Privacy notice
This notice explains what personal information Rust Protection Network Ireland (RPNI) collects, why, and what you can do about it. It covers the rpni.ie website and the RPNI treatment record.
Who is responsible: Angels Garage Limited, a company registered in Ireland, company number 823268, registered office N5 Garage, Horsepark, Castlebar, Co. Mayo, F23 NX50, trading under its registered business name Rust Protection Network Ireland (registration number 792276). Contact info@rpni.ie.
Last updated: 24 August 2026.
What we collect, and why
If your vehicle is treated by an Approved Centre
The Approved Centre records the treatment in the RPNI register. That record contains your name and phone number, the vehicle make and registration, the treatment date, the products used, the price, the next inspection date, any notes, and before-and-after photographs of the vehicle.
Why: to issue and support your numbered certificate, to schedule inspections, to let a certificate be verified later by you, a buyer or another Approved Centre, and to detect fraudulent certificates. Legal basis: performance of the contract you have with the Approved Centre and with the programme, and our legitimate interest in maintaining a trustworthy register.
If you verify a certificate
You enter a certificate number and a vehicle registration. We use them only to look up that record and show the result. The public result deliberately shows less than the full record: certificate status, masked vehicle details, treatment date, inspection status and the issuing centre. It does not show an owner name, address or full registration.
If you apply to join as a garage
We collect your garage name, your name, email, phone, county and anything you write in the message box. Why: to assess and respond to your application. Legal basis: steps taken at your request before entering a contract.
If you run an Approved Centre
We hold an account for each approved user so treatments can be recorded. That means a username, name, email address and login activity.
Everyone who visits the website
Our web server keeps standard access logs, including IP address, browser type and pages requested, for security and troubleshooting.
Who else sees it
- The Approved Centre that treated your vehicle sees the record it created.
- Our web host (Web Hosting Ireland) stores the site and its database on our behalf.
- Email providers handle messages you send us.
- We may disclose information where the law requires it.
We do not sell your personal information, and we do not use it for advertising.
Some third-party services load when you view the site. Google Fonts and the Leaflet mapping library are fetched from external servers, and map tiles come from OpenStreetMap. These providers receive your IP address as a technical necessity of delivering the file. Google Fonts is operated by Google, which may involve a transfer outside the European Economic Area under the European Commission’s standard contractual clauses.
How long we keep it
The RPNI programme is built on a long record: a treatment can be renewed on a two-year inspection cycle for a maximum total period of sixteen years, and a certificate is meant to be verifiable for as long as it is live. We therefore keep treatment records, certificates, inspection history and treatment photographs for the life of the certificate and for a reasonable period afterwards so that historic certificates can still be checked and disputes resolved.
Garage applications that do not proceed are kept for up to twelve months. Server logs are kept for a short period for security purposes.
Your rights
Under the GDPR and the Data Protection Act 2018 you may ask us to give you a copy of your information, correct it if it is wrong, erase it, restrict or object to how we use it, or provide it in a portable form. Email info@rpni.ie and we will respond within one month.
Please note: erasing a treatment record also destroys the evidence behind that certificate, so the certificate can no longer be verified and any associated cover ends. We will tell you before that happens.
If you are unhappy with how we have handled your information you can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963 — dataprotection.ie.
Security
The site is served over HTTPS. Access to treatment records requires a login, and each Approved Centre can see only its own records. Photographs and records are stored on our web host’s servers within the European Union.