Privacy Policy

1. Who is responsible for your data

Paddy Appliances Limited is the data controller for your personal data: company number 698537, VAT IE3772767DH, Unit 2, Glasnevin Business Centre, Glasnevin, Dublin 11, D11 EN23, Ireland.

For any privacy question or request, contact us at info@paddyappliances.ie (subject "Privacy"), by phone on 01 575 8459, or by post to the address above. We are not required to appoint a Data Protection Officer, but a named member of our team handles all privacy requests.

This policy covers our websites (paddyappliances.ie and app.paddycoffee.ie), our Paddy Coffee app, our chat, our counter and our repair service.

2. The data we collect

Data you give us

• Contact details: first name, surname, email, mobile number, and business name if you add one.
• Address: for collections, deliveries and invoices (address lines, town, Eircode or postcode, country).
• Booking and machine details: brand, model, serial number, value band, the problems you describe, your chosen service, extras and day.
• Messages and files: chat messages, photos, videos and PDFs you send us, and the collection-guide photos of your packed box.
• Collection at our counter: the name and signature of the person collecting, and whether they collect on your behalf.
• Account: your login email and passcode (stored securely, never readable by us), and a profile photo if you add one.

Data we create

• Photos of your machine at check-in and before it leaves, and photos taken during the repair, together with the repair report, parts used, invoices, receipts and payment records.
• Job history: every step of your repair, with dates and times.
• Shipping data: DHL labels, tracking numbers and pickup details.

Payment data

Payments are processed by Stripe. Your card details go directly to Stripe; we never see or store your full card number. We keep the amount, date, method and Stripe reference of each payment.

Data collected automatically

• Technical data needed to run our websites and app securely: IP address, device and browser type, login session, and records of errors.
• Whether you are currently viewing our chat (so our team knows you are online), and when you last read our messages.
• Cookies and similar storage (see section 9).

We do not ask for, and ask you not to send us, sensitive data such as health information.

3. Why we use your data and our legal basis

• To take your booking, repair your machine, ship it, invoice you and take payment. Legal basis: performance of our contract with you.
• To contact you about your repair (confirmations, status updates, invoices for approval, "ready to collect" and DHL emails, chat replies). Legal basis: contract.
• To keep accounting and tax records (invoices, receipts, payments). Legal basis: legal obligation (Irish tax law).
• To keep condition photos, repair records and signed collection records, to handle warranty claims and to protect you and us in case of a dispute. Legal basis: our legitimate interests in providing a reliable service and defending legal claims.
• To remind you about a booking you started but did not finish. Legal basis: legitimate interests. You can unsubscribe from these reminders with one click.
• To keep our systems secure and prevent fraud and spam. Legal basis: legitimate interests.
• To send you offers or news, only if you have agreed or are an existing client and have not opted out. Legal basis: consent or, for existing clients, the ePrivacy rules on similar services. Every email includes an unsubscribe link.

Where we rely on consent, you can withdraw it at any time; this does not affect what we did before. We do not make decisions about you based solely on automated processing.

4. Who can see your data

Our team

Only the people who need it for their role. For example, our engineers see your first name, the machine and the fault, but not your address, phone, email or payment details.

Service providers we use

We share data only as needed, with providers who act on our instructions under data processing agreements:

• Supabase (database, login and file storage, hosted in Ireland, EU);
• Vercel (hosting of our web system, Dublin region);
• Stripe (online payments);
• Resend (sending our emails);
• DHL Express (collection and delivery of your machine: name, address, phone, email and parcel details);
• Expo / app stores (delivering our app and its updates);
• our website host, our accountants and professional advisers, and our IT and software providers.

Others

• The person who collects your machine with your pickup QR code sees your job number and machine details.
• Where the law requires it (for example Revenue or An Garda Síochána), to protect our legal rights, or to a buyer of our business, who must respect this policy.

We never sell your personal data.

5. Transfers outside the European Union

Our main database and files are stored in Ireland. Some providers (for example Stripe, Resend and Vercel) are companies based in the United States and may access data from outside the EU. Where that happens, the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

• Jobs, invoices, receipts and payment records: 6 years after the end of the year the job was completed, as required by Irish tax law.
• Machine condition photos, repair reports and signed collection records: for as long as we keep the job record (normally 6 years), so we can handle warranty claims and disputes.
• Files sent in our chat: automatically deleted after 180 days. Chat messages are kept for as long as your account is open, then for up to 2 years.
• Bookings started but not paid: up to 12 months, then deleted.
• Your account: until you ask us to close it; records we must keep by law stay for the periods above.
• Unsubscribe records: kept so that we never email you offers again.

7. How we protect your data

• All connections are encrypted (HTTPS).
• Every login has its own role, and the database itself only lets each role see the data it needs.
• Photos, PDFs and DHL labels are stored privately and shared only through time-limited links.
• Passcodes are stored in a form nobody can read, and we keep a history of who changed what.

No system is completely secure. If a breach affecting your data occurs, we will inform the Data Protection Commission and, where required, you, as the law requires.

8. Your rights

Under the GDPR you have the right to:

• access the data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data, except where we must keep it by law (for example invoices);
• restrict or object to how we use it, including objecting to marketing at any time;
• data portability: receive the data you gave us in a common format;
• withdraw consent where we rely on it.

To use any of these rights, email info@paddyappliances.ie. We may ask you to confirm your identity. We reply within one month, free of charge.

You also have the right to complain to the Data Protection Commission (www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28). We would appreciate the chance to deal with your concern first.

9. Cookies and similar technologies

We use a small number of cookies and similar browser storage:

• Strictly necessary: keeping you logged in, security, and remembering an unfinished booking or check-in step. These do not need consent.
• Preferences: remembering your day/night mode or favourite settings on your device.
• Payments: Stripe sets cookies to process payments and prevent fraud when you pay.
• Analytics or advertising (only on our website paddyappliances.ie, if used): set only with your consent through our cookie banner, which you can change at any time.

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop logging in or booking from working.

10. Children

Our services are for adults. We do not knowingly collect data from children under 16. If you believe a child has given us their data, contact us and we will delete it.

11. Changes to this policy

We will update this policy when our services or the law change. The date at the top shows the latest version. If a change is significant, we will tell you by email or in our app.