Privacy Policy
Last updated: January 11, 2026
1. Introduction
The Irish Box ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.theirishbox.ie and use our services.
We comply with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988-2018.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact details (email address, phone number)
- Billing and shipping addresses
- Payment information (processed securely by Stripe)
- Account login credentials
- Order history and preferences
- Communication preferences
2.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and browser type
- Device information
- Pages visited and time spent on site
- Referring website
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Process and fulfill your subscription orders
- Send order confirmations and shipping updates
- Process payments securely
- Provide customer support
- Send marketing communications (with your consent)
- Improve our website and services
- Prevent fraud and ensure security
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal data based on:
- Contract: Processing necessary to fulfill our contract with you (order processing, delivery)
- Consent: Where you have given explicit consent (marketing emails)
- Legitimate Interest: For our business operations, fraud prevention, and improving services
- Legal Obligation: To comply with applicable laws and regulations
5. Sharing Your Information
We may share your information with:
- Payment Processors: Stripe for secure payment processing
- Shipping Partners: An Post and other couriers for delivery
- Email Service Providers: For transactional and marketing emails
- Analytics Providers: To understand website usage
- Legal Authorities: When required by law
We do not sell your personal information to third parties.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Account information is retained for 7 years after account closure for tax and legal purposes.
7. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw previously given consent
To exercise these rights, contact us at privacy@theirishbox.ie
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure password hashing
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
9. International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact our Data Protection Officer:
- Email: privacy@theirishbox.ie
- Address: Data Protection Officer, The Irish Box, 123 Shamrock Street, Dublin 2, Ireland
You also have the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie