Privacy Policy

C&H Café is a trading name of The Purple Pantry Limited, who own and operate this website. 

We are registered in the Republic of Ireland #585199, our registered office is located at 27 Saint Andrews Park, Swords, Co. Dublin, Ireland. 

You can contact us:

• By post, using the postal address above;
• By using our website contact form;
• By email, using hello@candh.ie

When we say ‘we’, ‘us’, ‘C&H Café’ it’s because that’s who we are, and we own and run the site. 

Usage & Storage of Personal Information

Personal information submitted to us through our website will be used for the purposes specified in this policy, or on the relevant pages within this website. 

What Personal Information We Collect

We collect certain personal data about users & visitors on our website. 

When you make a purchase online, we collect the following data:

• First Name & Last Name
  We collect your full name for account purposes and as part of the delivery & billing information we require. 
• Billing Address
  For verification & billing purposes. 
• Delivery Address
  We require this so we can deliver your order. 
• Phone Number & Email Address
  We require your contact details should ourselves our or delivery partners need to contact you. 

When you email us, or submit a feedback or contact form on our website we collect the following data:

• First Name & Last Name
  So we know who is contacting us, and we can locate any order or account information relevant to your query.
• Email Address
  So we can respond to your query. 

When you join our newsletter we collect the following data:

• Email Address
  Used for sending emails which you have opted in to receive. 

How We Collect Personal Information

1. We collect personal information when you provide it to us automatically, as you navigate through our website;
2. We collect personal information when you provide it to us directly; to buy products or services through our website, subscribe to a newsletter, submit feedback, complete a survey or send us a communication. 

How We Use Personal Information

1. To fulfil an order, or complete steps linked to an order: for example, processing transactions that take place on our website.
2. When it is necessary for purposes which are in our, or third parties, legitimate interests. These interests include:
   1. Operating the website;
   2. Providing you with the services described on the website;
   3. Responding to queries, and resolving any disputes;
   4. Conducting technical analysis to determine how to improve the website;
   5. Monitoring activity on the website, for example: identifying potential fraudulent activities
      
3. Providing you with marketing information in the form of newsletters and stock notifications, when you give us consent. 
4. For purposes which are required by law, for example: responding to government, court or Gardai conducting an investigation. 

When We Disclose Your Personal Information

1. On completion of an order. For processing the order, verifying your payment details, arranging delivery or returns, we imply that you consent to our collecting it and using it for that specific reason. 
2. When processing your payment. Stripe processes our credit card transactions. Facilitating a transaction requires the processing of personal data such as the cardholder’s name and credit or debit card details. This data is sent to Stripe, which it then uses to complete the transaction within the systems of the credit & debit card networks. Stripe performs this function as a data processor. Stripe also uses this data to comply with its regulatory obligations such as Know Your Customer “KYC” and Anti Money Laundering “AML”. In this role Stripe is a data controller. You can read their privacy policy at https://stripe.com/en-ie/privacy
3. When you join our newsletter. We use Mailchimp for email marketing. Once you have given consent to join our newsletter some of your personal data will be stored here. You can update this data by contacting us or by updating the preferences at the bottom of any newsletter you receive from us. 
4. Subcontractors and service providers who assist us in connection with how we use and store personal information. In particular, our website hosting provider, which is located in Europe. 
5. Our professional advisors, which are located in Europe. 
6. Regulators and Government Authorities in connection with compliance procedures and obligations. 
7. To respond to requests relating to a criminal investigation or alleged / suspected illegal activities. 
8. To enforce or defend our rights, or to address reputational or financial risks.
9. Other recipients when we are authorised or required by law to do so. 

Where We Store Your Personal Information

• We are based in Ireland, as such your data will be processed in Ireland. Some of the recipients we have described above, and to whom we disclose your personal information are based outside of the European Union, such as the United States. These providers are compliant with GDPR and we have data processing addendums in place. 
• We store your personal information on secure servers which are located in Amsterdam and managed by our hosting provider. Personal information that we store or transmit is protected by security and access controls, including username and password authentication, and data encryption where appropriate. 

Marketing Choices

1. Newsletter
   We may use some of your personal information, when we have your consent to:
   
   1. Send you non-marketing commercial communications.
   2. Send you marketing communications relating to our business, by post or, where you have specifically agreed by email.
      You can opt out of these communications at any time. Please write to us by email or post, or use the “unsubscribe” link provided at the bottom of all our newsletter emails.

2. Cookies
   You have a choice regarding cookies, as described in our Cookie Policy. By modifying your browser preferences, you have the option to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies some parts of our website may not function properly. 

Cookies & Web Analytics

1. For more information about how we use cookies, please see our cookie policy here, and to learn more information on cookies see www.allaboutcookies.org
2. When you visit our site, there’s certain data that’s recorded, which is generally anonymous information and does not reveal your identity. If you are logged into your account on this website, some of this data could be associated with you, by this we mean:
   1. Your IP address or proxy server IP address.
   2. The domain name you requested.
   3. The name of your internet service provider is sometimes captured depending on the configuration of your ISP connection.
   4. The date and time of your visit to the website.
   5. The length of your session; The pages which you have accessed.
   6. The number of times you access our site within any month. 
   7. The file URL you look at and information relating to it.
   8. The website which referred you to our Site. 
   9. The operating system your device uses.

Information You Make Public or Share with Others

If you make your personal information available to others, we cannot control or accept responsibility for the way they might use or manage that data. If you’re sharing information, this privacy policy will not apply. 

How Long We Keep Your Personal Information

We retain your personal information for as long as necessary to provide our services to you and to comply with our legal obligations.

If you no longer want us to use/store your personal information, you can request we erase your personal information. Please let us know by emailing hello@candh.ie.

Please note that if you request the removal of your personal information, we will retain details required to comply with the law. The information we retain will be handled in accordance with this Privacy Policy. 

When We Need To Update This Policy

We may need to change this policy from time to time in order to make sure it stays up to date with the latest legal requirements. The latest version of this policy will always be available on this page of our site. 

How You Can Access Your Personal Information

1. You have the right to make a request to access other personal information we hold about you, and to request corrections of any errors in that data. 
2. To make an access or correction request, you can contact us using the details provided at the end of this policy. 
3. You are entitled to ask us to erase, or restrict the processing of your data. You also have the right to object to some data processing that is in our legitimate interests, such as profiling, which we perform for direct marketing. And, after we have asked for your consent to process your data, you have the right to withdraw this consent.
4. If you have unresolved concerns you also have the right to complain to data protection authorities. The relevant data protection authority will be the one of the country:
   1. of your residence.
   2. In which you consider the alleged infringement has occurred.

Third Party Websites

Our website includes hyperlinks to, and details of, third party websites.

We have no control over, nor are we responsible for, the privacy policies and practices of third parties. 

We do not accept any liability for the content of external links. 

We will not, without your express consent, supply your personal information to any third party for the purpose of their or any other third party’s direct marketing.

Personal Data Request

To obtain, amend, delete or correct personal information we hold about you, submit a complaint or require further information please contact our offices using the below details

By Post: The Purple Pantry Limited, 27 Saint Andrews Park, Swords, Co. Dublin or by email: hello@candh.ie