Privacy Policy

Michael Heavin Carpets Ltd

Effective Date: January 1st 2025

1. Introduction

Michael Heavin Carpets Ltd ("we," "our," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your information in compliance with the General Data Protection Regulation (GDPR) and Irish data protection laws.

2. Information We Collect

We may collect the following types of personal data:
Identity Data (e.g., name, email address, phone number, billing address, shipping address)
Payment Data (e.g., credit/debit card details, transaction records)
Technical Data (e.g., IP address, browser type, operating system, cookies, log files)
Marketing and Communications Data (e.g., preferences in receiving marketing communications)
Customer Support Data (e.g., feedback, inquiries, complaints)

3. How We Use Your Information

We process personal data for the following purposes:
To fulfil and manage orders, payments, and deliveries
To communicate with customers regarding orders, promotions, and services
To provide customer support and resolve disputes
To comply with legal obligations and prevent fraudulent transactions
To improve our website, services, and marketing efforts

4. Legal Basis for Processing

We process personal data based on the following legal grounds:
Consent (when you opt-in to marketing communications)
Contractual necessity (when processing orders and payments)
Legal obligations (for tax, fraud prevention, and regulatory compliance)
Legitimate interests (for improving our services and protecting our business)

5. Data Sharing and Third-Party Services

We may share your data with trusted third-party service providers to facilitate our services. These include:
Payment processors
Delivery and logistics partners
IT and hosting providers
Marketing platforms
We ensure that our third-party providers comply with GDPR and Irish data protection laws. For more details, please review the privacy policies of our key third-party partners:
Shopify - https://www.shopify.com/ie/legal/privacy
RetailSystem - https://www.retailsystem.com/uk/privacy-policy/

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal requirements, and resolve disputes.

7. Data Security

We implement appropriate security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

8. Your Rights Under GDPR

As a data subject, you have the following rights:
Right to Access – Request a copy of your personal data.
Right to Rectification – Request corrections to inaccurate data.
Right to Erasure – Request deletion of your data under certain conditions.
Right to Restrict Processing – Limit how we process your data.
Right to Data Portability – Receive a copy of your data in a structured format.
Right to Object – Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent – Withdraw consent for processing at any time.
To exercise these rights, please contact us at [Insert Contact Email].

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance your browsing experience. You can manage cookie preferences through your browser settings.

10. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards, such as Standard Contractual Clauses or reliance on GDPR-compliant third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on our website with the updated effective date.

12. Contact Information

For questions regarding this policy or data protection matters, contact us at:
Michael Heavin Carpets Ltd
Ankers Bower,
Dublin Road,
Athlone,
Co. Westmeath
N37ET10

Email: privacy@heavincarepts.ie
Phone: (090) 64 74736

If you believe we have not addressed your concerns, you have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland: https://www.dataprotection.ie