Privacy Policy

Last updated: 29th of September 2026

This policy explains how Stór Collective collects, uses and protects your personal data when you visit our website, buy from us, or contact us. We process your data in line with the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is RyanGriffinHoldings Ltd, trading as Stór Collective, [Registered address], CRO No. 189139. For any privacy question or request, email info@storcollective.ie].

2. What we collect

•         Identity and contact details: your name, email address, phone number, and billing and delivery addresses.

•         Order details: the items you buy, prices, order history, returns and correspondence with us.

•         Payment information: handled securely by our payment providers. We never see or store your full card details.

•         Account details: your login and saved preferences, if you create an account.

•         Technical data: IP address, device and browser type, and how you use our site, collected through cookies (see Section 7).

•         Marketing preferences: whether you have agreed to hear from us.

3. How we use your data and why

Purpose

Lawful basis under GDPR

Processing and delivering your order, handling returns and refunds

Performance of our contract with you

Answering your questions and providing customer service

Performance of contract, or our legitimate interest in helping you

Keeping financial and tax records

Legal obligation

Preventing fraud and keeping our website secure

Legitimate interests

Improving our website and product range, using anonymised statistics

Legitimate interests

Sending newsletters, new arrivals and offers

Your consent, or, for existing customers, similar products with an easy opt-out

Non-essential cookies (analytics and advertising)

Your consent

4. Who we share it with

We never sell your personal data. We share it only with trusted service providers who help us run Stór Collective, under contracts that require them to protect it:

•         Shopify — our e-commerce platform and payment processing;

•         Payment providers such as [Shopify Payments, PayPal, Klarna];

•         Couriers such as [An Post, DPD, DHL] — your name, address and phone number, to deliver your order;

•         Google Workspace — our email and business tools;

•         Email marketing and analytics tools such as [Shopify Email, Klaviyo, Google Analytics, Meta] — only where you have consented;

•         Our accountant and professional advisers, and public authorities such as Revenue where the law requires.

5. Transfers outside the EU

Some providers, such as Shopify and Google, may process data outside the European Economic Area. Where they do, we rely on safeguards approved under GDPR, such as a European Commission adequacy decision, the EU–US Data Privacy Framework, or Standard Contractual Clauses.

6. How long we keep it

•         Order and financial records: 6 years from the end of the relevant tax year, as required by Irish tax law.

•         Customer accounts: until you ask us to delete your account, or after [3] years of inactivity.

•         Marketing data: until you unsubscribe or withdraw consent.

•         Customer service emails: up to [2] years after your last contact, unless linked to an open order or claim.

7. Cookies

We use essential cookies to make our website work (for example, your basket and checkout). With your permission, we also use analytics and advertising cookies to understand how our site is used and to show relevant ads. You can accept, reject or change your cookie choices at any time through the cookie banner or your browser settings.

8. Marketing

We only send marketing emails or messages if you have opted in, or if you are an existing customer and did not opt out when buying. Every message includes an unsubscribe link, and you can also email us to stop marketing at any time.

9. Your rights

You have the right to:

•         access a copy of your personal data;

•         correct inaccurate data;

•         ask us to delete your data, where we no longer need to keep it;

•         restrict or object to how we use it, including objecting to direct marketing at any time;

•         receive your data in a portable format;

•         withdraw consent at any time, without affecting processing already carried out.

To use any of these rights, email [privacy@storcollective.ie]. We will respond within one month and may ask you to verify your identity. There is no charge.

If you are unhappy with how we handle your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — www.dataprotection.ie. We would appreciate the chance to put things right first.

10. Security

Our website uses encrypted (HTTPS) connections, payments are processed by PCI-compliant providers, and access to customer data is limited to those who need it to run the business.

11. Children

Our website is not intended for anyone under 16, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.