Privacy notice

Who is responsible for your information

Arán Amháin, 172 Tonlegee Road, Raheny, Dublin D05 H1X0, is the controller of the personal information described here. Questions and privacy requests can be sent to info@aranamhain.ie.

What we collect and why

• Your name, email, phone number, order, collection or delivery details and any notes, so we can take payment, prepare and fulfil your order, contact you about it and deal with support or refunds. We use this information because it is necessary for our contract with you.
• Payment and transaction references needed to reconcile payments, prevent fraud and keep business records. Stripe processes your card details; we do not store your full card number. We use these records to perform our contract, meet legal obligations and operate the bakery responsibly.
• Your marketing choice, the wording shown and when and where you opted in or withdrew. If you tick the optional checkout box, we use your consent to send occasional bake reminders, product news and offers. Order confirmations, payment messages and fulfilment reminders are service messages and do not depend on marketing consent.
• If you answer a Founder survey, we store the selected option, timestamps and a one-way hash of a random 90-day browser cookie. This lets us count one current response per browser without attaching the answer to your name, email, order or raw cookie value.

Who helps us provide the service

We share only the information needed with service providers that host or run the shop and database, process payments, deliver transactional email, provide address and map features, and—only when you opt in—manage marketing email. These currently include Vercel, Supabase, Stripe, Resend, Google Maps and Brevo. Some providers may process information outside the EEA using the safeguards described in their privacy terms. We do not sell your personal information.

How long we keep it

We keep order and financial records only as long as needed for the purposes above, including the normal six-year period required for relevant Irish tax records. We keep marketing consent evidence while we rely on it. If you unsubscribe, Brevo and our records keep the minimum information needed to honour that choice and prevent further marketing.

Your choices and rights

Marketing is optional and the checkout box is unticked by default. Every marketing campaign includes an unsubscribe option. You can also email us to withdraw consent or object to direct marketing at any time. Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability or object to how we use your information. You may also complain to the Irish Data Protection Commission.