot.ie is the controller for the personal data described in this notice. For privacy questions or requests, contact touch@nct-bot.ie.

NCT-Bot is an independent notification service and is not affiliated with, authorised by or endorsed by NCTS, the RSA or any Irish government body.

Account data: when you create an account, we process the name and email address you provide, together with the technical identifiers needed to sign in and recover access. Passwords are handled by Supabase Auth and are not stored in readable form by NCT-Bot.

Service data: we process the NCT centres you choose and information required to deliver the service. If you choose to connect on WhatsApp, this can include your WhatsApp-linked phone number and messages needed to operate or support the notification flow.

Payment and technical data: payment providers process payment details. NCT-Bot does not receive or store full card details. We may process confirmation, transaction and security records, plus basic technical logs needed to operate and protect the site.

We use personal data to create and secure your account, provide the requested cancellation-notification service, respond to support requests, prevent abuse and meet applicable legal obligations.

The usual legal bases are performance of a contract, our legitimate interests in operating a secure service, legal obligations, and consent where it is required. You can withdraw a consent-based communication preference at any time.

We use service providers that help us operate the site, including Supabase for authentication and database infrastructure. Where payment is enabled, payment providers such as Stripe or Revolut process payments. Where WhatsApp delivery is enabled, Meta processes messages and related service metadata under its own terms and privacy information.

We do not sell personal data. We share it only with processors acting for us, where you ask us to, or where disclosure is required by law.

We keep personal data only for as long as needed for the purpose for which it was collected, including account security, support, service delivery and legal or accounting obligations. The period can differ by data category.

You may request access, correction or deletion by contacting us. Some records may need to be kept where the law requires it or where they are necessary to establish, exercise or defend legal claims.

Depending on your circumstances, you may have rights to access, rectify, erase, restrict or object to processing, and to data portability. You may also complain to the Irish Data Protection Commission.

If you receive WhatsApp notifications, use the in-chat stop instruction or contact us to stop the notification service. This does not by itself cancel legal retention that may apply to payment or security records.