Privacy Policy

Last Updated: 28th day of September 2026

1. Introduction

MysticMoments Soap Ireland (“MysticMoments Soap Ireland”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you:

  • Visit our website;
  • Purchase products from us;
  • Contact us by email, telephone, social media, or contact forms;
  • Subscribe to newsletters and marketing communications;
  • Attend events, markets, workshops, or exhibitions organised by or involving us;
  • Interact with our advertising and social media content;
  • Use any services operated by MysticMoments Soap Ireland.

We process personal data in accordance with:

  • General Data Protection Regulation (“GDPR”);
  • Irish Data Protection Act 2018;
  • EU ePrivacy rules;
  • Applicable consumer protection legislation;
  • Other applicable international privacy laws where required.

2. Data Controller

The Data Controller responsible for your personal data is:

MysticMoments Soap Ireland

Business Registration Number: 775-411

D-U-N-S Number: 66-99-763-12

Address:

71 Harbour Street

Mountmellick

Co. Laois

R32 F343

Ireland

Email: dataprotection@mysticmomentssoap.ie

General Enquiries: info@mysticmomentssoap.ie

Telephone: +353 57 850 3857

Website: mysticmomentssoap.ie

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Identity Information

  • Full name
  • Date of birth (where required)
  • Customer account details
  • Social media usernames provided by you

Contact Information

  • Email address
  • Billing address
  • Shipping address
  • Telephone number

Transaction Information

  • Products purchased
  • Purchase history
  • Order references
  • Payment confirmations
  • Refund records

Payment Information

Payments are processed by authorised third-party payment processors.

We do not store complete payment card details.

We may receive:

  • Payment confirmation
  • Transaction reference numbers
  • Payment status information

Technical Information

When visiting our website, we may collect:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Referral URLs
  • Geographic region
  • Time zone
  • Website usage data

Marketing Information

  • Newsletter preferences
  • Marketing consent records
  • Competition entries
  • Survey responses
  • Customer feedback

Communications Data

Information contained in:

  • Emails
  • Contact forms
  • Social media messages
  • Customer support requests
  • Reviews and testimonials

4. Special Categories of Data

We do not intentionally collect special category data such as:

  • Health information
  • Religious beliefs
  • Political opinions
  • Biometric data
  • Genetic data

If you voluntarily provide information relating to allergies, sensitivities, or health concerns when discussing products, we will process that information only for customer service purposes and in accordance with applicable law.

5. How We Collect Personal Data

We collect information:

Directly From You

When you:

  • Place an order
  • Create an account
  • Contact us
  • Subscribe to newsletters
  • Participate in promotions
  • Leave reviews

Automatically

Through technologies including:

  • Cookies
  • Website analytics
  • Server logs
  • Pixels
  • Similar tracking technologies

Please review our Cookie Policy for additional information.

From Third Parties

Including:

  • WooCommerce
  • Payment processors
  • Delivery providers
  • Social media platforms
  • Marketing service providers
  • Fraud prevention services

6. Lawful Bases for Processing

Under GDPR, we rely on one or more lawful bases for processing personal data:

Contract

Processing necessary to:

  • Fulfil orders
  • Process payments
  • Deliver products
  • Manage customer accounts

Article 6(1)(b) GDPR

Legal Obligation

Processing required to comply with:

  • Tax laws
  • Accounting regulations
  • Consumer protection requirements
  • Court orders
  • Regulatory obligations

Article 6(1)(c) GDPR

Legitimate Interests

Where necessary for:

  • Fraud prevention
  • Website security
  • Business analytics
  • Customer service
  • Improving products and services

Article 6(1)(f) GDPR

Consent

Where required for:

  • Marketing communications
  • Optional cookies
  • Promotional activities

Article 6(1)(a) GDPR

You may withdraw consent at any time.

7. How We Use Your Information

We use personal data to:

  • Process and fulfil orders;
  • Deliver products and services;
  • Communicate about purchases;
  • Respond to enquiries;
  • Manage customer support requests;
  • Prevent fraud and abuse;
  • Improve our products and services;
  • Administer accounts;
  • Conduct analytics;
  • Maintain security;
  • Comply with legal obligations;
  • Send marketing communications where consent has been provided.

8. Marketing Communications

Where legally permitted, we may send:

  • Newsletters
  • Product updates
  • Promotions
  • Event announcements
  • Business updates

You may unsubscribe at any time by:

  • Using the unsubscribe link;
  • Contacting us directly;
  • Emailing dataprotection@mysticmomentssoap.ie.

