Privacy Policy

Effective Date: 20/09/2026

1. Introduction

This Privacy Policy explains how Tuathal, referred to as we, us, or our, collects, uses, stores, and protects personal information when you visit or make a purchase from our website, referred to as the Website.

We are a small handmade linen tote bag brand based in Northern Ireland, United Kingdom. We sell products to customers in the UK, European Union, and other international locations.

We are committed to protecting your privacy and handling your personal data in accordance with UK data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, and where applicable, the EU General Data Protection Regulation and other relevant international privacy laws.

By using our Website, you agree to the collection and use of your information in accordance with this Privacy Policy.

2. Information We Collect

We collect information from you in several ways.

a) Information You Provide Directly

When you place an order, create an account, or contact us, you may provide:

  • Your name
  • Email address
  • Phone number
  • Billing and delivery address
  • Payment details
  • Order information
  • Any other details you choose to provide

b) Automatically Collected Information

When you browse our Website, we may automatically collect:

  • IP address
  • Device and browser information
  • Pages viewed and interactions
  • Date and time of access
  • Shopping cart activity
  • Cookies and tracking data

3. Use of Shopify Platform

Our online store is hosted on Shopify Inc. Shopify provides us with the e-commerce platform that allows us to sell products and services to you. Your data is stored through Shopify's secure data storage systems, databases, and applications.

Shopify processes your information in accordance with its own Privacy Policy, which can be found at https://www.shopify.com/legal/privacy.

Payment information is processed securely through Shopify Payments or other approved third-party payment providers. We do not store full credit or debit card details on our own systems.

4. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to operate effectively and to improve your shopping experience. We use cookies to keep track of items placed in your shopping cart, remember your preferences, recognise your device on return visits, understand how users interact with our Website, and support marketing and analytics.

You can control or disable cookies through your browser settings. However, disabling cookies may prevent parts of our Website from functioning properly.

5. How We Use Your Information

We use your personal information to:

  • Process and fulfil your orders
  • Communicate with you about your purchases
  • Provide customer support
  • Improve our Website and services
  • Prevent fraud and protect our business
  • Send marketing communications where you have consented
  • Comply with legal and tax obligations

6. Legal Basis for Processing for UK and EU Customers

For customers located in the UK and EU, we process your personal data under the following legal bases:

  • Contractual necessity to process and deliver your orders
  • Legal obligations such as accounting and tax requirements
  • Legitimate interests including fraud prevention and service improvement
  • Consent for marketing communications where applicable

7. Advertising and Analytics

We use a number of third-party advertising and analytics tools on our Website. These services may collect information about your visits to our Website and other websites in order to provide relevant advertisements and measure their performance.

The platforms we currently use include Google Analytics, Meta (Facebook and Instagram), Pinterest, TikTok, and YouTube. Each of these platforms operates under its own privacy policy and acts as an independent data controller for the data it processes.

You can opt out of personalised advertising through the settings on each platform, or through tools such as the Google Ads Settings page or the Your Online Choices opt-out tool.

8. Sharing of Information

We do not sell your personal data. We may share your information only with trusted third parties when necessary, including:

  • Shopify as our e-commerce platform
  • Payment processors
  • Shipping and delivery providers
  • Email service providers
  • Analytics and advertising platforms
  • Fraud prevention services
  • Legal or regulatory authorities if required by law

All third parties are required to protect your information and use it only for the purposes we specify.

9. International Data Transfers

As we sell to customers in multiple countries, your personal data may be transferred and processed outside the UK, including in the United States and other regions where Shopify and our service providers operate. Whenever data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK and EU data protection laws.

10. Data Retention

We retain your personal information only as long as necessary to fulfil orders, provide customer service, meet legal, tax, and accounting obligations, and resolve disputes. When information is no longer required, it will be securely deleted.

11. Your Rights for UK and EU Customers

If you are located in the UK or EU, you have the right to:

  • Access the personal data we hold about you
  • Request corrections to inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent for marketing communications
  • Request data portability

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

12. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, misuse, or loss. However, no online system can be guaranteed as completely secure.

13. Third-Party Links

Our Website may contain links to other websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

14. Children's Privacy

Our Website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

16. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Data Controller: Tuathal
Email: hello@tuathal.co.uk
Address: Office 1824, 92 Castle Street, Belfast, Northern Ireland, BT1 1HE