Privacy policy
1. Who We Are
We are an Ireland-based retailer of bathroom equipment and related products. As Data Controller, we determine the purposes and means of processing your personal data.
2. Personal Data We Collect
We may collect and process the following personal data:
Identity Data
- Full name
Contact Data
- Billing address
- Delivery address
- Email address
- Telephone number
Transaction Data
- Order details and purchase history
- Payment information (processed securely by third-party payment providers)
- Technical Data
IP address
- Device and browser information
- Website usage data (via cookies and analytics tools)
3. How We Use Your Personal Data
We use your personal data to:
- Process and fulfil orders
- Arrange delivery of products
- Manage payments, refunds, and customer queries
- Provide customer service and support
- Comply with legal and regulatory obligations (including tax and accounting requirements)
- Improve our website, services, and user experience
- Detect and prevent fraud or misuse
4. Lawful Basis for Processing (GDPR Article 6)
We process your personal data under the following lawful bases:
- Contractual Necessity: To fulfil your order or take steps prior to entering into a contract
- Legal Obligation: To comply with Irish law, including tax and accounting requirements
- Legitimate Interests: For business operations, service improvement, fraud prevention, and website security
- Consent: Where you have opted in to receive marketing communications
5. Sharing Your Personal Data
We may share your personal data with trusted third parties where necessary, including:
- Payment processors
- Courier and delivery providers
- IT hosting, website, and analytics providers
- Professional advisors (legal, accounting, or regulatory)
- All third-party processors are required to handle your data in accordance with GDPR and only process it on our instructions.
We do not sell or rent your personal data.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
- Order and transaction records: retained in line with Irish tax and accounting requirements (typically up to 6 years)
- Customer service records: retained as needed to manage queries and disputes
- Marketing data: retained until consent is withdrawn or you unsubscribe
7. Your Rights Under GDPR
You have the following rights under GDPR and Irish data protection law:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing (including direct marketing)
- Right to withdraw consent at any time
- To exercise your rights, please contact us using the details below.
8. Right to Lodge a Complaint
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the:
- Data Protection Commission (DPC) – Ireland
- Website: www.dataprotection.ie
We would, however, appreciate the opportunity to address your concerns before you contact the DPC.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
10. Marketing Communications
Where you have provided consent, we may send you marketing communications about our products and services. You may withdraw consent at any time by:
- Clicking the unsubscribe link in our emails, or
- Contacting us directly
11. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Everflow
Email: contact@everflowproducts.ie
MON – FRI: 9AM – 5PM