Privacy Policy
Last updated: 13 October 2026
This Privacy Policy explains how Máire & Niamh collects, uses and protects your personal data when you visit maireandniamhkinsale.com, place an order or contact us.
Who Is Responsible for Your Data?
Máire & Niamh is the trading name of the business responsible for the processing described in this policy.
Privacy contact:info@maireandniamhkinsale.comWebsite:https://maireandniamhkinsale.com
Using our website does not, by itself, mean that you consent to every type of data processing. Where consent is required, we request it separately.
Personal Data We Collect
Depending on how you interact with us, we may collect:
-
Your name, email address and phone number
-
Your billing and delivery addresses
-
Order details, including products purchased and transaction references
-
Payment status and payment confirmation details
-
Customer service messages and information you provide about returns or product issues
-
Device information, browser type and IP address
-
Website activity, such as pages viewed and products added to your basket
-
Marketing subscriptions and cookie preferences
We collect information directly from you, through our website and, where relevant, from payment, delivery and other service providers.
Please avoid sending sensitive personal information unless it is necessary to resolve your enquiry.
How and Why We Use Your Data
To process purchases and provide customer service
We use your contact details, addresses and order information to process payments, fulfil orders, send service updates and manage returns, refunds and enquiries.
Our legal basis is the performance of our contract with you, or taking steps at your request before entering into a contract.
To meet legal obligations
We process relevant transaction and business records to meet applicable accounting, tax and other legal requirements.
Our legal basis is compliance with a legal obligation.
To protect and operate our business
We may use relevant information to prevent fraud, maintain website security, investigate problems and manage legal claims.
Our legal basis is our legitimate interest in operating a secure business and protecting customers and our rights, where those interests are not overridden by your rights and freedoms.
To send marketing communications
Where you subscribe, we use your email address to send product updates, offers and store news.
Our legal basis is your consent. You can withdraw it at any time.
To analyse browsing activity and support personalised advertising
Where we use non-essential analytics or advertising technologies, we request consent before activating them.
Refusing or withdrawing this consent does not prevent you from placing an order.
Certain information, such as your delivery address, is necessary to fulfil a purchase. If you do not provide it, we may be unable to process your order.
Shopify
Our online store is hosted on Shopify, which provides the platform used to display products, manage orders and operate our checkout.
Shopify processes personal data to provide these services. For some activities, Shopify may also act as an independent data controller, as explained in its own privacy documentation.
You can read more at:
https://www.shopify.com/legal/privacy
Payments
Payments are handled by the payment providers available at checkout. They process the information needed to authorise payments, prevent fraud and complete transactions.
We do not store full payment card numbers or card security codes in our store records.
Payment services and methods depend on the options enabled at checkout. The provider handling a payment may use personal data under its own privacy notice. For questions about a transaction or the provider used, contact our privacy email below.
Available payment methods are displayed at checkout. Payment providers may process certain information independently under their own privacy policies.
Who We Share Data With
Where necessary for the purposes explained above, we may share relevant personal data with:
-
Shopify and applications used to operate our store
-
Payment processors
-
Delivery companies
-
Suppliers and fulfilment partners
-
Customer service providers
-
Email marketing providers
-
Analytics and advertising partners, subject to the required consent
-
Professional advisers and public authorities where legally necessary
We share information relevant to each recipient’s role. Where a provider processes data on our behalf, appropriate data processing arrangements are required.
Supplier Fulfilment
Some orders may be dispatched directly by suppliers or fulfilment partners.
To fulfil these orders, we share the necessary details, which may include your name, delivery address, products ordered and contact details needed for delivery.
These partners may operate outside the European Economic Area, including in China where applicable.
International Data Transfers
Some service providers and fulfilment partners may process personal data outside the European Economic Area.
Such transfers require an applicable legal transfer mechanism and, where necessary, additional safeguards.
Overseas supplier fulfilment may involve China, as described above. Shopify explains its processing locations and international transfer arrangements in its Privacy Policy. The arrangements for other providers depend on the service involved. Contact us for information about the destinations and safeguards applicable to your order.
You may contact us for information about the safeguards applicable to your data and how to obtain a copy, subject to necessary redactions.
Marketing Emails
If you subscribe to our mailing list, we may send you news, product updates and promotional offers.
You can unsubscribe at any time by clicking the unsubscribe link in an email or contacting:
Unsubscribing from marketing does not stop essential messages about an existing order.
We may retain a limited suppression record to ensure that your unsubscribe request continues to be respected.
Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Strictly necessary technologies support services you request, such as basket functionality, checkout and essential security. These do not require cookie consent.
Optional technologies may support analytics, additional preferences and personalised advertising. These require your consent before use.
You can accept or reject optional cookies and change or withdraw your consent through our cookie preference controls. Withdrawing consent must be as easy as giving it.
Browser settings provide additional controls, but do not replace our obligation to obtain consent where required.
Read our Cookie Policy for information about cookie categories and your choices.
Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and disclosure.
These measures include access controls and protections provided by the platforms we use. No internet transmission or storage system can be guaranteed completely secure.
How Long We Keep Data
We retain personal data for the purposes described in this policy and delete or anonymise it when it is no longer needed, unless a legal obligation requires continued retention.
We determine retention using these criteria:Our retention periods are:
- Order and accounting records: for the time required to fulfil the purchase, resolve related claims and meet applicable accounting and tax requirements.
Order and accounting records
- Customer service correspondence: for the time needed to resolve the enquiry and any related return, dispute or legal claim.
Customer service correspondence
-
Marketing subscription records: until you unsubscribe or the subscription is otherwise ended, subject to our documented retention schedule
-
Unsubscribe records: for as long as necessary to respect your marketing preference
- Cookie and analytics information: according to the purpose and expiry of the technology involved and the consent choices made.
Cookie and analytics information: for the periods listed in our cookie information
Relevant records may be retained longer where necessary to resolve an ongoing dispute or meet a legal obligation.
Your Data Protection Rights
Under the GDPR, subject to the applicable conditions and exceptions, you may have the right to:
-
Access your personal data and receive a copy
-
Correct inaccurate or incomplete information
-
Request deletion of your personal data
-
Restrict how we process your data
-
Receive certain data in a portable format
-
Object to processing based on legitimate interests
-
Object to direct marketing at any time
-
Withdraw consent where processing relies on consent
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, email:
We may request proportionate information to verify your identity. We normally respond within one month. If a lawful extension is necessary because of the complexity or number of requests, we will explain this within that first month.
Complaints
You have the right to complain to a data protection supervisory authority, particularly in the country where you live, work or believe an infringement occurred.
For customers in Ireland, you can contact the Data Protection Commission:
You may also contact us directly with any concerns.
Third-Party Websites
Our website may link to other websites. Those websites have their own privacy policies, and we encourage you to review them before providing personal information.
Changes to This Policy
We may update this policy to reflect changes in our services, processing activities or legal requirements.
The latest version will appear on this page with an updated date. Where required, we will provide additional notice or request fresh consent.
Contact Us
For privacy questions or data protection requests, contact:
Máire & Niamh
Email:info@maireandniamhkinsale.comWebsite:https://maireandniamhkinsale.com