The owner of the data processed by this site is Darcy & Grey, Darcy & Grey ltd, 25 Priory Drive, Eden Gate, Delgany, Co Wicklow, Ireland (hereinafter: "Darcy & Grey"). The owner independently decides on the purposes and methods of the processing, as well as on the security procedures to be applied to guarantee confidentiality, integrity and availability of the data.
Optional or mandatory provision of data
Providing Darcy & Grey with your personal data, which is requested at various collection times, may be necessary to carry out the purposes indicated in the appropriate information, or this may be optional.
Any refusal to provide Darcy & Grey with such data when this is marked mandatory renders it impossible to pursue the main purpose of that collection. Supplying Darcy & Grey with subsequent data, other than data marked as essential, is conversely optional, and does not result in any consequences in terms of completing the main purpose of such collection.
At the present time, some of the data controllers who process your data are as follows:
- An Post, which handles the processing of data needed to perform delivery, purchased on our web site;
- Shopify for processing data concerning management and server maintenance services for Darcy & Grey;
- Allied Irish Bank regarding payments of goods.
The updated list of our Data controllers is available at Darcy & Grey’s office; for further details, please contact us by phone or e-mail, typing “privacy” as the subject.
According to Irish law, you always have the right to obtain confirmation from Darcy & Grey as to whether or not personal data concerning you was processed, even if it has not yet been recorded, and to be communicated such data in an intelligible form.
- an update, correction, addition of your personal data;
- the cancellation, conversion to an anonymous form or blocking of any personal data that was processed in violation of the law, including data which it is not necessary to store for the purposes for which said data was collected or subsequently processed;
- an attestation that notice of the operations indicated;
- was given, including as concerns their content, to those people whose data was communicated or disseminated, except in the event that such measure proves to be impossible or entails using means which are clearly disproportionate with regard to the right protected.
You nevertheless have the right to object, in part or in full:
- for legitimate reasons, to the processing of personal data concerning you, even if it is pertinent to the purpose for which it was collected;
- to the processing of personal data concerning you for the purposes of sending advertising or direct marketing materials, or for completing market research or commercial communications activities.
You may exercise your rights freely and at any time, by sending a written request to Darcy & Grey at the mailing address, or by sending an e-mail to email@example.com typing “privacy” as the subject, and we will promptly reply.
In order to guarantee that your personal data is always accurate, up-to-date, pertinent and complete, please inform us of any changes that have occurred via e-mail to us, selecting “privacy” as the subject.
- processing data exclusively for the purposes and according to the methods illustrated in the information presented when the data was collected;
- only using the data for purposes in addition to those for which it was specifically released when the user has expressly consented;
- only providing access to data to third parties for purposes which are essential for performing the service requested and within the context of appointing a data controller; not communicating data, assigning it or transferring it to third parties for their own specific processing unless the users have been informed in advance and have given their consent;
- responding to requests for cancelling, changing or adding the data provided, opposing the processing of data for the purposes of sending commercial and advertising information;
- insuring proper and lawful data management, safeguarding the privacy of users, as well as applying appropriate security measures to protect the confidentiality, integrity and availability of the data provided.
How and why we process your personal data
Your personal data is processed using primarily electronic and telematic means by Darcy & Grey and by other parties who, having been appropriately selected for their reliability and expertise, perform operations which are instrumental to pursuing purposes that are strictly related to use of the web site, its services and to the purchasing of products through the web site.
Generally, the data is processed to perform the following services, which are available by accessing our site:
- registration or subscription to services offered by the Darcy & Grey, such as, for example, the benefits proposed by Darcy & Grey sharing your likes with friends of yours who are registered on the site, and through your social media accounts;
- order fulfilment and related activities;
- management of payments, including anti-fraud control in case of payment by credit/debit card (in which case the data released during the purchase process will be sent to the person in charge of antifraud control);
- management of your requests: technical, of a commercial nature, regarding the progress of your orders, as well as requests for information in the broader sense;
- making contact with our service professionals;
- request to be considered as a member of our staff, by sending a CV;
- sending, upon your consent, and for marketing purposes, commercial communications through various channels, both electronic and telematic (e-mail, sms) as well as using traditional methods (paper-based mail, telephone).
Sending, upon your consent, for profiling purposes to improve your navigation experience on the site, commercial proposals which are in line with your interests. Profiling is carried out, for example, through the use of third party cookies.
In processing data that could directly or indirectly identify you, we seek to follow a principle of strict necessity.
Therefore, we have configured the site in such a way that your personal data is reduced to a minimum: therefore, the processing of your data is excluded when the purposes pursued in the individual cases can be achieved through the use of anonymous data (such as, for example, market research aimed at improving services) or through other means which allow the person concerned to be identified only in case of necessity or at the request of the authorities or police forces (such as, for example, for data relating to traffic and to your presence on the web site, or to your IP address).
