Legal notice

Legal basis for processing

Under the GDPR (General Data Protection Regulation), if you reside in the EEA (European Economic Area), we process your personal information on the following grounds:

  • Your consent – when you agree to our use of your information.
  • Performance of the contract – so we can handle your order and delivery.
  • Legal obligations – when we need to comply with laws and regulations.
  • Protection of your vital interests – to protect your health and safety.
  • Public interest – when we perform tasks that benefit society.
  • Our legitimate interests – which do not affect your fundamental rights.

Retention of personal data

When you place an order with us, we retain your information for as long as needed for our records, or until you ask us to delete it. To find out more about having your information deleted, see the ‘Your rights’ section below.

GDPR and your rights

As an EEA resident, you have the right to:

  • Access the personal data we hold about you.
  • Transfer your information to another service.
  • Request that your information be corrected, updated or deleted.

To exercise any of these rights, contact us using the information below. We process your information in Ireland, but it may also be transferred to Canada or the United States for further processing and storage.

For more information on how we ensure GDPR compliance, see Shopify's GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.