Privacy Policy

1. Who We Are

This website is operated by Eva Victoria, trading as part of McGee's Photocentre Ltd. For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, the relevant business is the data controller for personal data processed through this website, except where another organisation acts as an independent controller for its own processing.

Our registered details supplied for this website are: VAT number IE6429623H and Company Registration Number 409623, registered in Dublin.

2. Information We Collect

Personal Information

When you place an order, contact us, create or use an account, subscribe to marketing, or otherwise interact with the website, we may collect information such as your name, billing and delivery address, email address, telephone number, order details, communications with us and information necessary to provide customer support.

Payment Information

Payments are processed through payment providers used by our Shopify store. We do not intend to store your full payment card details on our own systems. Payment providers may process payment and transaction information in accordance with their own privacy policies and applicable legal requirements.

Technical and Usage Information

When you visit our website, technical information may be collected automatically, including information about your browser, device, IP address, approximate location, operating system, referring website, pages visited and interactions with the site. Some of this information may be collected through cookies or similar technologies.

Information You Choose to Give Us

If you contact us by email or another communication method, we may retain the information you provide so that we can respond, resolve your enquiry and maintain an appropriate record of our communications.

3. Why We Use Your Information

We use personal data only where we have a lawful basis to do so. Depending on the circumstances, this may include:

We do not use your information for purposes that are incompatible with the purposes described in this policy unless permitted by law and, where required, we provide additional information or obtain your consent.

4. Orders, Accounts and Customer Service

If you purchase from Eva Victoria, we use the information necessary to process your order, arrange delivery, provide order updates, deal with returns or refunds, provide customer support and meet our legal and accounting obligations.

Order-related communications are service communications and may be sent even if you have opted out of promotional marketing, where they are necessary to fulfil your order or provide requested customer service.

Where an account is available and you choose to use one, account information may be retained while the account remains active and for an appropriate period afterwards where retention is necessary for legal, security or business purposes.

5. Marketing Communications

We may send information about products, offers, launches or events where this is permitted by applicable law. Where marketing requires your consent, we will ask for it before sending those communications.

You can unsubscribe from promotional email communications at any time by using the unsubscribe option provided in the message or by contacting us at olga@evavictoria.ie.

Unsubscribing from marketing does not affect essential service communications relating to an order, payment, delivery, return, refund, account or other transaction you have requested.

6. Cookies and Similar Technologies

Eva Victoria uses cookies and similar technologies as part of operating and improving the website. Cookies may be used for essential website functions, shopping-cart functionality, preferences, analytics, security and, where enabled and permitted, marketing or advertising purposes.

Strictly necessary technologies may be used where they are required to provide a service you have requested, such as keeping items in a shopping cart or maintaining essential website functionality.

Third-party services used by the website may also place or access cookies or similar technologies. The exact cookies and technologies in use can change as the website, Shopify configuration and third-party services change, so the cookie information and consent controls should be treated as the current source for the technologies actually deployed.

7. Who We Share Information With

We do not sell your personal data. However, operating an online jewellery store requires us to share relevant information with trusted service providers where necessary to provide services or fulfil legal and contractual obligations.

• Shopify: our ecommerce platform and related services used to operate the online store.
• Payment providers: payment processing and transaction services.
• Delivery and courier providers: information necessary to deliver orders and manage deliveries.
• Technology and service providers: hosting, website functionality, security, analytics, communications, customer support and other services used to operate the business.
• Professional advisers and authorities: where disclosure is necessary for legal, regulatory, accounting, fraud-prevention or law-enforcement purposes.

Service providers may process information on our behalf and are required to handle it in accordance with applicable law and their contractual obligations. Some providers may act as independent controllers for particular processing activities and will have their own privacy policies.

8. International Data Transfers

Some technology, payment, ecommerce or other service providers used by online businesses may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we will take the steps required by applicable data protection law, which may include relying on an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.

For example, Shopify operates internationally and states that personal data may be processed in locations outside the EEA. Further information about Shopify's own processing is available in its privacy documentation.

9. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, maintain appropriate business records, resolve disputes, enforce agreements and comply with legal, accounting and tax obligations.

Different types of information may therefore be retained for different periods. When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

10. Keeping Your Information Secure

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we will respond appropriately to security incidents and meet any legal notification obligations that apply.

11. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have rights including:

• the right to be informed about how your personal data is processed;
• the right to access personal data we hold about you;
• the right to have inaccurate or incomplete information corrected;
• the right to request erasure of personal data in certain circumstances;
• the right to request restriction of processing in certain circumstances;
• the right to data portability where the legal requirements are met;
• the right to object to certain processing, including direct marketing;
• the right to withdraw consent where processing is based on consent; and
• rights relating to certain forms of automated decision-making and profiling where applicable.

These rights are not absolute and may be subject to legal limitations. We may need to verify your identity before responding to a request.

To exercise a right or ask a privacy question, contact us at olga@evavictoria.ie.

12. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC), the supervisory authority for data protection in Ireland, where you believe your rights have not been respected.

13. Children and Personal Data

Our website is intended for customers who are legally able to enter into transactions. We do not knowingly seek to collect personal data from children except where permitted by law and with appropriate involvement of a parent or guardian where required.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or applicable data protection requirements.

The current version will be published on this website with its effective or updated date. We recommend checking this page periodically so that you remain aware of how we handle personal data.

15. Contact Information

If you have a question about this Privacy Policy, want to exercise a data protection right, or wish to contact us about our privacy practices, please contact: