Privacy Policy

Data Controller Information

deepstackes Ltd is the data controller responsible for your personal data. We are a company registered in Ireland with registration number 582739, and our registered office is located at 180 Patrick Street, Cork T16 9048, Ireland.

For any privacy-related enquiries, please contact us at privacy@deepstackes.pro or call us at +353 21 276 2857.

Data We Collect

The data we collect from you enables us to provide our premium online retail services and ensure a personalised shopping experience. We collect various types of personal data depending on how you interact with our services:

• Account Information: Name, email address, postal address, telephone number, and account preferences when you create an account or make a purchase.
• Transaction Data: Payment information, billing address, order history, and delivery preferences for processing your purchases.
• Communication Data: Records of your correspondence with our customer service team, including emails, phone calls, and chat messages.
• Technical Data: IP address, browser type, device information, and website usage patterns collected through cookies and similar technologies.
• Marketing Preferences: Your consent preferences for receiving marketing communications and promotional offers.

How We Use Your Information

We use your personal data for specific purposes based on legitimate legal grounds under GDPR. Here's how we use your information and our legal basis for processing:

• Order Processing (Contract Performance): To process your orders, arrange delivery, and provide customer support related to your purchases.
• Account Management (Contract Performance): To maintain your customer account, process payments, and manage your preferences.
• Customer Service (Legitimate Interest): To respond to your enquiries, resolve issues, and improve our service quality.
• Legal Compliance (Legal Obligation): To comply with tax, accounting, and other legal requirements in Ireland and the EU.
• Marketing (Consent): To send you promotional materials and special offers, only with your explicit consent.
• Website Improvement (Legitimate Interest): To analyse website usage and improve our online services and user experience.

Data Sharing and Disclosure

We respect your privacy and only share your personal data when necessary for legitimate business purposes or legal requirements:

• Service Providers: We share data with trusted third-party providers who help us deliver our services, including payment processors, delivery companies, and IT service providers.
• Legal Requirements: We may disclose your data to comply with legal obligations, court orders, or regulatory requests from Irish or EU authorities.
• Business Transfers: In the event of a merger, acquisition, or business sale, your data may be transferred as part of the business assets.

We never sell your personal data to third parties for marketing purposes, and all our service providers are bound by strict data protection agreements.

International Data Transfers

As deepstackes operates primarily within the European Union, most of your personal data is processed within the EU/EEA. However, some of our service providers may be located outside the EU.

When we transfer data outside the EU, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission, Standard Contractual Clauses, or other approved transfer mechanisms under GDPR.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations:

• Account Data: Retained for the duration of your account plus 7 years after closure for legal and tax compliance purposes.
• Transaction Records: Kept for 7 years after the transaction for accounting, tax, and legal compliance requirements.
• Marketing Data: Retained until you withdraw consent or for 3 years from your last interaction with our marketing communications.
• Website Analytics: Anonymous analytics data is retained for up to 26 months to help us improve our services.

Your Rights

Under GDPR, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@deepstackes.pro:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request limitation of how we process your data in specific situations.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

If you're not satisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission or your local data protection authority.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• SSL encryption for all data transmission between your browser and our servers
• Secure data storage with access controls and regular security audits
• Staff training on data protection and confidentiality requirements
• Regular security assessments and updates to our systems and procedures
• Incident response procedures to address any potential data breaches promptly

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

You can control cookie settings through your browser preferences, and you can opt out of analytics tracking through our cookie consent banner or by visiting our Cookie Policy page.

Children's Privacy

deepstackes does not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal data to us should contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by email or through a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following details: