Privacy policy

Last updated: 13-Aug-2026

This Privacy Policy explains how The Warm Craft ("we," "us," "our") collects, uses, and protects your personal data when you visit thewarmcraft.ie or thewarmcraft.com (the "Site"), or otherwise interact with us as a customer.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Who We Are

The Warm Craft is operated by Alan Ederson Da Silva, trading as The Warm Craft, a sole trader registered in Ireland.

Business address: 82 Brookside, Bettystown, Co. Meath, A92 EK27, Ireland
Business Name Registration Number (CRO): 791586
Revenue Tax Registration Number: IT02076221UA
Contact email: hello@thewarmcraft.ie

For the purposes of GDPR, The Warm Craft is the "data controller" of your personal information.

2. What Personal Data We Collect

We may collect the following categories of personal data:

Identity data: full name
Contact data: billing/shipping address, email address, telephone number
Order data: details of products purchased, order history, order value
Payment data: payment is processed securely by Shopify Payments and/or our third-party payment processor — we do not store your full card details on our own systems
Technical data: IP address, browser type, device information, and cookies (see our separate Cookie Policy)
Marketing data: your preferences in receiving marketing communications from us, if you opt in

We do not knowingly collect any special category data (e.g. health, religious, or biometric data) unless voluntarily provided by you (for example, in a custom order request).

3. How We Collect Your Data

We collect data directly from you when you:

Browse our Site
Create an account or place an order
Contact us via email or a contact form
Subscribe to marketing communications (if applicable)

We may also automatically collect some technical data through cookies when you use our Site (see our Cookie Policy for details).

4. How We Use Your Data and Legal Basis

We process your personal data for the following purposes:

Purpose	Legal basis
Processing and fulfilling your order	Performance of a contract
Managing payments, refunds, and returns	Performance of a contract
Responding to customer service queries	Performance of a contract / legitimate interest
Sending order confirmations and shipping updates	Performance of a contract
Sending marketing communications (only if you opt in)	Consent
Complying with tax, accounting, and legal obligations	Legal obligation
Preventing fraud and ensuring Site security	Legitimate interest

You may withdraw consent for marketing communications at any time by contacting us or using the unsubscribe link in any marketing email.

5. Sharing Your Data

We do not sell your personal data. We may share your data with trusted third parties who help us operate our business, including:

Shopify Inc. — our e-commerce platform provider, which processes order, customer, and payment data on our behalf
Payment processors (e.g. Shopify Payments) — to securely process transactions
Shipping and courier companies — to deliver your order
Hostinger — our email service provider, used for business correspondence
Revenue Commissioners / CRO — where required for tax or legal compliance purposes

These third parties are only permitted to use your data for the specific services they provide to us and are bound by their own data protection obligations.

6. International Data Transfers

Some of our third-party service providers (such as Shopify) may store or process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order and invoice records are generally retained for 6 years in line with Irish tax record-keeping obligations.

8. Your Rights Under GDPR

As a data subject, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), subject to certain legal exceptions
Restrict processing of your data in certain circumstances
Object to processing based on legitimate interest or for direct marketing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at hello@thewarmcraft.ie.

You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority, if you believe your data protection rights have been infringed:

Website: www.dataprotection.ie
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

9. Cookies

Our Site uses cookies to improve your browsing experience. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Children's Privacy

Our Site is not directed at children under 16, and we do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date.