Withdrawal of consent does not affect previous lawful processing.

9. Sharing Personal Information

We may share data with trusted third parties including:

E-Commerce Providers

  • WooCommerce
  • Website hosting providers

Payment Providers

  • Card payment processors
  • PayPal
  • Apple Pay
  • Google Pay
  • Banking partners

Delivery Providers

  • An Post
  • Courier services
  • Shipping partners

Professional Advisers

  • Solicitors
  • Accountants
  • Auditors
  • Insurers

Technology Providers

  • Analytics services
  • Security providers
  • Email marketing platforms
  • Cloud storage providers

Each provider is required to process personal data lawfully and securely.

10. International Data Transfers

Some service providers may process data outside Ireland or the European Economic Area (“EEA”).

Where international transfers occur, we implement safeguards such as:

  • European Commission Standard Contractual Clauses (SCCs);
  • UK International Data Transfer Agreements where applicable;
  • Adequacy Decisions;
  • Other approved legal safeguards.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against:

  • Unauthorised access;
  • Accidental loss;
  • Destruction;
  • Alteration;
  • Disclosure;
  • Misuse.

Measures may include:

  • Secure payment processing;
  • Encryption;
  • Access controls;
  • Password protection;
  • Website security monitoring;
  • Staff confidentiality obligations.

No transmission method can be guaranteed 100% secure, but we take reasonable steps to safeguard information.

12. Data Retention

Personal data will only be retained for as long as necessary.

Typical retention periods may include:

Record TypeRetention Period
Customer OrdersUp to 7 years
Accounting RecordsUp to 7 years
Marketing ConsentsUntil withdrawn plus compliance period
Customer Service RecordsUp to 3 years
Website LogsUp to 12 months
Legal Claims RecordsAs necessary to establish, exercise or defend legal rights

Retention periods may be extended where legally required.

13. Your Rights

Subject to applicable law, you may have the right to:

Right of Access

Request a copy of your personal data.

Right to Rectification

Correct inaccurate or incomplete information.

Right to Erasure

Request deletion of your personal data in certain circumstances.

Right to Restriction

Request limited processing of your personal data.

Right to Data Portability

Receive your data in a structured and machine-readable format.

Right to Object

Object to certain processing activities.

Right to Withdraw Consent

Withdraw consent at any time.

Rights Relating to Automated Decision-Making

Request human review of significant decisions made solely by automated means where applicable.

14. Exercising Your Rights

You may exercise your rights by contacting:

Data Protection Contact

Email: dataprotection@mysticmomentssoap.ie

Address:

MysticMoments Soap Ireland

71 Harbour Street

Mountmellick

Co. Laois

R32 F343

Ireland

We may require identity verification before processing requests.

15. Complaints

If you believe your personal data has been handled improperly, please contact us first so that we can attempt to resolve the matter.

You also have the right to lodge a complaint with a supervisory authority.

For Ireland:

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2

D02 RD28

Ireland

Website: https://www.dataprotection.ie

Individuals located in other countries may contact their local supervisory authority.

16. Children’s Privacy

Our products, services, and website are not directed towards children under the age of 16.

We do not knowingly collect personal information from children without appropriate parental consent where required by law.

If we become aware of such collection, we will take reasonable steps to remove the information.

17. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for:

  • Privacy practices;
  • Security standards;
  • Content;
  • Policies

of third-party websites.

Users should review third-party privacy notices separately.

18. Reviews, Testimonials and User Content

Where customers submit:

  • Reviews;
  • Feedback;
  • Testimonials;
  • Photographs;
  • Social media content;

we may display such content for promotional purposes where legally permitted or where consent has been provided.

By submitting such content, you confirm that you own or have permission to share it.

19. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time.

Changes may occur due to:

  • Legal requirements;
  • Regulatory guidance;
  • Business changes;
  • New technologies;
  • Security considerations.

The latest version will always be available on our website.

Continued use of our website after changes become effective constitutes acceptance of the revised policy.

20. Contact Us

MysticMoments Soap Ireland

71 Harbour Street

Mountmellick

Co. Laois

R32 F343

Ireland

Data Protection Enquiries dataprotection@mysticmomentssoap.ie

General Enquiries info@mysticmomentssoap.ie

Telephone +353 57 850 3857

Website mysticmomentssoap.ie

Version: 1.0
Effective Date: 28th day of September 2026
Last Reviewed: 28th day of September 2026