This policy explains what personal information we collect when you visit kiddo.ie or buy from us, why we need it, and your rights under GDPR.

Who is responsible for your data

What we collect

• Your details: name, email, phone number, billing and delivery address.
• Your orders: what you bought, when, and how much you paid.
• Your account: login details and order history, if you create an account.
• Messages: what you write to us by email or through the contact form.
• Website use: pages visited, browser and device type, counted without cookies.

We do not see or store your card details. Stripe handles them.

Why we use it

• To take, deliver and support your order (needed for our contract with you).
• To keep tax and accounting records (legal obligation).
• To prevent fraud and improve our website (legitimate interests).
• To send marketing emails, only if you ask for them (your consent).

Who we share it with

• Our supplier in Northern Ireland (UK): your name, delivery address, phone number and the items you ordered, so they can pack and send your order directly to you.
• Couriers: to deliver your order.
• Stripe: to take your payment securely.
• Our website host and email provider: to run the website and send emails.

We never sell your personal data.

Cookies

We only use cookies that the shop needs to work, such as your cart and your login. Our visitor statistics (Matomo) run on our own website without cookies, so we do not ask for cookie consent.

How long we keep it

• Order records: 7 years, for tax and accounting.
• Your account: until you close it.
• Emails and messages: 2 years.
• Marketing preferences: until you unsubscribe.

Your rights

You can ask to see, correct or delete your data, limit or object to how we use it, get a copy in a portable format, or withdraw consent at any time. Email info@kiddo.ie. We reply within 30 days.

Children

Our shop is for parents and adults. We do not knowingly collect data from children under 16.

Complaints

If you are unhappy with how we handle your data, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or at dataprotection.ie.