Privacy Policy

Last updated: November 15, 2026

Emma & Grace Cork operates this online store and website, including its related information, content, features, tools, products and services (the "Services"), to provide customers with a convenient and personalised shopping experience.

Our store is powered by Shopify, which enables us to provide these Services.

This Privacy Policy explains how we collect, use, store, process and share your personal information when you visit our website, make a purchase, contact us or otherwise interact with our Services.

We are committed to protecting your privacy in accordance with applicable Irish and European Union data protection legislation, including the General Data Protection Regulation (GDPR).

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information:

• Contact information: Name, email address, telephone number, billing address and shipping address.

• Payment information: Payment method, transaction details, payment confirmation and related billing information. Payment card information may be processed securely by our payment providers.

• Account information: Account credentials, preferences, settings and order history.

• Order information: Products viewed, added to your cart, purchased, returned, exchanged or cancelled.

• Communications: Information provided when contacting our customer support team.

• Device information: IP address, browser type, device identifiers and network information.

• Usage information: Information about how you browse and interact with our website, subject to applicable consent requirements.

We collect only the information reasonably necessary for the purposes described in this Privacy Policy.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you when placing an order, creating an account, subscribing to marketing communications or contacting us.

• Automatically when you interact with our website, including through cookies and similar technologies.

• From service providers involved in payment processing, order fulfilment, delivery, analytics and customer support.

• From advertising and marketing partners, where permitted by applicable law.

3. How We Use Your Personal Information

We process personal information for the following purposes:

Order Processing and Fulfilment

To process payments, confirm purchases, arrange shipping, provide tracking information, manage returns and refunds, and fulfil our contractual obligations.

Customer Support

To respond to enquiries, resolve complaints and provide assistance with orders.

Marketing and Advertising

To send promotional emails, communicate special offers and display relevant advertising, where permitted by law.

Website Improvement

To understand how customers interact with our website, improve navigation and enhance the shopping experience.

Security and Fraud Prevention

To detect suspicious transactions, prevent fraud and protect our customers and Services.

Legal Compliance

To comply with applicable tax, accounting, consumer protection and other legal obligations.

4. Legal Basis for Processing Personal Information

Under the GDPR, we process personal information only where an appropriate legal basis applies.

These legal bases may include:

• Performance of a contract: Processing necessary to fulfil orders, arrange delivery and provide purchased services.

• Legal obligations: Processing required to comply with applicable laws and regulations.

• Legitimate interests: Processing necessary for legitimate business purposes, such as fraud prevention and certain operational improvements, provided these interests are not overridden by your rights and freedoms.

• Consent: Processing based on your permission, including certain marketing activities and non-essential cookies.

Where we rely on consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Marketing Communications

With your consent, where required, we may send promotional emails containing product recommendations, special offers, announcements and other marketing information.

You may unsubscribe at any time by clicking the unsubscribe link included in our marketing emails or contacting us directly.

Unsubscribing from marketing communications does not prevent us from sending essential transactional messages, such as order confirmations, shipping updates and customer service communications.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support essential website functionality, improve the shopping experience and, where permitted, analyse website performance and deliver relevant advertising.

These technologies may be used for:

• Essential shopping cart and checkout functionality.

• Remembering customer preferences.

• Website analytics and performance measurement.

• Advertising attribution and personalised marketing.

Non-essential cookies and similar tracking technologies requiring consent will only be activated after you provide valid consent.

You may manage or withdraw your cookie preferences through the cookie settings available on our website.

You may also manage cookies through your browser settings.

7. How We Share Personal Information

We may share personal information with trusted third parties where necessary to operate our business.

These may include:

• Shopify: Our e-commerce platform provider.

• Payment processors: To securely process transactions and refunds.

• Shipping and fulfilment partners: To prepare, dispatch and deliver orders.

• Customer support providers: To assist with customer enquiries.

• Marketing and analytics providers: To support authorised marketing communications, campaign measurement and website analytics.

• Professional advisers and authorities: Where required for legal, regulatory or accounting purposes.

We require service providers processing personal information on our behalf to handle that information in accordance with applicable data protection requirements.

We do not sell customer personal information for monetary consideration.

8. Relationship With Shopify

Our online store is hosted by Shopify.

Shopify processes personal information to provide essential e-commerce functionality, including shopping carts, checkout, order management and payment integrations.

Certain Shopify features may involve additional processing of customer information to improve its services or provide enhanced functionality.

Depending on the circumstances, Shopify may act as a data processor or as an independent data controller for particular processing activities.

For more information, please visit:

https://privacy.shopify.com/en

9. International Data Transfers

Emma & Grace Cork may use service providers and fulfilment partners located outside Ireland or the European Economic Area (EEA).

As a result, personal information may be transferred to, stored or processed in other countries.

Where personal information is transferred outside the EEA, we will ensure that appropriate safeguards are used where required by law.

These may include:

• European Commission adequacy decisions.

• Standard Contractual Clauses approved by the European Commission.

• Other lawful transfer mechanisms recognised under applicable data protection legislation.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy.

Retention periods depend on factors including:

• Order fulfilment and customer support requirements.

• Legal and accounting obligations.

• Fraud prevention and security.

• Resolution of disputes.

• Applicable statutory retention requirements.

When personal information is no longer required, we will delete or anonymise it where appropriate, subject to applicable legal obligations.

11. Your Rights Under the GDPR

If you are located in Ireland or elsewhere in the EEA, you may have the following rights under applicable data protection law:

Right of Access

You may request access to personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information in circumstances provided by law.

Right to Restrict Processing

You may request that we limit the processing of your personal information in certain circumstances.

Right to Data Portability

You may request a copy of certain personal information in a structured, commonly used and machine-readable format.

Right to Object

You may object to certain processing activities, including processing for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Rights Regarding Automated Decision-Making

You have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, where applicable.

To exercise your rights, please contact us using the details below.

We will respond within the time limits required by applicable law, generally within one month, subject to lawful extensions.

12. Children's Privacy

Our Services are not intended for children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided personal information to us unlawfully, please contact us so that we can take appropriate action.

13. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Our e-commerce platform and payment providers use security measures designed to protect customer transactions.

However, no method of electronic transmission or storage is completely secure.

We encourage customers to protect their account credentials and avoid sharing sensitive information through unsecured communication channels.

14. Third-Party Websites

Our website may contain links to external websites or services operated by third parties.

We are not responsible for the privacy practices or content of websites that we do not control.

We encourage customers to review the privacy policies of any third-party websites they visit.

15. Complaints

If you have concerns about how we process your personal information, please contact us first so that we can investigate and respond.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Ireland, the relevant authority is the Data Protection Commission (DPC).

Website: https://www.dataprotection.ie

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, legal obligations, technology or services.

When changes are made, we will publish the revised policy on our website and update the "Last updated" date.

Where legally required, we will provide additional notice or obtain consent.

17. Contact Information

For questions about this Privacy Policy, our data protection practices or requests concerning your personal information, please contact:

Store: Emma & Grace Cork

Email: info@emmagracecork.com

Market: Ireland

We are committed to handling your personal information responsibly and respecting your rights under applicable data protection legislation.