Privacy Policy

Last updated: 23 July 2026

This policy explains what personal data Emberlight ("we", "us") collects, why, how we protect it, and the rights you have. It is written to align with the EU General Data Protection Regulation (GDPR) and Irish data-protection law.

Please note: this is a template you must review and complete. Replace the placeholders with your real business and processor details, and have it checked before you rely on it. It is not legal advice.

Who we are

Emberlight is operated by [PLACEHOLDER — registered business name and address]. For any privacy question, contact us at hello@example.com. This is our data-protection point of contact.

What we collect and why

• Order and contact information — name, email, delivery address, and order details you provide at checkout or when you contact us. We use this to process and deliver your order, handle returns, and reply to you.
• Payment information — payments are handled by our payment provider ([PLACEHOLDER — e.g. Stripe]). Your full card details are entered on their secure systems and never touch our website or servers.
• Technical data — basic server logs (e.g. IP address, browser type) needed to run the site securely.
• Cookies and similar technologies — see the Cookies section below.

We only collect what we need, and we do not sell your personal data.

Legal bases

We rely on: performance of a contract (to fulfil your order), your consent (for any non-essential cookies/marketing), our legitimate interests (to run and secure the site), and legal obligations (e.g. tax records).

Who we share it with

We share data only with providers who help us operate, under contract and only as needed: our payment provider, delivery/fulfilment partners, email provider, and hosting provider ([PLACEHOLDER — list your actual processors, e.g. Stripe, Resend, Vercel, Supabase]). We may disclose data where legally required.

Cookies and tracking

Right now this site uses only essential storage: a small localStorage entry that remembers your shopping cart. It is not used for tracking.

If we later add analytics or advertising tools (for example Google or Meta), we will list them here and load them only after you consent through our cookie banner. You can withdraw consent at any time.

How long we keep it

We keep order records for as long as needed to provide the service and to meet legal/accounting obligations ([PLACEHOLDER — e.g. 6 years for tax]), then delete or anonymise them.

Your rights

You have the right to access, correct, delete, restrict, or object to our use of your data, and to data portability. To exercise any right, email hello@example.com. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

Changes

We may update this policy; the "last updated" date above shows the latest version.