Privacy Policy

Last updated: 14-06-2026

This Privacy Policy applies to all services of John & Grace Dublin, reachable via info@johngracedublin.com. We respect the privacy of our customers and handle the personal information you provide to us confidentially and in accordance with the General Data Protection Regulation (GDPR).

1. What Data We Collect

We collect personal data that you provide to us when placing an order, creating an account, or contacting our customer service, including:

  • Full name
  • Address and billing details
  • Email address
  • Telephone number
  • Payment details (processed through our payment providers and not stored on our servers)
  • IP address and device/browser information
  • Order and transaction history
  • Information about your activities and behaviour on our website (through cookies)

2. Purposes of Processing

  • Processing, shipping, and invoicing your orders.
  • Providing customer service and support.
  • Sending order updates, tracking information, and relevant information.
  • Improving our services, website, and product range.
  • Preventing and detecting fraud and abuse.
  • Sending marketing communications, only when you have given consent.

3. Legal Basis

We process your data based on the performance of a contract (your order), your consent (for example, marketing), a legal obligation (such as tax administration requirements), and our legitimate interest (such as fraud prevention and improving our services).

4. Sharing Data with Third Parties

Your data is only shared with third parties to the extent necessary for our services, including:

  • Our payment providers: Shop Pay, Visa, Mastercard, American Express, Maestro, Apple Pay, Google Pay
  • Our shipping and delivery partners: An Post.
  • Our supplier(s) for the processing and shipment of your order.
  • Providers of analytics and marketing services (where applicable and in accordance with your cookie preferences).

Where required, data processing agreements have been concluded with all these parties. We never sell your data to third parties. Because part of our shipping is carried out directly by a supplier outside the EEA (China), data transfers outside the EEA may occur; in such cases, we implement appropriate safeguards.

5. Retention Period

We do not retain your data longer than necessary for the purposes for which it was collected, or as long as legally required (such as a 7-year tax retention obligation).

6. Cookies

Our website uses cookies to improve functionality, analyse visitor behaviour, and support marketing activities. Please see our separate Cookie Policy for more information. You can adjust your preferences at any time through the cookie banner or your browser settings.

7. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. All payments are processed through a secure SSL connection.

8. Your Rights

You have the right to access, correct, delete, or restrict your personal data. You may also object to processing, withdraw your consent, and submit a request for data portability. To do so, please contact us via info@johngracedublin.com. You also have the right to lodge a complaint with the relevant supervisory authority.

9. Contact

John & Grace Dublin — info@johngracedublin.com