Privacy Policy

Last Updated: 28 March 2026 · Version: 1.0

1. Who We Are

Moodrise ("we", "our", "us") is an artisan bakery operating at moodrise.ie. We are the data controller responsible for your personal data. Contact: [email protected]

2. Data We Collect

  • Account data: name, email address (when you create an account via Clerk)
  • Order data: name, email, phone number, delivery address, order items
  • Payment data: payment is processed by Stripe; we do not store card details
  • Delivery data: address provided for delivery cost calculation (via Google Maps API)
  • Technical data: IP address, browser type, pages visited (if analytics enabled)

3. Legal Basis for Processing

  • Contract performance: processing your orders and delivering products
  • Legitimate interest: fraud prevention, security, improving our services
  • Legal obligation: financial record-keeping (7 years under Irish tax law)
  • Consent: sending marketing emails (you may opt out at any time)

4. Third-Party Data Processors

  • Clerk (Clerk.com): authentication and account management — USA (SCCs applied)
  • Stripe: payment processing — Ireland/EU, PCI DSS compliant
  • Amazon Web Services (S3 + CloudFront): media file storage — EU-West-1 (Ireland)
  • Google Maps API: delivery distance calculation — addresses processed by Google
  • Resend: transactional email delivery — EU servers

We ensure all processors are GDPR-compliant and have appropriate data processing agreements in place.

5. Data Retention

  • Order records: 7 years (required by Irish Revenue for tax purposes)
  • User accounts: until deletion requested by user
  • Analytics data: 14 months (Google Analytics default)
  • Support communications: 2 years

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right of Access: request a copy of your data
  • Right to Rectification: correct inaccurate data
  • Right to Erasure: request deletion of your personal data
  • Right to Portability: receive your data in machine-readable format
  • Right to Object: object to processing based on legitimate interests
  • Right to Restrict Processing: limit how we use your data
  • Right to Withdraw Consent: at any time, for consent-based processing

To exercise any right, email [email protected]. We will respond within 30 days.

You may also lodge a complaint with the Data Protection Commission (Ireland).

7. Cookies

We use cookies as described in our Cookie Policy. You can manage your cookie preferences at any time using the Cookie Settings link in our footer.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and regular security reviews.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or a prominent notice on our website. Continued use after changes constitutes acceptance.