Privacy Policy
Last updated: 25 July 2026
Who we are
[YOUR REGISTERED TRADING NAME], [YOUR BUSINESS ADDRESS], is the data controller responsible for your personal data. You can contact us at [YOUR@EMAIL].
This policy explains what personal data we collect when you visit or buy from this website, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).
What we collect
- Order information: name, billing and delivery address, email address, phone number, and order contents.
- Payment information: processed directly by our payment providers. We do not receive or store your full card details.
- Account information: if you create an account, your login details and order history.
- Marketing preferences: if you subscribe, your email address and whether you have opted in.
- Technical and usage data: IP address, browser and device type, pages viewed, referring site, and similar information collected through cookies.
- Correspondence: messages you send us and our replies.
Why we use it, and our lawful basis
- To fulfil your order — processing payment, arranging delivery, handling returns. Lawful basis: performance of a contract.
- To provide customer support — answering your queries. Lawful basis: performance of a contract or our legitimate interests.
- To meet legal obligations — keeping tax and accounting records. Lawful basis: legal obligation.
- To send marketing emails — only where you have opted in. Lawful basis: consent. You can withdraw consent at any time using the unsubscribe link in any email.
- To operate, secure and improve the site, including analytics and advertising measurement. Lawful basis: consent for non-essential cookies, legitimate interests for security and fraud prevention.
Who we share it with
We share personal data only with service providers who need it to operate this business:
- Shopify — hosting and running this online store.
- Payment providers — to process payments securely.
- Our supplier and delivery carriers — to pack and deliver your order.
- Email platform — to send order and marketing emails.
- Analytics and advertising providers — where you have consented to those cookies.
We do not sell your personal data.
International transfers
Some of our providers process data outside the European Economic Area. Where that happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses approved by the European Commission.
How long we keep it
Order and transaction records are retained for [X] years to meet tax and accounting obligations. Marketing data is retained until you unsubscribe. Other data is deleted once it is no longer needed for the purpose it was collected.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to how we process your data;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, email [YOUR@EMAIL]. We will respond within one month.
Cookies
We use cookies that are strictly necessary to run the site and keep your cart working. With your consent we also use cookies for analytics and advertising measurement. You can change or withdraw your cookie preferences at any time through the cookie banner or your browser settings.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie, or with the supervisory authority in your own EU member state.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.