This privacy policy explains how RapidHeat Ireland handles personal information when you browse the store, contact us or place an order. We aim to use information fairly, keep it secure and collect only what is reasonably needed for the relevant purpose. Data protection law, including the General Data Protection Regulation (GDPR) and applicable Irish law, gives you rights over personal data.
Information we may collect
When you place an order, information may include your name, email address, telephone number, delivery and billing address, order details and communications with support. Payment is processed through Shopify checkout. We do not see or store your full payment card details; Shopify and relevant payment providers process payment information under their own services and terms.
When you use the website, technical information may be handled by the store platform or essential cookies needed for functions such as keeping a basket available and completing checkout. The precise information can depend on how you use the site and the services involved. Do not send sensitive personal information or full card details in an email unless specifically necessary and requested through an appropriate secure method.
Why we use personal data
- To accept, process and fulfil orders, arrange delivery and provide order updates.
- To answer questions, manage returns and address product or delivery issues.
- To operate essential website and checkout functions.
- To keep records required for legal, tax, accounting or consumer obligations.
- To protect the store, customers and our legitimate business interests where the law permits.
We use information for the purpose for which it was provided, or another compatible and lawful purpose. If we need to use it for a new purpose in a way that requires notice or consent, we will provide that information when appropriate.
Lawful bases and GDPR
Depending on the activity, processing may be necessary to perform a contract with you, comply with a legal obligation, pursue legitimate interests such as operating and protecting the store, or rely on consent where consent is required. You can withdraw consent where processing is based on consent; doing so does not affect processing that took place before withdrawal. We do not treat a request for support as permission for unrelated use of your details.
Shopify and service providers
Shopify provides the commerce platform and processes information needed to operate checkout and orders. Other service providers may help with payment, delivery, website operation, communications or security. They receive information only as needed for their role and are expected to handle it under applicable data protection requirements. Their services may involve processing in locations outside Ireland or the European Economic Area; where that occurs, the relevant provider is responsible for applicable transfer safeguards under its arrangements.
Sharing information
We do not sell personal information. We may disclose it to service providers involved in an order, to professional advisers where needed, or to public authorities where required by law. Information may also be shared to establish or defend legal claims or protect rights and safety. We limit disclosures to what is appropriate for the purpose.
How long we keep it
We retain order, transaction and correspondence information for as long as reasonably necessary to provide service, manage a return or query, meet legal and accounting duties, and resolve disputes. Retention periods can differ by record type and applicable requirements. When information is no longer needed, we take reasonable steps to delete it or remove identifying details, subject to lawful retention obligations.
Cookies and website operation
Essential cookies and similar technologies may be used for core functions such as a working basket and checkout. Your browser may allow you to manage cookies, although blocking essential cookies can affect how the store works. Any non-essential cookies or tracking features, if used, should be handled in accordance with applicable consent requirements and the choices presented to you.
Your rights and data requests
Subject to legal conditions and exceptions, you may ask for access to your personal data, correction of inaccurate information, erasure, restriction of processing, or portability. You may object to certain processing, including processing based on legitimate interests. You may also complain to the Irish Data Protection Commission if you believe your rights have not been respected.
To make a data request, email support@rapidheatie.com and describe what you are seeking. We may need to verify your identity and clarify the request before responding. We will handle it within the timeframe required by law. There is normally no fee, although applicable law permits a reasonable fee or refusal for manifestly unfounded or excessive requests.
Security and children
We use reasonable measures intended to protect information, but no internet transmission or storage system can be guaranteed completely secure. Please protect access to your email account and contact us promptly if you think an order account or message has been misused. The store is intended for general customers and is not designed to knowingly collect personal data directly from children.
Changes and contact
We may update this policy when our practices or legal requirements change. The current version on this page explains our approach. For questions or privacy requests, contact support@rapidheatie.com. Read our terms and contact information for related details.