Privacy policy
# Privacy Policy
**Last updated: July 19, 2026**
## 1. Who We Are
HeartShield Ltd ("HeartShield", "we", "our", or "us") is committed to protecting and respecting your privacy.
- **Company name:** HeartShield Ltd
- **Registered address:** 20 Harcourt St., Dublin 2, D02 H364, Ireland
- **Email:** info@heartshield.ie
- **Phone:** 087 367 2420
- **Websites:** https://heartshield.ie · https://shop.heartshield.ie
This Privacy Policy explains how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Irish data protection laws. For the purpose of applicable data protection laws, HeartShield Ltd is the data controller of your personal information.
## 2. Information We Collect
We may collect and process the following information:
- Name and organisation name
- Email address and telephone number
- Delivery and billing address
- Information submitted through contact forms and quote requests
- Order and transaction information, including items you view, add to your cart, purchase, return or cancel
- Payment details (processed securely — see Section 5)
- Account information, such as your username and preferences, if you create a store account
- Device and usage information, including your IP address, browser type and how you interact with our websites, collected through cookies and analytics tools
- Marketing preferences and newsletter subscriptions
We collect this information directly from you, automatically through your use of our websites, and from service providers who process information on our behalf.
## 3. How We Use Your Information
We use your information to:
- Respond to enquiries and quote requests
- Process orders, payments, returns and exchanges
- Deliver products and services, including arranging shipping
- Provide customer support and maintain our business relationship with you
- Send updates and marketing communications where consent has been given
- Improve our websites and services
- Detect and prevent fraudulent, unsafe or malicious activity
- Meet legal and regulatory obligations
## 4. Legal Basis for Processing
We process personal information on the following legal bases:
- **Consent** — where you have given us clear, explicit permission to process your data.
- **Performance of a contract** — necessary to fulfil order delivery or pre-sale quotations.
- **Compliance with legal obligations** — fulfilling safety logs, corporate records, and clinical logs.
- **Legitimate business interests** — offering efficient advisor feedback and maintaining safety products.
## 5. Payment Information
Payments are processed through secure third-party payment providers. HeartShield Ltd does not store full payment card details on its systems.
## 6. Marketing Communications
Where you have provided consent, we may send you information about products, services and company updates. You may unsubscribe at any time using the link in our emails. If you opt out, we may still send you non-promotional messages, such as those about your account or orders.
## 7. Cookies and Analytics
We use Google Analytics, Shopify's platform cookies, and similar technologies to understand how visitors use our websites and to improve user experience. Please see our Cookie Policy for more information.
## 8. Sharing Information
We may share information with trusted third parties including:
- Website hosting and e-commerce platform providers (including Shopify)
- Payment processors
- Shipping and fulfilment partners
- Email and marketing service providers
- Professional advisers where necessary
- Government authorities where legally required
We do not sell your personal information.
## 9. Our Relationship with Shopify
Our online store at shop.heartshield.ie is hosted by Shopify, which collects and processes personal information about your access to and use of the store in order to provide and improve it. Information you submit to the store will be transmitted to and shared with Shopify, and with third parties that may be located in countries other than where you reside.
We may also use certain Shopify enhanced features that incorporate data obtained from your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to requests to exercise your rights over data used for these purposes. To learn more, visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en, where you may also exercise certain rights with respect to your personal information.
## 10. International Transfers
We may transfer, store and process your personal information outside the country you live in. If we transfer your personal information outside the European Economic Area, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country that has been determined to provide an adequate level of protection.
## 11. Children's Data
Our websites and services are not intended for use by children, and we do not knowingly collect personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below to request its deletion.
## 12. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.
## 13. Your Rights
Under GDPR, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Restrict or object to processing
- Request transfer of your data (portability)
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie)
You may exercise any of these rights by contacting us using the details below. We may need to verify your identity before processing your request, and we will not discriminate against you for exercising any of these rights.
## 14. Security
We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure. However, no security measures are perfect, and we recommend that you do not use unsecure channels to send us sensitive or confidential information.
## 15. Contact Us
If you have any questions about this Privacy Policy or your personal information, please contact:
**HeartShield Ltd Data Safety Desk**
20 Harcourt St., Dublin 2, D02 H364, Ireland
087 367 2420
info@heartshield.ie
## 16. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.