Privacy Statement
How we use your information
Carrolls Irish Gifts (“We”) is a data controller for personal information provided by you, the data subject, (“You”) on our website. We will use this information subject to the General Data Protection Regulation (GDPR) and any applicable data protection legislation in Ireland and the E.U. We are committed to protecting and respecting your privacy.
This Privacy Statement sets out the basis on which we collect personal information about you or that you provide to us on our website www.carrollsirishgifts.com. If you have any queries in relation to our use of your information you may contact GDPR Team (gdprteam@carrollsirishgifts.com).
Personal information collected
We collect and use the following kinds of personal information:
Using personal information
We may use your personal information for the purposes of:
Legal basis for processing
We collect and use your personal information on one or more of the following grounds:
Sharing your information
Your information is processed by Salesforce, Wave OMS, FedEx, An Post, DPD, Checkout.com, PayPal, Zendesk and Business Central.
We only provide the information that they need to perform their specific services. They may only use your data for the exact purposes we specify in our contract with them. We work closely with them to ensure that your privacy is respected and protected at all times.
Examples of why we share your data are: Operational companies such as delivery couriers, payment processing companies such as Checkout.com and Paypal, Direct marketing companies such as Active Campaign who help to ensure emails to you arrive to your inbox, our advertising partner Google for personalised advertising online services (see further details below), IT support companies and other business systems like Tryzens, Qualcomm, Zendesk, Business Central and Salesforce who help to ensure you can place orders on our website and that we can support you in doing same
We also use tools provided by Google and Facebook to analyse your shopping preferences and how you interact with or use our website.
Personalised online advertising via Google Customer Match
Where we have your consent to do so, we share certain personal information about you with Google [(specifically Google Ireland Limited)] via their Customer Match Service to show personalised online advertising about our goods to you, other existing customers and prospective customers.
Where Google identify that you are also a customer of theirs (because the hashed data uploaded to them matches the hashed data they hold on their customers), they use the matched data alongside their own information about you to: (i) show you personalised offers and advertising from Carrolls Irish Gifts; (ii) inform the marketing shown to our other existing customers; and (iii) identify and display advertising to individuals who are not currently our customers but who have similar demographics and interests to our existing customers. The personalised offers and advertising referred to are shown by Google on their platforms, such as: Google Search, the Google Shopping tab, Gmail, YouTube, the Google networks. [Carrolls and Google both act as controllers regarding this processing.]
Please see Google's Privacy Notice and this Google article for more information about how Google uses personal information via Google Customer Match.
Where the hashed data uploaded to Google does not match the hashed data they hold about their own customers, Google may still use it as part of policy compliance checks, but Google won't otherwise use it for Customer Match or any other Google product. After the matching process and policy compliance checks are complete, unmatched uploads are marked for deletion.
Our legal basis for sharing your personal information with Google for the personalised advertising purposes described above, is your consent. We request your consent for this purpose when you make a purchase through our website or when you subscribe to our newsletter and promotional emails. Where you choose not to consent, your personal information will not be shared with Google in the manner described above.
If you wish to opt out, you can at any time by: (i) contacting us at gdprteam@carrollsirishgifts.com; and (ii) deactivatinge the data processing by Google using the following link: https://adssettings.google.com/notarget. Please also see the "Your data protection rights" section below. Additionally, please see Google's Privacy Notice for further information on how Google action data protection rights.
International data transfers
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). In all such cases Carrolls Irish Gifts will only transfer such data where there is an adequate level of data protection in that country that is no less protective than that which is provided in Ireland.
Storing and securing your information
We are committed to protecting the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorised access and use.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Data Retention
We retain the personal data we collect from you where we have an ongoing legitimate need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
Your data protection rights
If you would like to request access to your information ask that we amend correct/update/port your information, object to the processing of your information, or seek the erasure or retention of your information please contact GDPR Team (gdprteam@carrollsirishgifts.com) setting out as much detail as possible.
You have the right to opt-out of marketing communications we send you and/or from use of your information for direct marketing at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (including objecting to direct marketing purposes), please contact us at gdprteam@carrollsirishgifts.com. If you choose to opt out of marketing emails, we will still send you non-promotional service emails, such as emails about your account.
If you have consented to the use of your information, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
We hope you are happy with how we use your information but if you are not you may lodge a complaint with the Data Protection Commissioner at info@dataprotection.ie.
Updates to this Privacy Statement
We may update this Privacy Statement from time to time in response to changing legal, regulatory, technical or business developments. When we update our Privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
You can see when this Privacy Statement was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.