Privacy Policy

This Privacy Policy describes how RockNShop (“we”, “our”, or “us”) collects, uses, and protects your personal information when you use our website [www.rocknshop.ie].

We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018.

1. Who We Are

RockNShop
Website: [www.rocknshop.ie]
Email: [[email protected]]
We are the data controller of your personal information.

2. What Data We Collect

We may collect and process the following types of personal data:

• Identity data – name, email address, billing and shipping address
• Payment data – payment method details authipay – we do not store full card info
• Order data – purchase history, order details
• Technical data – IP address, browser type, device info
• Usage data – how you interact with our website
• Marketing preferences – if you opt in to emails or promotions

3. How We Use Your Data

We use your data to:

• Process and deliver orders
• Communicate with you about orders, returns, or support
• Improve our website and services
• Send optional marketing communications (only with consent)
• Comply with legal obligations

We do not sell or rent your personal data.

4. Legal Basis for Processing

We process your data based on:

• Contractual necessity – to fulfill your order
• Legal obligation – for tax and accounting
• Consent – for marketing communications
• Legitimate interest – to improve user experience

5. Who We Share Your Data With

We only share your personal data with:

• Payment providers – Authipay
• Delivery partners – An Post

All third parties are GDPR-compliant and process data securely on our behalf.

6. Data Retention

We retain your data:

• For as long as necessary to fulfil the purposes it was collected for (usually 6 years for tax/legal reasons)
• You may request deletion at any time (see Section 8)

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Withdraw consent at any time
• File a complaint with the Data Protection Commission in Ireland

📩 To exercise your rights, contact us at [[email protected]].

9. Data Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

10. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

11. Changes to This Policy

We may update this policy from time to time. All changes will be posted on this page with an updated “Last updated” date.