Privacy policy
A description of what the code actually does, not a template. If a category of data is not listed here, we do not hold it.
This wording has not been reviewed by a solicitor.
It is a working draft written to describe how Kickroom actually operates, and it sets out the statutory rights Irish and EU law already give you. It is not legal advice, and it has not been checked by a qualified adviser. Have it reviewed before trading.
Who the controller is
- Registered business:
- Jason Ahern
- Registered address:
- 1 Main Street, Midleton, Co. Cork, Ireland
- Company number (CRO):
- not set — see the launch checklist
- VAT number:
- not set — see the launch checklist
- Email:
- tills2007x@gmail.com
- Phone:
- +353 86 343 3456
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, delivery address, Eircode | To deliver what you bought | Performance of a contract |
| Email address | Order confirmation and anything that goes wrong with it | Performance of a contract |
| Phone number, if you give one | Passed to the courier for delivery | Performance of a contract |
| Order contents and totals | Fulfilment, refunds, and the tax records we must keep | Contract, and legal obligation |
| A random basket identifier | So your basket survives a page reload | Strictly necessary |
| Stripe payment reference | To match a payment to an order and to refund it | Performance of a contract |
What we never hold
Your card details. Card number, expiry and security code are entered on Stripe's systems and never touch ours. We could not leak them, because we never receive them. What we store is Stripe's reference for the payment and the last-four digits Stripe reports back.
We also hold no password for you: there are no customer accounts on this site. You look up an order with its number and the email you used.
Who else sees it
- Stripe Payments Europe Ltd — processes the payment. Dublin-based, and the data stays under EU adequacy arrangements.
- The courier — gets the name, address and phone number needed to deliver.
- Resend — would send order emails, but no key is configured, so no email leaves this system and nothing is shared with them today.
We do not sell your data, share it for advertising, or pass it to anyone not on this list.
Tracking
No advertising pixels, no session recording, no fingerprinting, no profiling, and nothing that follows you to another site. No third-party script of any kind is requested. The 3 cookies this site sets are each written in response to something you did — see the cookie page for the full list.
How long we keep it
Order records for seven years, because Revenue requires it. Abandoned baskets are deleted after thirty days. An admin session expires after eight hours.
Your rights
Under the GDPR you may ask for a copy of your data, ask us to correct it, ask us to erase it where we are not required to keep it, object to processing, or ask for it in a portable form. Email us and we will answer within one month.
If you are unhappy with how we handle it you can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2 — dataprotection.ie.