Privacy policy

Who is responsible for your data

Mata Sagrada E-mail: hello@matasagrada.com

What we collect and why

Data	Why	Legal basis
Name, e-mail, delivery address, order details	To take, deliver and support your order	Contract
Order and payment records	Tax and accounting records required by Revenue	Legal obligation
E-mail on a waiting list	To tell you once when a product arrives	Consent — withdraw any time
Messages you send us	To answer you	Legitimate interest
Your confirmation that you are 18+ and, for the online course, that you asked for immediate access	To show we only sell to adults and that the right to cancel was waived with your agreement	Legal obligation and legitimate interest
Your basket, if you're signed in	So it follows you to another device	Contract (you asked for an account)
News, offers, new-product e-mails and one basket reminder — only if you ticked "send me news"	To tell you about products in the categories you chose; the reminder may include a one-off welcome code	Consent — unsubscribe in one click or in your account
E-mail used to request a free guide	To send you the guide; erased after 30 days unless you also asked for news	Your request (contract) / consent
Pages visited, referring website, device type — only if you accept analytics	To understand which pages help visitors and where they come from	Consent — withdraw any time

We don't sell your data, we don't send marketing unless you ask for it, and we don't build profiles about you.

Who we share it with

Only the services needed to run the shop, each bound by a data-processing agreement:

• Stripe — payments (card details go straight to Stripe, never to us)
• An Post — delivery of your parcel
• Resend — sending order and waiting-list e-mails
• Hetzner — hosting, on servers in the EU

Your data is stored in the EU. Stripe may process payment data outside the EU under the European Commission's standard contractual clauses.

How long we keep it

Order records are kept for 6 years, as Irish tax law requires. Waiting-list e-mails are deleted when you leave the list or after we've told you the product arrived. Messages are kept for up to 2 years. Analytics records are deleted after 13 months.

Cookies and local storage

We use no advertising or tracking cookies. Your basket and your privacy choice are kept in your browser so the shop works; visit statistics run only if you accept them in the banner, and you can change that any time with Cookie settings. Everything is listed in our cookie policy.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to us and we'll reply within one month. If you're not satisfied, you can complain to the Data Protection Commission.