This Privacy Policy explains how EirHorse Limited (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (Ireland), and applicable EU privacy law.

1. Data Controller

The data controller responsible for your personal data is:

EirHorse Limited
Shancashlaun
Kilmoganny
Co. Kilkenny
Ireland

Email: info@eirhorse.com

2. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data:

• Identification data (name, surname)
• Contact data (email address, telephone number)
• Delivery and billing address
• Order and transaction details
• Payment-related data (processed securely by payment providers)
• IP address, device and browser information
• Account-related information (where applicable)

We do not intentionally collect special category data (sensitive personal data).

3. Legal Basis for Processing (GDPR Article 6)

We process personal data only where a lawful basis exists, including:

• Contractual necessity – to process and deliver orders
• Legal obligation – accounting, tax, and regulatory compliance
• Legitimate interests – fraud prevention, service improvement, customer support
• Consent – where you have explicitly provided it (e.g. optional communications)

4. How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling orders
• Arranging delivery of goods
• Handling returns, refunds, and service requests
• Customer support and communication
• Fraud prevention and security monitoring
• Compliance with legal and regulatory obligations

5. Data Sharing & Third Parties

We do not sell personal data. However, data must be shared with trusted third parties to operate our services.

Categories of recipients include:

• Logistics & delivery:
  An Post (name, delivery address, contact details)
• Payments:
  Pay360 (transaction and payment authorisation data)
• E-commerce platform & hosting:
  Shoper (store infrastructure, order management, hosting)
• Returns & service handling:
  Sea Stone (returns processing and technical service support)

All third parties process data under contractual data protection obligations and only for specified purposes.

6. Data Retention

We retain personal data only for as long as necessary:

• Order and transaction data – as required by tax and accounting law
• Account data – until account deletion or inactivity
• Customer communications – for support and dispute resolution

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights Under GDPR

You have the following rights under GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent (where applicable)

To exercise any of these rights, please contact us at info@eirhorse.com.

8. Cookies & Tracking

Our website uses cookies and similar technologies to ensure proper functionality and improve user experience.

• Essential cookies – required for site operation
• Functional cookies – remember user preferences
• Analytical cookies – aggregated, anonymised usage statistics

You can manage cookies through your browser settings. Disabling cookies may limit certain site functions.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

• Encrypted data transmission (SSL/TLS)
• Secure payment processing
• Restricted internal access to personal data
• Regular system and security monitoring

10. Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC).

11. Contact

If you have questions regarding this Privacy Policy or how we process personal data, please contact:

Email: info@eirhorse.com

Legal notice: This policy may be updated from time to time to reflect legal or operational changes.