Privacy Policy

1. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, and title.
• Contact Data: includes billing address, delivery address, email address, and telephone numbers.
• Financial Data: includes payment card details. Note: All transactions are processed securely through our payment gateway (Stripe). We do not store or have direct access to your full credit card numbers.
• Transaction Data: includes details about payments to and from you and other details of products you have purchased from us.
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, and operating system used to access this website.

2. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances (Legal Bases):

• Performance of Contract: Where we need to process your order, take payment, and arrange delivery (e.g., via An Post).
• Legitimate Interests: Where it is necessary for our legitimate business interests (e.g., fraud prevention, website security, and improving customer experience) and your interests and fundamental rights do not override those interests.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., retaining sales records for Irish Revenue).

3. Disclosures of Your Personal Data

We do not sell your personal data to third parties. We may have to share your personal data with trusted external third parties solely for the purposes of fulfilling your order and operating our business:

• Payment Processors: Stripe, Inc. to process secure transactions.
• Logistics Partners: An Post and other couriers to deliver your purchased items.
• IT & System Administration: Service providers acting as processors who provide database hosting (Supabase) and website hosting services.

4. Data Security & Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Furthermore, we limit access to your personal data to those employees, agents, and third parties who have a business need to know.

By law (Irish Revenue requirements), we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.

5. Cookies & Local Storage

Our website uses local storage and essential cookies to maintain your shopping cart contents and ensure the core functionality of the website securely. You can set your browser to refuse all or some browser cookies, but note that some parts of this website (like the shopping cart) may become inaccessible or not function properly.

6. Your Legal Rights (GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data (the "right to be forgotten").
• Object to processing of your personal data.
• Request the transfer of your personal data to you or to a third party.

If you wish to exercise any of the rights set out above, please contact us at info@watercartridge.com. You will not have to pay a fee to access your personal data.

You also have the right to make a complaint at any time to the Data Protection Commission (DPC), the Irish supervisory authority for data protection issues (www.dataprotection.ie). We would, however, appreciate the chance to deal with your concerns before you approach the DPC, so please contact us in the first instance.