Printpoint.ie

Privacy Policy

This Privacy Policy ("Policy") explains how Printpoint Photo LTD (referred to as “we”, “us”, or “our”), a company that operates a network of websites including printpoint.ie, printpointmemorial.ie, and studioadin.ie, collects, uses, and protects your personal data.

We handle your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Data Protection Act 2018 (Ireland).

Your trust is important to us. We are committed to protecting your privacy and being transparent about how we handle your personal data across all our online platforms.

1. Who We Are

Data Controller: Printpoint Photo LTD
Registered Address:40 Riverdale, Westbury, Corbally, Limerick Republic of Ireland V94KT32
Contact Email: info@printpoint.ie
Data Protection Officer (DPO): We do not have a mandatory DPO, but for all data protection queries, please contact us at info@printpoint.ie.

2. The Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity & Contact Data: Your name, email address, postal address, and telephone number.
  • Account Data: Your username and password for your website account.
  • Transactional & Financial Data: We collect information related to your orders, including billing and delivery addresses, products purchased, and payment details. For your security, we use Stripe, a certified and secure third-party payment processor, to handle all credit card and other payment transactions. This means that we do not store your full credit card number, CVV code, or any other sensitive payment card data on our servers. When you make a payment, your financial data is submitted directly to Stripe, which processes it on our behalf. Stripe is a data processor for us and is responsible for securely storing and protecting your financial data in accordance with strict industry standards, including the Payment Card Industry Data Security Standard (PCI DSS). We do, however, receive certain payment-related information from Stripe, such as the last four digits of your credit card number, the card type, and the payment status. This information is used for order verification, processing refunds, and for our internal accounting and business records.
  • Communication Data: Records of your communication with us, such as emails, online forms, and customer service inquiries.
  • Technical Data: Your IP address, browser type and version, time zone setting, location, and operating system. This information is collected through our website servers and cookies.
  • Usage Data:We collect information about how our website is accessed and used. This is often referred to as "Usage Data" and includes information about the pages you visit, the time and date of your visit, the time spent on those pages, and your path through the website. To collect this information, we use Google Analytics, a service provided by Google. While this service does not provide us with your name, address, or other direct identifiers, it uses online identifiers, such as your IP address and cookie identifiers, to collect this data on our behalf. This information is considered personal data under GDPR because it can be used to identify a device and track its activity over time. We process this data for the purpose of analyzing and improving our website's performance, understanding customer behavior, and personalizing the user experience. The legal basis for this processing is our Legitimate Interest in running and improving our business, and your Consent for the use of non-essential cookies. You can manage your consent preferences through our cookie banner.3. The Purpose and Legal Basis for Processing Your Personal Data

3. The Purpose and Legal Basis for Processing Your Your Personal Data

We will only process your personal data where we have a valid legal basis to do so under GDPR. The purposes and legal bases for our processing are as follows:

4. Who We Share Your Personal Data With

We may share your personal data with the following categories of recipients to fulfill the purposes outlined above:

  • Payment Processors: Companies that process your credit card payments on our behalf (e.g., Stripe, PayPal). They are essential for us to accept payments.
  • Delivery and Logistics Companies: To deliver your orders to you (e.g., An Post, couriers).
  • Marketing & Communication Platforms: Services that help us send emails and newsletters (e.g., Mailchimp), but only where you have given consent.
  • IT Service Providers: Companies that provide us with hosting, security, and other IT services necessary to run our website and business.
  • Legal & Regulatory Authorities: If we are legally obligated to disclose your data, such as in response to a court order or for crime prevention.
  • Professional Advisers: Lawyers, accountants, or other professional advisers in the course of our business operations.

We do not sell your personal data to any third parties.

5. International Data Transfers

The data we collect from you may be transferred to, and stored at, a location outside of the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

When your data is transferred outside the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

  • Transferring data to countries deemed by the European Commission to provide an adequate level of protection for personal data.
  • Using specific contracts approved by the European Commission, known as Standard Contractual Clauses (SCCs), which give personal data the same protection it has in the EU.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

The criteria we use to determine data retention periods include:

  • The purpose for which the data was collected.
  • The nature of the data.
  • The length of our relationship with you.
  • Any legal obligations to retain the data.

Once the retention period has passed, your data will be securely deleted or anonymized.

7. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data. You can exercise these rights free of charge, with a response provided within one month.

  • The Right to Be Informed: The right to be provided with clear, transparent, and easily understandable information about how we use your data. This is why we have this Policy.
  • The Right of Access (Subject Access Request): The right to obtain a copy of the personal data we hold about you.
  • The Right to Rectification: The right to have inaccurate or incomplete data corrected.
  • The Right to Erasure ("Right to Be Forgotten"): The right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
  • The Right to Restrict Processing: The right to "block" or suppress the further use of your personal data.
  • The Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • The Right to Object: The right to object to the processing of your data based on our legitimate interests or for direct marketing purposes.
  • The Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@printpoint.ie. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.

8. Cookies

Our website uses cookies. A cookie is a small text file that is placed on your computer or mobile device when you visit a website.

We use cookies to:

  • Remember your preferences and settings.
  • Process your orders and manage your shopping cart.
  • Collect anonymous statistics to help us improve our website's performance and design.

Legal Requirement: Under the Irish ePrivacy Regulations, we are required to obtain your explicit consent for any cookies that are not strictly necessary for the operation of the website.

Your Consent and Choices: When you first visit our website, you will be presented with a cookie banner that allows you to:

  • Accept all cookies.
  • Manage your preferences and choose which categories of cookies to accept (e.g., performance, marketing).
  • Reject all non-essential cookies.

You can change your cookie preferences at any time by clicking on the "Cookie Settings" link, which is located in the website footer. If you disable cookies, certain parts of the website, including the ability to make a purchase, will not function properly.

9. Links to Other Websites

Our website may contain links to and from the websites of our partners, advertisers, and affiliates. If you follow a link to any of these websites, please note that they have their own privacy policies and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

10. Complaints

If you have a question or a complaint about the way your personal data has been handled, please contact us first so we can try to resolve it.

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you have the right to make a complaint to the Data Protection Commission (DPC), the Irish supervisory authority for data protection.

DPC Website: www.dataprotection.ie
DPC Contact: info@dataprotection.ie

11. Policy Updates

We may update this Privacy Policy from time to time. The latest version will always be available on this page. We will also notify you of any significant changes via email or a prominent notice on our website.