Your data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary for the purposes prescribed by the law to pursue purposes for which the consent of the interested person is not requested; in these cases, data may be made available to third parties that will independently process it, and only for the aforementioned purposes (for example, in the case of a request made by the police or judiciary, or other competent entities.
Any processing purpose other than the one specified for which you have provided your personal data shall be demonstrated in the information and shall only be pursued by Darcy & Grey upon obtaining your express consent.
Lastly, we inform you that your personal data will not be transferred abroad to countries that do not belong to the European Union, or which do not provide adequate levels of personal protection. In the event this is necessary to provide you with services, or to enter into a contract with Darcy & Grey to purchase products, we assure you that the transfer of your personal data to countries which do not belong to the European Union or which do not provide an adequate level of protection shall be performed only prior to the signing by Darcy & Grey and said parties of specific contracts in accordance with the applicable law and regulations.
Darcy & Grey may end up processing personal data of third parties which has been directly communicated to Darcy & Grey by its own users, for example in the case where a user has purchased a product to give to a friend, or when the party paying the price to purchase the product is different from the party for whom the product is intended, or even when the user intends to inform a friend of a service on darcyandgrey.com or of a sales offer of a particular product.
We inform you that these parties’ consent is not necessary when the data is communicated to Darcy & Grey to enter the contract, with Darcy & Grey, in favour of the third party.
Darcy & Grey reserves the right to eliminate Darcy & Grey accounts and all related data in the event that unlawful content, content that is damaging to Darcy & Grey’s image and/or its products or those of third parties, or content which is nevertheless offensive or which promotes illegal or defamatory activities, pornographic content, content which incites people to violence, which promotes discrimination with regard to race, sex, religion or sexual orientation, is detected.
Parties that may process your personal data
Darcy & Grey has decided to use third parties to process your personal data for certain activities. Third parties who perform these operations have been appropriately selected and have the experience, capacity and reliability, and offer a suitable guarantee that they will fully comply with the current provisions on processing, including the data security profile.
These third parties have been appointed “data controllers” where necessary, and perform their activity according to the instructions given by Darcy & Grey, and under its control (see section “Data controllers”). We periodically verify that the controllers have performed the tasks assigned to them in a timely manner and that they continue to provide appropriate guarantees that the provisions on the protection of personal data have been fully respected.
Your data is then processed by the individuals in charge of the specific services; the class of agent that performs these activities is dependent on the purposes for which the data was provided, and is always indicated in the information presented to you when your personal data is released.
However, Darcy & Grey may not guarantee to its users that the measures adopted for the security of the site and the transmission of the data and information on the site limit or exclude any risk of access without consent, or dissemination of data by devices belonging to the user: we advise you to make sure that your computer is equipped with adequate software to protect against the transmission in data networks, whether through input or output (such as updated antivirus systems) and that your Internet service provider has adopted suitable measures on network data transmission security (such as, for example, firewalls and spam filters). On darcyandgrey.com, every purchase is made with the utmost security thanks to the use of the most advanced technological and coding systems (SSL).
Link to other web sites
Our site may contain links to other websites which may not have any connection to us.
Darcy & Grey does not control nor does it perform monitoring operations on these web sites and their content.
If you wish to receive further information on how Darcy & Grey processes your personal data, please write an e-mail to the e-mail address firstname.lastname@example.org “privacy”.
That personal data will be processed in accordance with fundamental rights and freedoms, as well as with dignity for the person concerned, particularly as concerns confidentiality, personal identity and the right to protection of personal data.
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at email@example.com
What is a cookie and what is its purpose?
A cookie is a small file that is sent to the browser and saved on your device when you visit a website like darcyandgrey.com (“the website”).
Cookies allow the site to function efficiently and improve its services, in addition to providing information to the site owner for statistical or advertising purposes, primarily to personalise your navigation experience by remembering your preferences (for example, remembering the language and currency you set, in order to recognise you at the next visit, etc.).
Which cookies do we use and for what purposes?
Our website uses various types of first party cookies (organized and managed by Darcy & Grey ltd), and third party cooks (organized and managed by third parties based on their own individual privacy policies and not under the control of Darcy & Grey ltd) and similar technologies, each of which has a specific function. Below is a table explaining them.
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
For more information check out:
Social Network Cookies
How can I disable cookies and manage my preferences?
The majority of browsers are configured to accept, control or potentially disable cookies through the settings. We nevertheless remind you that disabling navigation or functional cookies may affect the functioning of the website and/or limit the service we offer.
Below is the procedure to follow to manage cookies from the following browsers:
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
What do we do with your information?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
We may disclose your personal information if we are required by law to do so or if you violate our Terms & Conditions.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Age of Consent
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
Questions and Contact Information
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact us at firstname.lastname@example.org or by mail at Darcy & Grey (Re: Privacy Compliance Officer), 25 Priory Drive, Eden Gate, Delgany, Co Wicklow.