Privacy Policy

Last updated: June 26, 2026

At Arty Magnets, we respect your privacy and treat your personal data with care. This Privacy Policy explains how we process personal data when you visit our online store, place an order, or contact us. The data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is Arty Magnets, Denhu Complex, Walkinstown Avenue, Dublin 12, D12 HW02, Ireland. You can contact us at hello@artymagnets.ie.

1. Categories of Personal Data We Process

• Identification & Contact: Name, billing and shipping address, email address, phone number.
• Order Data: Products purchased, prices, payment method, order history.
• Uploaded Photos (Custom Items): Photographs and images you submit to be printed on our custom magnets.
• Technical Data: IP address, browser type, device information, cookies, and log data.
• Communication Data: Messages sent through contact forms or email.

2. Purposes & Legal Basis (Art. 6 GDPR)

• Order Fulfilment & Custom Production: Processing your details and uploaded photos strictly to produce and deliver your requested items (Performance of contract — Art. 6(1)(b)).
• Tax & Accounting Records: Complying with Irish tax obligations (Legal obligation — Art. 6(1)(c)).
• Site Security & Fraud Prevention: Ensuring our store is secure (Legitimate interest — Art. 6(1)(f)).
• Marketing Emails: Sending updates and offers, only if you have opted in (Consent — Art. 6(1)(a)). You may withdraw this at any time.
• Cookies & Analytics: Improving our website experience (Consent — Art. 6(1)(a) for non-essential cookies).

3. Sharing Your Data (Recipients)

We share personal data only with trusted third-party processors strictly necessary to operate our store. These include our e-commerce platform (Shopify), secure payment gateways, shipping and fulfilment software (e.g., Shiptheory, UPS), and email providers. Each processor is bound by Art. 28 GDPR data-processing agreements.

Note on Photos: Your uploaded photos are only shared with our secure cloud storage providers for the sole purpose of printing your order. We never use customer photos for marketing without your explicit written consent.

4. Data Retention

We keep your data only for as long as necessary:
- Uploaded Photos: Deleted automatically from our active servers shortly after your order is fulfilled and the return/remake window has passed (typically within 30–60 days).
- Order & Accounting Data: Retained for 6 years to comply with Irish Revenue requirements.
- Marketing Data: Retained until you withdraw your consent.

5. International Transfers

Some of our service providers (like Shopify) process data outside the European Economic Area (EEA), such as in the United States. These transfers are legally safeguarded by Standard Contractual Clauses (Art. 46 GDPR) and supplementary security measures.

6. Your Rights (Articles 15–22 GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you (Art. 15).
• Rectification: Correct any inaccurate data (Art. 16).
• Erasure: Request the deletion of your data, where legal conditions are met (Art. 17).
• Restriction & Portability: Limit processing (Art. 18) or request your data in a structured format (Art. 20).
• Objection: Object to processing, including a complete opt-out of direct marketing at any time (Art. 21).
• Lodge a Complaint: You have the right to complain to the Data Protection Commission (DPC) in Ireland or your local supervisory authority.

7. Security & Contact

We implement appropriate technical and organisational measures to protect your personal data and uploaded photos against unauthorised access, in accordance with Art. 32 GDPR.

To exercise any of your rights, or if you have questions, please email us at hello@artymagnets.ie. We will respond within one month.