top of page

Privacy Policy

Effective Date: September 16, 2026

​

At tuloopshop.com, operated by Kinga Ekert, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

This policy complies with the General Data Protection Regulation (GDPR) and applicable Irish data protection legislation.

1. Data Controller Information

tuloopshop.com

  • Owner/Operator: Kinga Ekert

  • Location: Mallow, Co. Cork, Ireland

  • Contact Email: info@tuloopshop.com

2. Information We Collect

We collect personal information that you voluntarily provide to us when you make a purchase, create an account, or contact us.

  • Identity Data: First name, last name.

  • Contact Data: Billing address, delivery address, email address, phone number.

  • Financial & Transaction Data: Payment details (processed securely via our payment gateways) and purchase history.

  • Technical Data: IP address, browser type, device details, and cookie data collected automatically when navigating our site.

3. How We Use Your Data

We use your personal data for the following lawful purposes:

  • Order Fulfillment: Processing payment, packaging, shipping, and sending order status updates.

  • Customer Support: Responding to inquiries, return requests, or custom product orders.

  • Legal Compliance: Fulfilling tax, legal, and accounting obligations under Irish and EU law.

  • Marketing: Sending newsletter updates or promotional offers (only with your explicit opt-in consent).

4. Legal Basis for Processing (GDPR)

  • Contractual Necessity: Processing needed to fulfill your orders and deliver goods.

  • Legal Obligation: Processing required to comply with financial and tax laws.

  • Legitimate Interests: Operations necessary to manage and improve our business while respecting your rights.

  • Consent: For direct marketing communications (which you can withdraw at any time).

5. Data Sharing & Third Parties

We do not sell your personal data. We only share necessary information with trusted third-party service providers who assist us in operating our business:

  • Payment Processors: Secure processing of payments (e.g., Stripe, PayPal).

  • Shipping & Postal Services: Local and international delivery carriers (e.g., An Post, courier services) to fulfill your shipment.

  • Hosting & IT Service Providers: Platforms supporting our website infrastructure and security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or statutory tax requirements (typically up to 6 years for financial records in Ireland).

7. Your Data Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Request correction of inaccurate or incomplete data.

  • Erasure ("Right to be Forgotten"): Request deletion of your personal data where legally permissible.

  • Restriction & Objection: Object to or restrict certain processing activities.

  • Data Portability: Request transfer of your data to another entity.

  • Withdraw Consent: Withdraw marketing consent at any time.

To exercise any of these rights, please contact us at [Insert Contact Email]. You also have the right to lodge a complaint with the Data Protection Commission (DPC) of Ireland (www.dataprotection.ie).

8. Cookies

Our store uses essential cookies to enable shopping cart functionality and site navigation. Non-essential cookies (such as analytics or marketing cookies) are only deployed with your consent via our website's cookie banner.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be indicated by the revised "Effective Date" at the top.

bottom of page