Privacy Policy

The short version

We collect as little as we can, use it only to run our shop and talk to you, never sell it, and let you ask for it back or have it deleted whenever you like. The detail below explains exactly what that means.

We are the data controller for the information you give us. That means we decide how and why it's used, and we're accountable for keeping it safe under the EU General Data Protection Regulation (GDPR) and Irish data protection law.

What we collect

We only collect what we need to take an order, deliver it, and stay in touch if you ask us to:

• Order details: your name, delivery and billing address, email, and phone number
• Payment confirmation: handled by our payment provider; we never see or store your full card number
• Account details: if you choose to create an account, your email and a password (stored encrypted)
• Messages: anything you send us by email or the contact form
• Site analytics, only if you accept analytics cookies: pages visited, device and browser type, approximate location (country or city) and how you found us, linked to a random ID and never to your name or email

How we use it & why

Under GDPR we need a lawful basis for everything we do with your data. Here's ours:

• To process and deliver your order, and handle returns: because it's necessary to perform our contract with you
• To answer your questions and provide support: our legitimate interest in running a responsive shop
• To send our newsletter: only with your consent, which you can withdraw in one click, any time
• To understand how the site is used (Google Analytics): only with your consent, given in our cookie banner and withdrawn any time with “Cookie settings” at the bottom of every page
• To meet tax, accounting, and consumer-law obligations: because the law requires it

We do not use your data for automated decision-making or profiling, and we never sell or rent it to anyone.

Cookies & analytics

We keep tracking light. It's part of why our pages are low-carbon. We use a small number of essential cookies to make the basket and checkout work.

With your permission, we also use Google Analytics (provided by Google Ireland Limited) to count visits and see which pages and products are useful. It sets cookies named _ga and _ga_…, which last up to two years, and it is only loaded after you click “Accept” on our cookie banner. If you click “Decline”, it is not loaded and no analytics cookies are set. We do not use advertising cookies, and analytics data is never used to advertise to you.

You can change your choice at any time with the Cookie settings link at the bottom of every page, and you can also block or delete cookies in your browser settings. The essential ones are needed for the shop to function; everything else is optional.

Who we share it with

Only the trusted partners we need to get your order to your door and keep the lights on. Each is bound to protect your data and use it only for the task we give them:

• Our payment provider, to take payment securely
• Delivery carriers (An Post, DPD, DHL and Royal Mail), to ship your order
• Our email and website hosting providers, to run the shop and send order updates
• Google Ireland Limited (Google Analytics), only if you accept analytics cookies. Google may process this data in the United States, under the EU-US Data Privacy Framework and Standard Contractual Clauses
• Our accountant and, where legally required, the Revenue Commissioners

How long we keep it

Order and invoice records are kept for six years, because Irish tax law requires it. Account details are kept until you ask us to close your account. Newsletter details are kept until you unsubscribe. Contact-form messages are kept only as long as needed to resolve your query.

Your rights

Under GDPR you have the right to:

• Ask for a copy of the data we hold about you
• Have mistakes corrected
• Have your data erased where there's no legal reason to keep it
• Object to, or restrict, certain uses
• Receive your data in a portable format
• Withdraw consent (for the newsletter, for example) at any time

To exercise any of these, just email us. We'll respond within one month. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie) if you're unhappy with how we've handled your data.

Keeping it safe

Our site runs over an encrypted connection (HTTPS). Passwords are stored encrypted, payment is handled by a PCI-compliant provider, and access to order data is limited to the people who need it to do their job. No system is perfectly secure, but we take reasonable, up-to-date measures to protect your information.

Sending data abroad

Your data is processed within the EU/EEA wherever possible. If a provider we rely on processes data outside the EEA, we make sure appropriate safeguards are in place (such as the European Commission's Standard Contractual Clauses) so your data stays protected to the same standard.

Changes to this policy

If we change how we handle your data, we'll update this page and move the "last updated" date. For significant changes affecting how we use your data, we'll let you know by email where we can.

Talk to us

Questions about your privacy, or want to make a request? A real person in Lettermullen will reply.

• Email: connemaraseaweedcompany@gmail.com
• Phone: +353 (0)87 283 0809
• Post: Connemara Organic Seaweed, Lettermullen, Co. Galway, Ireland