Privacy Policy

Who we are

The data controller for this store is God's Little Armies Bookstore. For privacy questions or requests, contact godslittlearmies@gmail.com. Postal address: Drogheda, Co. Louth, Ireland.

Personal information we collect

• Order information: name, email address, phone number if you provide it, delivery or pickup details, order contents, and order status.
• Payment information: payments are processed by Stripe on our behalf. We receive payment confirmation and limited billing metadata from Stripe. We do not store full card numbers on our servers.
• Customer support information: information you send when you contact us by email or through the contact page.
• Technical and usage information: IP address, browser type, device information, pages viewed, and similar log data collected by our hosting provider when you use the site.
• Admin access: staff sign-in to the store admin area uses authentication cookies managed by our database provider.

How we use personal information

We do not operate customer accounts in the current version of the store. Checkout is guest checkout only.

• Provide the store, process orders, arrange pickup or delivery, and send transactional emails.
• Operate payments, prevent fraud, and keep accurate business records.
• Respond to enquiries and provide customer support.
• Maintain site security, troubleshoot issues, and improve the store.
• Comply with legal obligations and respond to lawful requests.

Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract: to process and fulfil your order.
• Legitimate interests: to operate the store, prevent fraud, keep records, and respond to support requests, balanced against your rights.
• Legal obligation: where we must retain or disclose information to comply with law.
• Consent: where you choose optional technologies in the future (for example analytics), if we introduce them and ask for your choice.

Sharing personal information

We share personal information only as needed to run the store, fulfil orders, or comply with law. We do not sell your personal information.

• Stripe (payments): https://stripe.com/privacy
• Supabase (order data storage and admin authentication): https://supabase.com/privacy
• Resend (transactional email): https://resend.com/legal/privacy-policy
• Vercel (website hosting and related logs): https://vercel.com/legal/privacy-policy
• Professional advisers or authorities where required by law, to protect rights, or to investigate fraud or security issues.

International transfers

Some service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or equivalent protections offered by those providers.

Retention

We keep order and support information for as long as needed to fulfil orders, handle refunds or disputes, meet tax and accounting requirements, and defend legal claims. You may ask us to delete information where we have no overriding reason to keep it.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you. Stripe and other payment providers may use automated checks to help prevent fraud, such as risk scoring or temporary blocks on suspicious activity.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to receive a copy of information you provided (data portability). To exercise these rights, email godslittlearmies@gmail.com. We may need to verify your request.

• If you are in the EEA or UK, you may lodge a complaint with your local supervisory authority. In Ireland, this is the Data Protection Commission (dataprotection.ie). UK residents may contact the ICO (ico.org.uk).
• We will respond within the timeframes required by applicable law.

Minors

Our products are intended for purchase by parents, guardians, and other adults. The store is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it where appropriate.

Cookies and similar technologies

We use browser local storage and, for admin sign-in only, cookies. You can control cookies through your browser settings. Clearing site data may empty your cart or reset cookie preferences.

• We do not currently use third-party advertising or analytics cookies on the public store.
• If we add optional analytics in future, we will update this policy and only enable them in line with your cookie preference choice.

Do Not Track

Some browsers send a Do Not Track signal. There is no consistent industry standard for responding to these signals, and we do not change our practices solely because a Do Not Track signal is received.

Security

We use reputable providers and reasonable technical measures to protect personal information. No online service can guarantee absolute security. Please use a strong, unique email account and contact us promptly if you suspect unauthorised access related to an order.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be posted on this page.

Contact

For privacy questions or complaints, email godslittlearmies@gmail.com or write to us at Drogheda, Co. Louth, Ireland.