Privacy Policy

1. Introduction

Totally Irish Gifts ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in compliance with GDPR and Irish data protection laws.

2. Information We Collect

Personal Information

• Name, email address, phone number
• Shipping and billing addresses
• Payment information (processed securely by Stripe)
• Order history and preferences
• Gift messages, product personalisation details, and uploaded personalisation files where you choose to provide them
• Account, authentication, support, and fraud-prevention records

Automatically Collected

• IP address and browser information
• Essential cookies needed for checkout, account access, security, and cart functionality
• Website usage and analytics data only where optional analytics consent has been given

3. How We Use Your Information

• Process and fulfil your orders
• Communicate about your orders and account
• Share the minimum necessary fulfilment details with the maker or supplier preparing your order
• Send marketing communications (with your consent)
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure security

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfil orders and provide services
• Consent: For marketing communications and optional analytics cookies
• Legal obligation: For tax and accounting requirements
• Legitimate interest: For fraud prevention, security, customer support, and service improvement

5. Data Sharing

We share your information only with:

• Suppliers: To fulfil orders, including delivery details, relevant item details, and any personalisation text or files needed to make the product
• Payment processors: Stripe (payment information)
• Shipping, customs, and tax providers: Carriers, customs services, and tax/duties tools where needed for delivery and compliance
• Service providers: Hosting, email delivery, analytics, support, and operational tools under appropriate confidentiality and data-protection terms
• Legal authorities: When required by law

We never sell your personal information to third parties.

6. Data Retention

We retain your personal data only as long as necessary:

• Order information: 7 years (for tax/accounting)
• Account information: Until account closure or deletion request, unless legal or fraud-prevention requirements require a longer period
• Marketing data: Until consent withdrawal
• Personalisation files: As long as needed to fulfil and support the order, then removed or archived according to our operational retention rules

7. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restrict processing: Limit how we use your data
• Data portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing at any time

To exercise these rights, please use our contact page and mark the message for the privacy team.

You also have the right to complain to the Irish Data Protection Commission if you believe your data-protection rights have not been respected.

8. Cookies

We use cookies to enhance your experience. See our Cookie Policy for details.

9. Security

We use security measures appropriate for an online marketplace, including encrypted transport, secure payment processing through Stripe, access controls, and periodic review of our systems and providers. However, no method of transmission over the internet is 100% secure.

10. International Transfers

Your data may be transferred to and processed in countries outside the EU. We ensure adequate safeguards are in place, including Standard Contractual Clauses where applicable.

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or website notice.

13. Contact

For privacy inquiries or to exercise your rights, use our contact page and mark your message for the privacy team.

Postal business address details are available on request for customer service and data-protection matters.