Privacy Policy

Last updated: xxx

At Marble City we take care with your personal data. This privacy statement explains what data we collect, why we collect it, and what your rights are.

1. Who we are

Marble City
Website: xxx
Email: xxx
Company registration (CRO) number: xxx
VAT number: xxx

Marble City is the data controller responsible for processing your personal data.

2. What data we process

We process the following data:

  • First and last name
  • Billing and delivery address
  • Email address
  • Phone number where provided (for example, for delivery or for contact about your order)
  • Order details (products, order number, date, payment status)
  • Payment data (via your chosen payment method — we do not receive full card details, but we do receive payment status and a transaction ID)
  • IP address and other technical data (such as browser type, time of visit, and pages viewed)
  • Any correspondence by email or through our contact form

3. Why we use your data

We use your data for:

Order processing and delivery. To process and dispatch your order and keep you updated on its status.

Customer service. To answer questions, comments, or complaints.

Payment and administration. To handle payments and meet our administrative and tax obligations.

Your account, if you have one. To store your order history and details so you can order more quickly next time.

Marketing, with your consent or within reasonable expectation. To tell you about news, offers, or new products — for example, by email newsletter.

Improving the website and preventing fraud. To analyse and improve the site, and to prevent misuse or fraud.

4. Legal basis for processing

We process your data on the basis of:

  • Performance of a contract — so we can deliver your order.
  • Compliance with a legal obligation — for example, record-keeping requirements for accounting and tax.
  • Our legitimate interests — such as improving our service, preventing fraud, and limited marketing to existing customers.
  • Your consent — for example, when you sign up to our newsletter.

5. How long we keep your data

We keep your data no longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law. In general:

  • Order and invoicing data: six years (← changed from seven. Irish Revenue requires records be retained for six years, not the seven required under Dutch tax law.)
  • Email correspondence: as long as needed to resolve your query or complaint, subject to a reasonable maximum.
  • Newsletter data: until you unsubscribe.
  • Technical data (log files): for a limited period, mainly for security and analysis.

6. Sharing data with third parties

We do not sell your data. We may share it with third parties where necessary to provide our service or where we are legally required to do so. For example:

  • Payment providers, to process your payment securely.
  • Delivery and courier services, to deliver your order to the right address.
  • IT and hosting providers, for the operation of the website and storage of data.
  • Accountants and bookkeepers, for financial administration.

Where third parties process data on our instructions, we have agreements in place to ensure an appropriate level of security and confidentiality.

7. Cookies and similar technologies

Our website may use cookies or similar technologies to:

  • make the website function correctly (functional cookies);
  • analyse how the website is used (statistics);
  • remember your preferences (for example, the contents of your basket).

We ask for your consent before placing any cookie that is not strictly necessary. (← changed. The Dutch original said “where necessary”; Irish ePrivacy Regulations require prior opt-in consent for all non-essential cookies, including analytics, with no implied-consent option.)

8. Security of your data

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, unwanted disclosure, and unauthorised alteration. These include:

  • A secure connection (HTTPS)
  • Access restrictions on our systems
  • Up-to-date software and security measures

No method of transmission or storage is completely secure, but we do everything we reasonably can to keep your data safe.

9. Your rights

Under data protection law you have a number of rights. You may:

  • Request access to the personal data we hold about you.
  • Request rectification if data is incorrect or incomplete.
  • Request erasure of your data, where we no longer need it and no legal retention obligation applies.
  • Request restriction of processing in certain circumstances.
  • Object to certain processing, for example to direct marketing.
  • Request data portability, receiving certain data in a structured, commonly used, machine-readable format.

To exercise any of these rights, contact us at xxx. We may ask you to verify your identity to prevent misuse.

You also have the right to lodge a complaint with the Data Protection Commission, Ireland’s supervisory authority, if you believe we are not handling your data properly. (← changed from the Dutch Autoriteit Persoonsgegevens.) You can contact them at 6 Pembroke Row, Dublin 2, D02 X963, or via dataprotection.ie.

10. Children

(This section needs a decision from you — see the note below the policy.)

Where we collect personal data from a child under 16, we do so only with the consent of a parent or guardian. If you believe we have collected a child’s data without that consent, please contact us and we will delete it.

11. Changes to this privacy statement

We may update this privacy statement from time to time, for example if our services or the law change. The most recent version is always available at xxx. The date at the top shows when it was last updated.

12. Contact

For questions about this privacy statement or about how we process your personal data, contact:

Marble City
Email: xxx
Website: xxx