Effective: April 2026

Mulberry House is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your personal information either through our online or physical shop, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Data Protection Act 2018 (Ireland), and the ePrivacy Regulations (S.I. No. 336 of 2011).

Information You Provide Directly

•      Full name, billing address, delivery address, email address, and telephone number when requesting a quotation, samples, brochures, placing an order or creating an account.

•      Payment card details — processed securely through Shopify Payments / Stripe. We do not store card numbers.

•      Communications you send us via email, contact forms, live chat, or telephone.

•      Marketing preferences, including newsletter sign-up consent.

•      In-store: details collected when placing requesting a quotation, samples, brochures, placing an order, arranging delivery, applying for finance, or creating an account.

Information Collected Automatically

•      Device identifiers, IP address, browser type, and operating system when you visit our website.

•      Browsing behaviour: pages visited, products viewed, time on site, referral source.

•      Cookie identifiers and session data (see Cookie section below).

•      Transaction history, communication history and order records.

 

We only process your personal data where we have a lawful basis under GDPR Article 6:

Purpose
Processing your order and arranging delivery
Processing payments
Sending order confirmations and delivery updates
Handling returns, complaints, and warranty claims
Fraud prevention and website security
Sending marketing emails and offers
Improving our website and customer experience
Compliance with tax and legal obligations

 

We do not sell, rent, or trade your personal data. We share data only where necessary to fulfil your order or comply with legal obligations:

•      Delivery partners: Delivery partners: carrier details shared solely to fulfil your delivery.

•      Payment processors: Payment processors: Shopify Payments / Stripe. PCI-DSS compliant and subject to their own GDPR obligations.

•      Email marketing: Email marketing platform: where you have opted in, your name and email are processed by our email provider under a Data Processing Agreement.

•      Finance providers: Finance providers: if you apply for a payment plan, your data is shared with our approved finance partner with your explicit consent.

•      Analytics: Analytics tools: anonymised data shared with Google Analytics 4 and Meta Pixel under appropriate safeguards.

•      Legal: Legal authorities: where required by law, court order, or Irish regulatory authority.

 

Data Type	Retention Period
Order and transaction records	7 years (Irish Revenue / VAT obligations)
Warranty and product complaints	6 years from date of purchase
Marketing data	Until consent withdrawn, or 3 years of inactivity
Website analytics / cookies	13 months maximum
Correspondence / enquiries	2 years from last contact

 

Right	What It Means
Right of Access	Request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification	Ask us to correct inaccurate or incomplete data.
Right to Erasure	Request deletion where there is no compelling reason to continue processing.
Right to Restrict Processing	Ask us to limit how we use your data in certain circumstances.
Right to Data Portability	Receive your data in a structured, machine-readable format.
Right to Object	Object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent	Withdraw marketing consent at any time. Use the unsubscribe link in any email.
Right to Complain	Contact the Data Protection Commission (DPC) at www.dataprotection.ie.

 

To exercise any right, contact us at info@mulberryhouse.ie. We will respond within 30 days and may need to verify your identity.

We use cookies in accordance with the ePrivacy Regulations (S.I. No. 336 of 2011). Non-essential cookies require your consent, obtained through our cookie banner on first visit.

•      Strictly necessary: Strictly necessary cookies: essential for the website to function. No consent required.

•      Analytics: Analytics cookies (consent required): Google Analytics 4, anonymised. Retention: 13 months.

•      Marketing: Marketing cookies (consent required): Meta Pixel for advertising. Opt out at youronlinechoices.eu.

•      Functional: Functional cookies (consent required): remember your preferences.

You may manage cookie preferences at any time via the cookie settings link in our website footer.

 

Some providers (Shopify, Google, Meta) process data outside the EEA. Where this occurs, we ensure appropriate safeguards such as EU Standard Contractual Clauses (SCCs) are in place.

We implement appropriate technical and organisational measures including SSL/TLS encryption (HTTPS), restricted staff access, and regular security reviews.

DATA CONTROLLER Mulberry House info@mulberryhouse.ie

PRIVACY ENQUIRIES info@mulberryhouse.ie

SUPERVISORY AUTHORITY Data Protection Commission www.dataprotection.ie Tel: 01 765 0100

 

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC), 21-25 Canal Road, Dublin 6, D06 WK48.