Privacy Policy

1. Introduction

Treatvale Ltd, trading as "The Happy Family Bakery" ("we", "us", "our"), respects your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

This Privacy Policy explains how we, as Data Controller, collect, use, process, and disclose personal data relating to you and your interaction with our website, webshop, and services.

This Privacy Policy should be read together with our Terms & Conditions and Cookie Policy. By using our Site, you confirm that you have read and understood this Privacy Policy.

2. Personal Data We Collect

Personal data means any information that can identify an individual. It does not include anonymised data.

We may collect and process personal data that you provide directly to us or that we collect when you use our Site or services.

We may also receive personal data from third parties or publicly available sources, including social media platforms or service providers who assist us.

Types of data we may collect include:

• Identity Data – name, username, date of birth, gender, or similar identifiers
• Contact Data – billing address, delivery address, email address, phone number
• Financial Data – payment details (processed securely via payment providers)
• Transaction Data – details of purchases, orders, and payments
• Technical Data – IP address, browser type, device information, cookies, login data
• Profile Data – account details, purchase history, preferences, feedback
• Usage Data – information about how you use our Site and services
• Marketing Data – preferences for receiving marketing communications
• Image Data – CCTV images if you visit our premises (for security purposes)

If you do not provide certain personal data, we may not be able to provide some services or process your orders.

3. How We Collect Your Data

We may collect personal data when you:

• Purchase products from our webshop
• Register an account
• Subscribe to newsletters or marketing communications
• Contact us via email, phone, or online forms
• Submit reviews, feedback, or surveys
• Enter competitions or promotions
• Visit our premises (including CCTV recording)
• Browse our website or use our services
• Interact with us on social media

4. Personal Data from Third Parties

We may receive personal data from trusted third parties such as:

• payment processors
• delivery partners
• analytics providers
• social media platforms (e.g. Facebook, Instagram, Google, TikTok)
• publicly available sources

This helps us improve services, manage orders, and personalise your experience.

5. How We Use Your Personal Data

We will only process your personal data where we have a lawful basis, including:

• Contract performance – to process orders, deliver products, and manage accounts
• Legitimate interests – to improve our services, ensure security, and manage operations
• Legal obligations – to comply with applicable laws and regulations
• Consent – where you have agreed to receive marketing communications

We may use your data to:

• process and deliver orders
• manage customer accounts
• provide customer support
• improve our website and services
• send marketing communications (if you have opted in)
• ensure security and prevent fraud

6. Children's Data

We do not knowingly collect personal data from individuals under the age of 16 unless clearly stated. If we become aware that we have collected such data without parental consent, we will delete it.

7. Data Retention

We retain personal data only for as long as necessary. Retention periods depend on:

• the duration of our relationship with you
• legal and regulatory obligations
• dispute resolution or legal requirements
• security and fraud prevention needs

8. Your Rights (GDPR)

You have rights under data protection law, including:

• right of access to your personal data
• right to correction of inaccurate data
• right to deletion ("right to be forgotten")
• right to restrict processing
• right to object to processing
• right to data portability
• right to lodge a complaint with the Irish Data Protection Commission

We may need to verify your identity before responding to requests.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

However, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

You are responsible for keeping your account login details confidential.

10. Cookies

We use cookies and similar technologies to improve user experience and analyse website usage. Please refer to our Cookie Policy for more information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or how we process your data, you can contact us using the details below.