Privacy Policy

Who we are

DMG Vogue is operated by [Registered business name] ([CRO / RBN number]), [Business address], Dublin, Ireland. We are the controller of the personal data described in this policy. You can contact us about anything in it at [hello@yourdomain.ie].

What we collect

• Account details: your name, email address and password. Passwords are stored only as a one-way hash; we can never see them.
• Delivery addresses you save to your account, including the recipient’s name and an optional phone number.
• Order details: what you bought, the price, the delivery address and the order status. Card and Klarna details are handled by our payment provider and never reach our servers.
• Messages you send us, for example about a return.

We do not use advertising trackers or sell your data to anyone.

Why we use it, and our legal basis

• To run your account, take and deliver orders, and handle returns and refunds. This is necessary to perform our contract with you (GDPR Article 6(1)(b)).
• To keep accounting and tax records, as Irish law requires (Article 6(1)(c)).
• To keep the site secure and prevent fraud, which is in our legitimate interest (Article 6(1)(f)).

Cookies and local storage

We only use what is strictly necessary for the site to work, so no cookie banner is needed:

• Sign-in cookies that keep you logged in and protect forms against forgery.
• Your shopping bag, saved in your own browser’s storage so it survives a page refresh. It contains only the products, colours and quantities you chose.

Who we share it with

We use a small number of service providers who process data on our behalf, under contract:

• Vercel Inc. — website hosting and product image storage.
• Supabase Inc. — our database, hosted in the EU.
• Stripe Payments Europe Ltd. — card and Klarna payments.
• Delivery companies — your name, address and phone number, to deliver your order.

Where a provider processes data outside the European Economic Area, the transfer is protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

• Account details and saved addresses: until you ask us to delete your account.
• Order and payment records: six years from the end of the tax year, as Irish tax law requires.
• Messages to us: up to two years after the matter is resolved.

Your rights

Under the GDPR you can ask us to:

• give you a copy of your personal data;
• correct anything that is wrong (you can also edit your name and addresses in your account);
• delete your data, subject to records we are legally required to keep;
• restrict or object to how we use it;
• send your data to you or another company in a portable format.

Email [hello@yourdomain.ie] and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie.

Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes will be emailed to account holders.