Privacy & Cookie Policy

1. Who we are

David de Lacy, trading as Precious Prayers (registered business name no. 544415), San Miguel, Kill Lane, Dublin, Ireland, is the data controller for personal data collected through www.preciousprayers.ie. For any privacy question or request, contact us at [email protected] or +353 1 289 3650.

2. What we collect

  • Order details: name, billing and delivery address, email, phone number, items bought, and any engraving or gift message you give us.

  • Payment details: handled directly by Stripe and PayPal. We receive confirmation of payment but never your full card number.

  • Messages: what you send us by email, phone, contact form or social media.

  • Newsletter: your email address, if you sign up.

  • Reviews: your feedback, first name and county, if you send a testimonial.

  • Website data: IP address, device and browser type, and pages visited, collected through cookies (section 9).

We do not use your purchases to draw conclusions about your religious beliefs or any other sensitive matter.

3. Why we use it and our legal basis

  • Purpose = Legal basis

  • Processing, delivering and supporting your order, including returns = Performing our contract with you

  • Keeping accounting and tax records = Legal obligation

  • Answering your questions = Our legitimate interest in responding to you, or taking steps before a contract

  • Sending our newsletter and offers = Your consent; for past customers, similar-product emails you can opt out of at any time

  • Publishing your review = Your consent

  • Analytics and advertising cookies = Your consent

  • Website security and fraud prevention = Our legitimate interest in protecting our business and customers

4. Who we share it with

We never sell your personal data. We share it only with service providers who help us run the business, under contracts that protect it:

  • our website platform and host (Create.net);

  • payment providers (Stripe and PayPal);

  • couriers and postal services (DPD and An Post), to deliver your order;

  • our email marketing provider (Zoho), if you subscribe;

  • our accountant, and Revenue or other authorities where the law requires.

Cookies dropping into a Mason Jar

5. Transfers outside the EU

Some providers may store data outside the European Economic Area, for example in the United Kingdom (Create.net) or the United States (Google, Meta). Transfers to the UK rely on the EU's adequacy decision for the UK. Where they do, we rely on safeguards approved under data protection law, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Order and accounting records = 6 years after the end of the financial year, as Irish tax law requires

  • Customer messages =2 years after the query is closed

  • Newsletter details =Until you unsubscribe

  • Reviews =Until you ask us to remove them

  • Cookie data = As set out in the cookie list below

7. Your rights

Under the GDPR and UK GDPR, you have the right to:

  • access a copy of your personal data;

  • correct inaccurate data;

  • have your data erased;

  • restrict or object to our use of it;

  • receive your data in a portable format;

  • withdraw consent at any time, without affecting earlier use.

You can unsubscribe from marketing emails at any time using the link in every email. To use any other right, email [email protected]. We will respond within one month, free of charge, and may ask you to confirm your identity.

8. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 (www.dataprotection.ie). UK customers can contact the Information Commissioner's Office (www.ico.org.uk).

9. Cookies

Cookies are small files stored on your device. We use:

•         Essential cookies, which make the website and checkout work. These don't need your consent.

•         Analytics and advertising cookies (Google Analytics and Meta Pixel), which help us understand how the site is used and measure our advertising on Facebook and Instagram. We only set these if you click "Accept" on our cookie banner. You can change your choice at any time via [COOKIE SETTINGS LINK].

  • Cookie - Provider - Purpose - Expires

  • [Create.net essential cookies – confirm names] - Create.net - Shopping basket, checkout and remembering your cookie choice - Session / up to 1 year

  • _ga - Google Analytics - Distinguishes visitors to measure site use - 2 years

  • ga[ID] - Google Analytics - Keeps track of your visit session - 2 years

  • _fbp - Meta (Facebook/Instagram) - Measures and delivers our ads - 3 months

10. Social media

We run Precious Prayers pages on Instagram and Facebook. If you interact with us there, Meta's own privacy policy also applies.

11. Children

Our website is not intended for children under 16, and we do not knowingly collect their data. Where a gift is for a child, such as a First Holy Communion piece, we only use details you give us (such as a name for engraving) to make and send the item.

12. Security

Our website uses encrypted (SSL) connections, and access to customer information is limited to those who need it.

13. Changes

We may update this policy. The latest version will always be on this page, with the date it was last updated.