Privacy notice
This notice explains what information we collect, why we use it and the choices you have.
Last updated 11 August 2026Who we are
Grá Duit is the data controller for this shop. You can contact us at [email protected].
Information we collect
We collect contact, delivery and order information you provide; basic technical security information; and your language, theme and communication preferences. Grá Duit does not store your full card details.
Why we use it
We use information to fulfil orders and delivery, process payments, prevent fraud, provide customer service, meet legal obligations and, where you choose, send occasional news.
Who we share it with
We use Medusa for orders, Stripe for payments, Resend for email and Cloudflare for hosting and security. We do not sell personal information. We share only what is needed to provide the service.
Retention and security
We keep order records as required for tax, accounting, warranties and disputes. Other information is deleted or anonymised when no longer needed. We use encryption in transit and restricted administrative access.
Your rights
Depending on where you live, you may ask for access, correction, deletion, restriction or portability of your information, or object to certain processing. Email [email protected]. You may also complain to the appropriate data-protection authority.