Privacy & Cookie Policy

Privacy Policy

Effective Date: 13 August 2025

1. Introduction

Welcome to lashcraft.ie (“we,” “us,” “our”). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit or use our website and services. We are committed to protecting your privacy and ensuring transparency in how your information is handled.

By using our website, you agree to the terms of this Privacy Policy.

---

2. Data Controller & Contact

LashCraft is the data controller under the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018 in Ireland.

For inquiries or privacy-related requests, please contact us here:
https://lashcraft.ie/contact/

---

3. Data We Collect

Data you provide voluntarily

• Name, email address, phone number, and postal address (e.g., via contact forms, bookings, or account creation).

• Information provided when subscribing to our newsletter or marketing communications.

• Payment details when making purchases (processed securely via Stripe).

Data collected automatically

• IP address, browser type, device information, referral URLs, pages visited, and timestamps.

• Aggregated analytics data from Google Analytics to understand site usage and improve services.

Cookies and tracking technologies

We use cookies and similar tools to:

• Enable essential site functions.

• Remember preferences.

• Analyze traffic and performance.

• Support marketing campaigns (via Google Analytics and MailChimp tracking).

---

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent – e.g., when you opt in to receive marketing emails.

• Contractual necessity – e.g., when processing your bookings or purchases.

• Legitimate interests – e.g., improving our services, preventing fraud, and ensuring website security.

• Legal obligations – e.g., retaining records for tax compliance.

---

5. How We Use Your Data

We may use your personal data to:

• Provide and manage services you request (e.g., lash appointments).

• Process payments via Stripe.

• Respond to customer inquiries.

• Send marketing communications via MailChimp (only if you’ve opted in).

• Improve our website and services using Google Analytics insights.

• Fulfil legal and regulatory requirements.

---

6. Cookies & Tracking

We use the following categories of cookies:

• Essential cookies – Required for core site functionality.

• Functional cookies – Remember your settings and preferences.

• Analytics cookies – Track site usage via Google Analytics.

• Marketing cookies – Track engagement for targeted marketing (via MailChimp).

You can control or disable cookies in your browser settings.

---

7. Sharing Your Data

We do not sell or rent your personal data. However, we may share your data with:

• Google Analytics – For anonymous site usage statistics. Privacy Policy

• MailChimp – For email marketing communications. Privacy Policy

• Stripe – For secure payment processing. Privacy Policy

• Legal authorities – If required to comply with applicable law.

---

8. Data Retention

We keep your personal data only as long as necessary to:

• Fulfil the purposes outlined in this policy.

• Meet legal, accounting, or reporting obligations.

When no longer needed, your data will be securely deleted or anonymized.

---

9. Security Measures

We use SSL encryption, secure server hosting, access controls, and other safeguards to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

---

10. Your Rights (GDPR)

You have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate or incomplete data.

• Request deletion of your data (“right to be forgotten”).

• Restrict or object to processing in certain circumstances.

• Withdraw consent at any time (e.g., unsubscribe from marketing).

• Lodge a complaint with the Irish Data Protection Commission (https://www.dataprotection.ie).

To exercise these rights, please use our contact form:
https://lashcraft.ie/contact/

---

11. International Data Transfers

If your data is transferred outside the EU/EEA (e.g., to MailChimp servers in the US), we ensure adequate safeguards, such as Standard Contractual Clauses, to protect your privacy.

---

12. Children’s Privacy

Our services are intended for adults. We do not knowingly collect data from children under 16. If we discover that we have inadvertently collected such data, we will delete it promptly.

---

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this page regularly.

---

Cookie Policy

1. What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us remember your preferences, improve site performance, and personalize your experience.

---

2. Types of Cookies We Use

---

3. Third-Party Cookies

Some cookies are set by third parties:

• Google Analytics – Measures site traffic and user behavior. Google Privacy Policy

• MailChimp – Tracks email engagement and marketing effectiveness. MailChimp Privacy Policy

• Stripe – Supports secure payment processing. Stripe Privacy Policy

---

4. How to Manage Cookies

You can control and manage cookies through your browser settings:

• Google Chrome: Manage cookies

• Firefox: Manage cookies

• Safari: Manage cookies

• Microsoft Edge: Manage cookies

You can also opt out of Google Analytics tracking here:
Google Analytics Opt-out Browser Add-on

---

5. Changes to This Cookie Policy

We may update our Cookie Policy from time to time. Any updates will be posted on this page with a revised “Effective Date.”

---

Last updated: 13 August 2025