Privacy policy

Who is responsible for your data

[Registered company name Ltd], [Street address], [City], [Postcode], [Country], is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact: [support@your-domain].

What we collect and why

• Orders: name, delivery and billing address, email, phone and order details, to process and deliver your order and handle returns (performance of a contract), and to keep accounting records (legal obligation).
• Your account: email address, and the name, phone number and delivery addresses you choose to save, so you can sign in, check out faster and see your orders (performance of a contract). We send sign-in links by email; there is no password to store.
• Customer service: the messages you send us, to answer them (legitimate interest).
• Payments are handled by our payment provider, Stripe; we never see or store your full card details.

Cookies

Strictly necessary cookies (such as ts_cart for your basket and authjs.session-token to keep you signed in) need no consent. Analytics and marketing cookies are only set if you allow them. Full list and how to change your choice: cookie policy.

Emails

Order and delivery emails are part of your order. If you have an account we may also send a reminder about a basket you left and a “how is your order?” email after delivery; every one has a link to stop them. The newsletter is only sent after you confirm your subscription, and every issue has an unsubscribe link.

Deleting your account

You can delete your account at any time in Account → Delete account. Your addresses, wishlist, points, saved basket and sign-in data are erased straight away. Orders are kept for 6 years because tax law requires it, but they are no longer linked to an account.

Who we share data with

Delivery companies (to deliver your order), our payment provider (Stripe), our email provider (to send sign-in links and order emails), and IT service providers that host our systems, all under contracts that protect your data. We never sell your data.

How long we keep it

Order records are kept for six years for tax and accounting purposes. Customer service messages are kept for two years. Your account and saved addresses are kept until you ask us to delete them; past orders are then kept only as long as the law requires.

Your rights

You can ask for a copy of your data, and ask us to correct, delete or restrict it, or object to its use. Email us at the address above. You can also complain to the Data Protection Commission (www.dataprotection.ie).