Privacy Policy
Last updated: April 7, 2026
1. Who we are
This privacy policy explains how Earthing Ireland, located at 39 Meath Street, Dublin, D08 T0X4, Ireland ("we", "us", "our") collects, uses, and protects your personal data when you use our website www.earthingireland.ie .
We are the data controller for the personal data we process. If you have any questions about this policy or your personal data, you can contact us at:
- Email: order@earthingireland.ie
- Phone: +353 (85) 882 - 2904
- Address: 39 Meath Street, Dublin, D08 T0X4, Ireland
2. What personal data we collect
We collect the following categories of personal data:
a) Information you provide to us
- Order information: name, email address, phone number, shipping address, and billing address when you place an order.
- Payment information: payment details are processed directly by our payment providers (PayPal, Apple Pay, Google Pay). We do not store your full credit card number.
- Newsletter subscription: email address when you sign up for our newsletter. You can unsubscribe at any time by clicking the unsubscribe link in any email we send you.
- Product notification subscription: email address when you sign up for product availability alerts. You can unsubscribe at any time by clicking the unsubscribe link in the notification email.
- Reviews: your name and comments when you leave a product review.
- Customer support chat: messages you send through our on-site chat feature. We process this data to respond to your enquiry under performance of a contract (Art. 6(1)(b)) or our legitimate interest in providing customer support (Art. 6(1)(f)).
b) Information collected automatically
- Session data: IP address, browser type (user agent), and timestamps of site activity.
- Analytics data: if you consent, we use Google Analytics to collect pseudonymised usage data such as pages visited, time on site, and referral source. Google Analytics 4 truncates IP addresses but does not fully anonymise them; this data is therefore pseudonymised, not anonymised, under GDPR.
- Marketing data: if you consent, Meta (Facebook) Pixel collects data for advertising measurement.
- Advertising identifiers: if you arrive via an advertisement, we may store the campaign identifiers (e.g., UTM parameters, Google click ID, Facebook click ID) associated with your visit.
3. Legal basis for processing
We process your personal data on the following legal bases under Article 6 of the GDPR:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract (Art. 6(1)(b)) |
| Sending order confirmation, shipping updates, and receipts | Performance of a contract (Art. 6(1)(b)) |
| Customer support (chat, email) | Performance of a contract / Legitimate interest (Art. 6(1)(b)/(f)) |
| Session management and essential cookies | Legitimate interest (Art. 6(1)(f)) |
| Website security, fraud prevention, and CAPTCHA | Legitimate interest (Art. 6(1)(f)) |
| Analytics cookies (Google Analytics) | Consent (Art. 6(1)(a)) |
| Marketing cookies (Meta Pixel) | Consent (Art. 6(1)(a)) |
| Newsletter and product notification emails | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations (e.g., tax records) | Legal obligation (Art. 6(1)(c)) |
4. Who we share your data with
We share your personal data with the following categories of third parties, only to the extent necessary to provide our services:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| PayPal / Braintree ( privacy policy ) | Payment processing | Name, email, billing address, payment details |
| Apple Pay / Google Pay | Payment processing | Payment token data |
| Google Analytics (with consent) | Website usage analytics | Pseudonymised browsing data, truncated IP address |
| Meta / Facebook (with consent) | Advertising measurement (joint controller — see below) | Page views, conversion events |
| Cloudflare | Website security, CDN, CAPTCHA | IP address, browser information |
| Gmail (Google Workspace) | Sending transactional emails | Email address, order information |
Joint controllership with Meta: When the Meta Pixel is active on our website (with your consent), we and Meta Platforms Ireland Ltd act as joint controllers for the initial collection and transmission of your personal data to Meta, in accordance with the CJEU Fashion ID ruling (C‑40/17). Meta is the sole controller for all subsequent processing of that data. You can exercise your data protection rights in respect of Meta's processing directly with Meta via their privacy policy .
Data controllers vs. data processors: Some of the third parties listed above act as independent data controllers (e.g., PayPal, Meta) rather than data processors. This means they determine the purposes and means of processing your data according to their own privacy policies. Where a third party acts as our data processor, they process data solely on our instructions.
5. International data transfers
Some of our third-party service providers are based outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place. The specific transfer mechanisms for each provider are:
| Service Provider | Location | Transfer Safeguard |
|---|---|---|
| PayPal / Braintree | United States | EU-US Data Privacy Framework + SCCs |
| Apple Pay / Google Pay | United States | EU-US Data Privacy Framework + SCCs |
| Google Analytics | United States | EU-US Data Privacy Framework + SCCs |
| Meta / Facebook | United States / Ireland | EU-US Data Privacy Framework + SCCs |
| Cloudflare | Global (nearest edge) | SCCs + Binding Corporate Rules |
| Gmail (Google Workspace) | United States | EU-US Data Privacy Framework + SCCs |
Our website infrastructure for the Ireland store is hosted on servers in Europe.
6. How long we keep your data
| Data Category | Retention Period |
|---|---|
| Order and invoice records | 10 years (Irish tax obligations and product liability) |
| Browsing sessions (guest) | Up to 1 year |
| Newsletter subscriptions | Until you unsubscribe |
| Product notification subscriptions | Until you unsubscribe |
| Customer support chat messages | Up to 2 years |
| Product reviews | Until removed or upon request |
| Cookie consent preference | Duration of your browsing session (up to 2 weeks of inactivity) |
7. Cookies
Cookies are small text files placed on your device when you visit our website. We do not use a third-party consent management platform (CMP). Cookie consent is managed directly by our website and your preference is stored in your server-side browsing session.
We use the following types of cookies:
a) Essential cookies (always active)
These cookies are necessary for the website to function and cannot be switched off. They include:
- Session cookie — identifies your browsing session so we can maintain your shopping cart and provide a consistent experience.
- CSRF token — protects against cross-site request forgery for your security.
- Cloudflare cookies — used for security and performance by our CDN provider.
b) Analytics cookies (require consent)
These cookies allow us to understand how visitors use our website so we can improve it. They are only activated if you click "Accept All" on our cookie banner.
- Google Analytics — collects pseudonymised data about pages visited, time on site, and traffic sources. See Google's privacy policy .
c) Marketing cookies (require consent)
These cookies are used to measure the effectiveness of our advertising. They are only activated if you click "Accept All" on our cookie banner.
- Meta (Facebook) Pixel — tracks page views and conversions for advertising purposes. See Meta's privacy policy .
You can change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of any page. This will reset your consent and display the cookie consent banner again, allowing you to make a new choice. You can also clear your browser cookies to achieve the same result.
8. Your rights
Under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, you have the following rights:
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can ask us to correct any inaccurate or incomplete personal data.
- Right to erasure — You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
- Right to restrict processing — You can ask us to suspend processing of your personal data in certain circumstances.
- Right to data portability — You can request a copy of your data in a structured, commonly used, machine-readable format.
- Right to object — You can object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent — Where processing is based on consent, you can withdraw that consent at any time. For cookies, you can do this via your browser settings. For newsletters, use the unsubscribe form . For product notifications, use the notification unsubscribe form .
To exercise any of these rights, please contact us at order@earthingireland.ie . We will respond to your request within one month.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority:
- Data Protection Commission
- Phone: +353 (0)76 110 4800
- Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland