Privacy Policy

PRIVACY POLICY – IVY & NORA DUBLIN

1.3

Our website uses SSL/TLS encryption for your security. You can recognize this by the "https://" and the padlock icon in your browser address bar.

2) Data Collection When Visiting Our Website

When you visit our website without creating an account or placing an order, we collect only the data your browser sends to our server (server log files), including:

  • Visited page(s)

  • Date and time of access

  • Data volume transferred

  • Source/referral (how you found us)

  • Browser type and version

  • Operating system

  • IP address (anonymized where possible)

Processing is based on Art. 6(1)(f) GDPR, serving our legitimate interest in ensuring the stability, security, and performance of our website.

3) Cookies

We use cookies to improve your browsing experience, enable certain functions, and analyze website traffic.

  • Session cookies are deleted when you close your browser.

  • Persistent cookies remain until they expire or you delete them.

Some cookies are essential for the ordering process (for example remembering cart items).
We may also work with third-party providers for marketing and analytics.

You can control cookies via your browser settings:

Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/kb/ph21411
Firefox: https://support.mozilla.org/kb/cookies
Edge: https://support.microsoft.com/help/4027947
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

If you disable cookies, certain site features may not function properly.

4) Contacting Us

If you contact us via email or a form, we store the data you provide to answer your inquiry.

Legal basis:

  • Art. 6(1)(f) GDPR – legitimate interest in responding to inquiries

  • Art. 6(1)(b) GDPR – if your inquiry relates to an order or contract

5) Customer Accounts & Order Processing

When you create an account or place an order, we collect and process your data to:

  • Process and deliver your order

  • Provide customer support

  • Comply with legal obligations

After your order is completed, your data is stored according to applicable tax and commercial retention laws.

6) Email Marketing

Newsletter:
Sent only with your explicit consent (Art. 6(1)(a) GDPR) via a double opt-in process.

Existing customers:
We may email you offers for similar products (Art. 6(1)(f) GDPR). You can unsubscribe at any time.

7) Data Sharing for Order Fulfillment

We share your data only when necessary to process and deliver your order, for example with:

  • Shipping providers

  • Payment processors (e.g. PayPal, Klarna, major credit cards)

  • Fraud prevention services

All partners process your data in accordance with GDPR requirements.

8) Payment Providers

Payment methods may include PayPal, Klarna, and major credit cards.

Each payment provider processes your data according to their own privacy policy, which we recommend reviewing.

9) Social Media Plugins

We use Shariff integration for social platforms such as Facebook, Instagram, and Google, ensuring that no data is transferred unless you actively click a share button.

10) Online Marketing & Analytics

We may use services such as:

  • Google Analytics (with IP anonymization)

  • Facebook Pixel (with consent) for advertising optimization

  • Google Ads Conversion Tracking

You may opt out at any time via your browser settings or the respective provider’s opt-out tools.

11) Your Data Protection Rights

Under GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (Right to be Forgotten)

  • Restrict processing

  • Data portability

  • Withdraw consent at any time

  • Object to processing for direct marketing

  • File a complaint with your data protection authority

To exercise your rights, please contact:
info@ivyandnora.com

12) Data Retention

We store your personal data only for as long as necessary:

  • For the purpose it was collected

  • To fulfill contracts and legal obligations

  • Until you withdraw consent (where applicable)

After the retention period, data will be securely deleted.