1. Introduction
Etna Plants Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (etnaplants.ie), place orders, or otherwise interact with us.

By using our site or services, you agree to the collection and use of personal data as described below.

2. Data Controller & Contact Details

• Company: Etna Plants Ltd

• Address: Ballyneety, Co. Limerick, V94 Y793, Ireland Plant Nursery Limerick Ireland

• Telephone: +353 87 965 0236 Plant Nursery Limerick Ireland

• Email: info@etnaplants.ie

• For questions about this policy or about exercising your rights, contact us at the above email or telephone.

3. What Data We Collect

We may collect and process the following types of personal data:

• Identity Data: name, title, date of birth

• Contact Data: email address, telephone number, postal address

• Transaction Data: details of goods you have purchased from us, your payment information (only payment tokens or transaction references, not full card numbers, if handled by third-party payment processors)

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, platform, device information, log data

• Usage Data: information about how you use our website, products, services

• Marketing & Communications Data: your preferences in receiving marketing from us and your communication preferences

4. How We Use Your Data & Legal Basis

We will use your personal data only when the law allows us to. The lawful bases include:

• Performance of contract — to fulfil orders, deliver plants, manage returns, etc.

• Legal obligations — e.g. tax, accounting, regulatory compliance

• Legitimate interests — e.g. to improve our website, for fraud prevention, direct marketing (unless you opt out)

• Consent — where you have given clear consent (e.g. for marketing emails)

Purposes for which we use your data:

• Processing your order(s), deliveries, returns

• Managing your account

• Communicating with you: order confirmations, service notices, customer support

• Sending you marketing communications (if consented)

• Improving our website, internal operations, customer experience

• Detecting and preventing fraud or misuse

• Compliance with legal requirements (e.g. record keeping)

5. Sharing Your Data

We may share your information with:

• Service providers / processors — for delivery, payment processing, IT hosting, email services

• Authorities — when required by law (e.g. tax, regulatory bodies)

• Other third parties — in case of business transfers, merger, acquisition, or reorganization (with appropriate safeguards)

• Marketing partners — only if you have opted in

We require all third-party processors to respect the security of your data and to treat it in accordance with applicable law.

6. International Transfers

Because we operate in Ireland and may use service providers located outside the European Economic Area (EEA), your data may be transferred outside the EEA. Where this happens, we ensure appropriate safeguards (e.g. standard contractual clauses, adequacy decisions) are in place to protect your data.

7. Data Retention

We will retain your personal data only as long as necessary:

• For transactional and contract purposes — for the duration needed to fulfill orders and for warranty / returns / dispute resolution

• For legal / tax compliance — as required by law

• For marketing purposes — until you withdraw consent

After this, we will securely delete or anonymize your data.

8. Your Rights

Under GDPR and applicable law, you have rights including:

• Right to access your data

• Right to rectify inaccurate data

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object to processing (especially direct marketing)

• Right to withdraw consent (where processing is based on consent)

• Right to lodge a complaint with a supervisory authority (e.g. Irish Data Protection Commission)

To exercise these rights, contact us using the contact details provided above.

9. Security

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet or storage system is completely secure. While we try to use best practices, we cannot guarantee absolute security.

10. Children

Our site is not intended for children under the age of 16, and we do not knowingly collect data from children. If you believe we have collected data from a child, please contact us to have it removed.

11. Updates to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date and, where appropriate, notify you. Please review periodically.