• Improve functionality
• Enhance user experience
• Prevent fraud and misuse
• Maintain security
• Legal Compliance

We may process personal data to comply with:

• Tax obligations
• Accounting requirements
• Consumer protection laws
• Court orders or legal requests
• 5. Legal Bases for Processing

Under GDPR, we rely on the following lawful bases:

• Purpose
• Legal Basis
• Order fulfilment
• Performance of a contract
• Customer account management
• Performance of a contract
• Customer support
• Legitimate interests and contract performance
• Marketing communications
• Consent or legitimate interests where permitted
• Analytics and website improvement
• Consent where required and legitimate interests
• Fraud prevention and website security
• Legitimate interests
• Compliance with legal obligations
• Legal obligation

Where we rely on consent, you may withdraw your consent at any time.

6. Marketing Communications

If you subscribe to our marketing communications, we may send emails regarding:

• Products
• Promotions
• Company updates
• Special offers

You may unsubscribe at any time by:

• Clicking the unsubscribe link in any email
• Contacting us directly

Withdrawal of consent does not affect processing carried out before withdrawal.

7. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Enable Website functionality
• Remember user preferences
• Analyse Website traffic
• Measure advertising performance
• Support personalised advertising and remarketing

Certain cookies are only placed after obtaining your consent through our cookie consent banner. You can manage your cookie preferences at any time through our cookie settings tool or browser settings.

Further details are available in our Cookie Policy.

8. Advertising and Analytics

We may use third-party services including but not limited to:

• Google Analytics
• Google Ads
• Meta (Facebook and Instagram) 
• Klaviyo

These providers may collect information regarding your interaction with our Website for analytics and advertising purposes. Where required by law, such technologies are only activated after obtaining your consent.

9. Sharing Your Personal Data
We may share personal data with trusted third parties including:

• Payment service providers
• Delivery and courier companies
• Ecommerce platform providers
• Hosting and IT service providers
• Marketing and advertising partners
• Analytics providers
• Professional advisers (legal, accounting, compliance)
• Regulatory authorities where required by law

All third parties are required to process personal data securely and only in accordance with applicable data protection laws.


10. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are implemented, including:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other legally approved transfer mechanisms

You may request further information regarding these safeguards by contacting us.


11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. Retention periods may vary depending on the nature of the data and legal requirements.

For example:

Customer order records may be retained for up to 7 years for tax and accounting purposes. Marketing records are retained until consent is withdrawn or the information becomes inactive. When data is no longer required, it is securely deleted or anonymised.


12. Your GDPR Rights

You have the following rights:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent
• Rights relating to automated decision-making and profiling

To exercise any of these rights, please contact us using the details below.


13. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission (DPC)
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Website: www.dataprotection.ie

We would appreciate the opportunity to address your concerns before you contact the DPC.


14. Security

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised access
• Accidental loss
• Misuse
• Disclosure
• Alteration
• Destruction

While we take reasonable steps to protect your information, no online transmission can be guaranteed to be completely secure.

15. Provision of Personal Data

Certain personal data is necessary for us to fulfil orders and provide our services. If you do not provide required information, we may be unable to process your order or provide requested services.


16. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.


17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and will take effect immediately upon publication. We encourage users to review this Privacy Policy periodically.

18. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:

Michael Sheehan,
Tadhg O'Connor ltd,
New Line,
Rathkeale,
Co. Limerick.
V94 NT99
Ireland
Email: michaels@toc.ie
Website: www.toc.ie