Information
Privacy Policy
Last updated:
In brief
- We collect only what we need to deliver your order, run our email list and answer your messages.
- Payments are handled by Stripe. We never see or store your card details.
- We don't sell your personal data, and this website sets no cookies of its own.
- You can ask to see, correct or delete your data at any time by emailing [email protected].
Who we are
DELUXE N°1 is run by Daniel Connolly (sole trader). The contact email is [email protected], for anything, including questions about your personal data.
We are the "controller" of the personal data described in this policy. That means we decide how and why it's used.
What we collect and why
| What | Why | Legal basis | How long we keep it |
|---|---|---|---|
| Orders: your name, email, phone number, billing and delivery address, and what you bought. | To process and deliver your order and handle any return. Payment card details are handled by Stripe and we never see or store them. | Contract | Until your order and any return are complete. Order records are then kept as below. |
| Records of orders and payments. | To meet our tax and accounting obligations. | Legal obligation | 6 years |
| Email list: your email address, when you sign up. | To tell you about drops. | Consent | Until you unsubscribe. |
| Emails you send us: your email address and your message. | To reply to you. | Legitimate interests (answering you) | As long as needed to deal with your query. |
| Basic technical data when you visit the website, such as your IP address and browser details. This is kept by Cloudflare, our hosting provider. | For security and to run the website. | Legitimate interests | Cloudflare keeps detailed visitor request logs (which include IP addresses) for a short period, generally days. It may keep a small sample, or logs of security events, for longer. |
Who we share it with
We share personal data only with the companies that help us run the shop, and only what each one needs:
- Stripe, for payments. Your card details go to Stripe, not to us. Stripe processes some data on our behalf, and some for its own purposes (such as fraud prevention and meeting its legal obligations) under its own privacy policy. Where Stripe transfers data outside the EEA, it relies on standard contractual clauses or the EU-US Data Privacy Framework.
- MailerLite, for our email list. MailerLite says subscriber data for EEA customers is stored in the EU.
- Cloudflare, which hosts this website, under its data processing addendum.
- An Post, for delivery, using your name, address and phone number.
- Professional advisers, such as an accountant, if needed.
We don't sell personal data.
Transfers outside the EEA
Some of these providers may process data outside the European Economic Area. Where they do, we rely on safeguards such as the European Commission's standard contractual clauses.
Cookies and similar technologies
This website itself doesn't set cookies, and doesn't use analytics or advertising trackers. Our fonts and images are served from our own website, not from third parties.
When you pay, you go to a checkout page run by Stripe. Stripe's payment page sets cookies for fraud prevention. Our email signup service (MailerLite) may set its own cookies on its own pages.
If we add analytics or other cookies in future, we'll update this section first.
How long we keep data
We keep each type of data for the time shown in the table above. When we no longer need data, we delete or anonymise it.
Your rights
You have the right to:
- access the personal data we hold about you;
- have it corrected if it's wrong;
- have it deleted;
- restrict how we use it;
- object to how we use it;
- receive it in a portable format (data portability);
- withdraw your consent at any time. Every marketing email has an unsubscribe link.
To use any of these rights, email [email protected]. We'll reply within one month.
You also have the right to complain to the Data Protection Commission (dataprotection.ie (opens in a new tab)).
Children
This website isn't aimed at children and we don't knowingly collect their data.
Security
We take reasonable care to keep your personal data safe, and we only use providers we trust to do the same.
Changes to this policy
If we change this policy, we'll update it on this page and change the "Last updated" date at the top.