Privacy Policy - Gaelic Memories Photography - Gaelic Memories Photography

Last updated: Feb 2026

1. Who we are

Gaelic Memories Photography (“we”, “us”, “our”) is owned and operated by Stephen Baxter, trading as Gaelic Memories Photography, Clooncah, Carrowbehy, Castlerea, Co. Roscommon, F45 PY92, Ireland.
You can contact us at: stephen@gaelicmemoriesphotography.ie.

For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller of the personal data we collect.

2. What data we collect

We may collect and process the following categories of personal data:

Identity and contact data: name, billing and delivery address, email address, telephone number.
Order and payment data: products ordered, order dates, payment status; payment card details are processed securely by our payment providers and are not stored in full on our systems.
Website usage data: IP address, browser type, device information, pages visited, time and date of visit, referral source.
Communication data: messages sent via contact forms, email correspondence, customer service notes.
Marketing preferences: your choices about receiving newsletters and promotional emails.

3. How we collect your data

We collect personal data in the following ways:

Directly from you when you place an order, create an account (if available), subscribe to our mailing list, or contact us by email or form.
Automatically when you use our website, through cookies and similar technologies that record usage data.
From third‑party payment providers and delivery partners when they confirm payment, fraud checks, or delivery status.

4. Why we use your data and legal bases

We process your personal data only where we have a lawful basis under GDPR:

To process and deliver your orders – including taking payment, arranging shipping, sending order updates and invoices (performance of a contract).
To respond to enquiries and provide customer support (performance of a contract or legitimate interests).
To maintain our business records, accounts, and tax compliance (legal obligation and legitimate interests).
To improve our website, products, and services, including analysing how visitors use the site (legitimate interests).
To send you marketing emails about new work, exhibitions, or offers, where you have consented or where permitted by law (consent or legitimate interests, with opt‑out).
To prevent fraud, protect our rights, and comply with legal requirements (legal obligation and legitimate interests).

You can ask us for more detail about how each legal basis applies to your specific data.

5. Cookies and tracking

Our website uses cookies and similar technologies to:

Remember items in your cart and your preferences.
Perform basic analytics on site traffic and performance.
Support embedded services or payment providers where necessary.

Where required, we will display a cookie banner asking for your consent to non‑essential cookies, and you can manage or withdraw consent at any time via your browser settings or our cookie tool.

We do not sell your personal data. We may share it with:

Payment processors (for example, Stripe, PayPal or other providers shown at checkout) to process payments securely.
Delivery and logistics partners (for example, An Post, couriers) to deliver your orders.
IT, hosting, and email service providers who help operate our website and communications.
Professional advisers (accountants, legal advisers) where necessary for compliance and business management.
Public authorities where we are legally required to do so, such as for tax or law‑enforcement requests.

All such third parties are required to process your data only on our instructions and to keep it secure.

7. International transfers

Our website, email, or payment providers may store data on servers located outside the European Economic Area (EEA).
Where data is transferred outside the EEA, we will ensure appropriate safeguards are in place, such as EU Commission adequacy decisions or standard contractual clauses.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy:

Order and transaction records: generally 6 years for tax and accounting purposes, or as required by law.
Customer service correspondence: for as long as needed to deal with your enquiry and for a reasonable period afterwards.
Marketing data: until you withdraw consent or object to processing, or we determine it is no longer needed.

After these periods, data will be securely deleted or anonymised.

9. Your data protection rights

Under GDPR, you have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to have inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) – to ask us to delete your data where there is no good reason for us to continue processing it.
Right to restrict processing – to request that we limit how we use your data in certain circumstances.
Right to data portability – to receive the data you provided to us in a structured, commonly used format and transmit it to another controller, where technically feasible.
Right to object – to object to processing based on our legitimate interests or to direct marketing at any time.
Right to withdraw consent – where we rely on consent, you may withdraw this at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at stephen@gaelicmemoriesphotography.ie.

You also have the right to lodge a complaint with the Irish Data Protection Commission or your local supervisory authority if you are in the EU/EEA.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.
These measures may include encryption, access controls, secure hosting, and regular review of our security practices.

11. Third‑party websites

Our website may contain links to other websites that are not operated by us.
We are not responsible for the privacy practices or content of those sites and encourage you to read their privacy policies.

12. Children

Our website and services are not intended for children under 16, and we do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us so that we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
The current version will always be posted on this page with the date of the latest revision.

14. How to contact us

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact:

Gaelic Memories Photography
Stephen Baxter
Clooncah, Carrowbehy, Castlerea
Co. Roscommon, F45 PY92, Ireland
Email: stephen@gaelicmemoriesphotography.ie