top of page

Privacy & Cookies Notice

Last updated: Dec 2025

I am committed to protecting your privacy and complying with my obligations under the Data Protection Act 2018, the General Data Protection Regulation 2016/679 (GDPR), and all other applicable UK data protection laws (“Data Protection Law”).

When you interact with me or use this Site, I act as the data controller of your personal data. This means I am responsible for deciding how your personal information is collected, used, stored and protected.

This notice explains:

  • the personal data I may collect when you interact with me,

  • why I collect it,

  • how I use and share it, and

  • your rights in relation to that data.

“Personal data” means any information that identifies you. “Processing” includes anything done with your data—collecting, using, storing, sharing or deleting it.

​

Contact Information

If you have any questions about this notice or how I handle your personal data, you can contact me at:

Carly Colgan Bates
PO Box 13670, Wicklow
Email: ccolgan@hotmail.com

​

What Information Do I Collect?

I may collect, store and use the types of personal data listed in the table at the end of this notice. This includes information you provide directly (e.g., name, email, delivery details) and information collected automatically through cookies.

​

How I Use Your Personal Data

Your personal data is used only for the purposes set out in the table at the end of this notice—primarily to communicate with you, deliver products or services, process payments, send updates or marketing (where permitted), improve the Site and ensure everything runs smoothly.

​

How I Share Your Personal Data

I only share your personal data in accordance with Data Protection Law. I may share data with:

  • Service providers such as payment processors, email providers, delivery couriers, website services, marketing tools, or consultants who help me run the Site or communicate with you.

  • Professional advisers (for example, accountants or legal advisers), where necessary.

  • Third parties involved in competitions, promotions or analytics, where this is required.

  • Parties involved in a business transfer, if my brand, website, or business assets are ever sold or transferred.

I may also share aggregated, anonymised information with third parties (e.g., analytics data). This information cannot identify you.

​

Cookies & Similar Technologies

This Site uses cookies and similar technologies to improve your experience.

​

Types of cookies used

  • Strictly necessary cookies – required for basic Site functions.

  • Analytics cookies – help me understand how visitors use the Site.

  • Customisation cookies – remember your preferences.

  • Security cookies – help detect malicious activity.

  • Social media cookies – enable sharing to social platforms.

  • Targeting/advertising cookies – customise content and ads to your interests.

 

When you visit for the first time (and occasionally thereafter), you will be asked to consent to non-essential cookies. You can disable cookies at any time through your browser settings.

For more information on cookies, visit allaboutcookies.org.

​

Third-Party Links

This Site may contain links to external websites I do not control. I am not responsible for their privacy practices, so please review their privacy notices if you access them.

​

Your Rights

You have rights under Data Protection Law, including the right to:

  • access the personal data I hold about you;

  • request corrections to inaccurate or incomplete data;

  • request deletion of your data in certain circumstances;

  • restrict how your data is used;

  • request your data in a machine-readable format;

  • withdraw consent where I rely on it (e.g., email marketing).

If you wish to exercise any of these rights, contact me using the details above.

​

Your right to object

You can object to my processing of your data at any time, especially for direct marketing. Where you object to marketing, I will stop immediately.

If you object on other grounds (e.g., legitimate interests), I will stop unless I have compelling reasons that override your rights or the data is needed for legal claims.

You also have the right to lodge a complaint with your data protection authority (in the UK, the Information Commissioner’s Office, ico.org.uk).

​

Data Retention

I only keep your personal data for as long as necessary. Retention periods for each category of data are listed in the table at the end of this notice.

​

How I Protect Your Data

I follow the principles of Data Protection Law by ensuring that personal data is:

  • processed lawfully, fairly and transparently;

  • collected for clear and legitimate purposes;

  • limited to what is necessary;

  • accurate and up to date;

  • stored only for as long as needed;

  • kept secure and protected from unauthorised access, loss or damage.

 

Legal Bases for Processing

I only process your personal data when I have a lawful basis to do so. These include:

  • Consent

  • Performance of a contract

  • Legal obligation

  • Legitimate interests

 

Personal Information we use

The below sets out detailed information about our purposes for processing, the basis for processing and the retention period for the personal data.

​

Category of personal data: Name and contact details
Purpose of processing: Used to assist with delivery of products
Lawful basis: Performance of contract
Retention period: 6 months

​

Category of personal data: Payment information
Purpose of processing: Processed via Stripe
Lawful basis: Performance of contract
Retention period: 30 days

​

Category of personal data: Contact history
Purpose of processing: Emailing/contacting customers about abandoned carts and transaction reminders
Lawful basis: Performance of contract
Retention period: 30 days

​

Category of personal data: Saved items in online shopping basket
Purpose of processing: Reminding users of items in their cart / abandoned cart reminders
Lawful basis: Performance of contract
Retention period: 30 days

​

Category of personal data: Purchase history
Purpose of processing: To best serve customers on the website / help & support
Lawful basis: Performance of contract
Retention period: 6 months

​

Category of personal data: Browser, device and site usage information
Purpose of processing: Ensuring the site performs correctly across devices
Lawful basis: Performance of contract
Retention period: 30 days

​

Category of personal data: Responses to surveys, competitions and promotions
Purpose of processing: Informing winners, analysing responses, contact management
Lawful basis: Performance of contract
Retention period: 6 days

​

Category of personal data: Customer comments and product reviews
Purpose of processing: Analysing feedback for product enhancement and research
Lawful basis: Research/product development
Retention period: 6 months

​

Category of personal data: Information generated through use of our products/services
Purpose of processing: Enhance service quality and order management
Lawful basis: Performance of contract
Retention period: 3 months

​

Category of personal data: Cookies and similar technologies
Purpose of processing: Enhancing site-wide customer experience
Lawful basis: Customer experience enhancements
Retention period: 3 months

​

bottom of page