Wallace’s Privacy & Cookie Policy

Effective Date: 1st July 2025

At Wallace’s Homevalue and Garden Centre ("Wallaces", "we", "us" or "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy & Cookie Policy explains how we collect, use, share and safeguard your personal data when you visit or interact with our website at www.wallaces.ie ("the Website").

By using our website, you acknowledge and accept the terms of this Policy.

1. Who We Are

Joseph Wallace Limited (trading as Wallace’s Homevalue and Garden Centre)
Registered Office: Wellingtonbridge, Co. Wexford, Y35K226
Company Number: [Insert CRO Number]
Email: info@wallaces.ie
Phone: 051-561113

We are the data controller responsible for the processing of personal data collected via our website.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data – Name, username or similar identifier.
Contact Data – Address, email address, phone number.
Account Data – Login details, newsletter preferences.
Transaction Data – Details about orders, purchases, payments and deliveries.
Technical Data – IP address, browser type, operating system, device information, and browsing behaviour.
Marketing & Communications Data – Preferences for receiving marketing or newsletters.
User-Generated Content – Product reviews, comments, or other content you submit.

We do not intentionally collect any special categories of personal data (such as health data, racial or ethnic origin) via the Website.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

To process and fulfil your orders.
To manage your account or newsletter subscription.
To provide customer service and respond to queries.
To send updates, offers or marketing communications (where consent has been provided).
To analyse website traffic and improve our services.
To comply with our legal obligations.
To maintain the security and integrity of our website.
To detect and prevent fraud or other unlawful activity.
To personalise marketing communications where permitted.

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

Performance of Contract – To process purchases and orders.
Legal Obligation – For tax, accounting and compliance purposes.
Consent – For direct marketing and cookie usage (where applicable).
Legitimate Interests – To improve services, ensure website security, personalise customer experience, and prevent fraud.

Where we rely on legitimate interests, we balance our interests against your fundamental rights and freedoms as required under GDPR.

5. Sharing Your Personal Data

We do not sell or rent your personal data. However, we may share your data with trusted third parties, including:

Payment processors (e.g. Barclays)
Delivery partners and couriers
IT service providers and website hosts
Professional advisors (accountants, legal advisors)
Regulators or law enforcement agencies, where legally required

All third-party service providers are contractually bound to only process personal data on our instructions and to apply appropriate security measures in line with GDPR.

6. International Transfers

Your personal data is generally stored within the European Economic Area (EEA). Where any data is transferred outside the EEA, we ensure appropriate safeguards are in place such as:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Participation in approved international data transfer frameworks where applicable.
Additional contractual, technical and organisational measures to ensure data protection standards.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to meet any legal, accounting, or regulatory requirements:

Account and transaction data – retained for 6 years for tax compliance.
Marketing data – retained until you opt out or withdraw consent.
Customer service queries – retained for 2 years after resolution.

Where data is no longer required, it will be securely deleted or anonymised.

8. Your Rights

Under GDPR, you have the following rights:

Right of Access – To obtain a copy of your personal data.
Right of Rectification – To correct inaccurate or incomplete data.
Right of Erasure ("Right to be Forgotten") – To request deletion of your data.
Right to Restrict Processing – To limit how we use your data.
Right to Data Portability – To receive your data in a machine-readable format.
Right to Object – To object to processing, including for marketing purposes.
Right to Withdraw Consent – Where processing is based on consent, you may withdraw this at any time.

To exercise any of your rights, please contact us at info@wallaces.ie. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC):
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Phone: +353 (0)1 765 0100
Website: www.dataprotection.ie

9. Cookies and Similar Technologies

We use cookies to enhance your browsing experience and analyse website traffic.

What are Cookies?

Cookies are small text files stored on your device when you visit our website. They enable us to recognise your browser, remember preferences, and analyse site usage.

Types of Cookies We Use

Cookie Type	Purpose
Essential Cookies	Necessary for website functionality (e.g. shopping cart, account login).
Performance Cookies	Analyse website traffic and usage (e.g. Google Analytics).
Functionality Cookies	Remember preferences such as language or location.
Marketing Cookies	Personalise marketing communications where consented.

Cookie Consent

We will only place non-essential cookies where you have provided consent via our Cookie Banner. You can manage or withdraw your consent at any time via your browser settings or our website cookie controls.

Managing Cookies

You may block or delete cookies via your browser settings; however, this may affect certain website functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption
Access controls
Secure hosting environments
Staff training and confidentiality agreements

While we strive to ensure data security, no method of transmission or storage is completely secure. Use of the Website is at your own risk.

11. Changes to This Policy

We reserve the right to update this Privacy & Cookie Policy from time to time. Any changes will be posted on this page with an updated Effective Date.

Document last updated: 1st July 2025