Privacy policy

Privacy and GDPR Policy

Last updated: JUNE 2025

Carol Kinsella Chocolates is committed to protecting your privacy and ensuring your personal data is handled in a safe and responsible way. This Privacy and GDPR Policy outlines how we collect, use, store, and protect your information when you visit our website or interact with us.

1. Who We Are

Carol Kinsella Chocolates
Kinsealy, Co. Dublin, Ireland
Email: ckchocolatesinfo@gmail.com
This website is operated by Carol Kinsella Chocolates. For GDPR purposes, we are the data controller of your personal data.

2. What Personal Data We Collect

We collect and process the following information when you interact with our website or services:

  • Contact Information: Name, email address, phone number, delivery/billing address

  • Order Details: Products purchased, payment method (via secure third-party processor)

  • Marketing Preferences: Opt-in consent for email/newsletter communications

  • Technical Data: IP address, browser type, pages visited (via cookies)

3. How We Use Your Data

We use your personal data to:

  • Process and deliver your orders

  • Communicate with you about your purchase or inquiry

  • Send marketing emails (with your consent)

  • Improve our website and customer experience

  • Comply with legal obligations (e.g. tax records)

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

  • Contractual necessity – to process orders and manage customer relationships

  • Consent – for email marketing and optional cookies

  • Legal obligation – to comply with tax, accounting, and other regulatory requirements

  • Legitimate interests – to analyse web traffic and improve our site

5. How We Share Your Data

We only share your data with trusted third parties when necessary:

  • Payment processors (e.g. Stripe, PayPal)

  • Delivery services (e.g. An Post, courier companies)

  • Web and IT service providers (e.g. hosting and email marketing platforms)

We never sell or rent your personal information.

6. Cookies and Analytics

We use cookies to improve your browsing experience and track site usage. You can accept or reject cookies via our cookie banner. For full details, see our [Cookie Policy].

7. How Long We Keep Your Data

We retain your data only as long as necessary for the purpose collected, or as required by law. Typically:

  • Order and billing data: kept for 6 years for tax and legal compliance

  • Marketing data: kept until you unsubscribe or request deletion

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Object to or restrict processing

  • Withdraw consent at any time

  • Lodge a complaint with the Data Protection Commission (www.dataprotection.ie)

To exercise any of these rights, email us at [insert email].

9. Data Security

We take all reasonable steps to protect your personal data from loss, misuse, and unauthorised access. Our website uses SSL encryption, and we partner only with GDPR-compliant service providers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be clearly posted on this page with an updated revision date.

Contact Us

If you have any questions about this policy or how we handle your data, please contact:

Carol Kinsella Chocolates
Kinsealy, Co. Dublin, Ireland
📧 Email: ckchocolatesinfo@gmail.com