Last reviewed: 2026-08-20
Who is responsible for your information?
Blue Cap Timber is the controller of the personal data described in this notice. Contact: info@bluecaptimber.ie. Business address: 33 Cronan's Well park Mooretown Swords Co. Dublin.
Information we collect
Depending on how you use the website, we may process information including your name, email address, telephone number, billing/delivery address, order details, delivery or collection choice, correspondence, refund information and records needed to administer your purchase.
Payments are processed through Stripe. The Workshop stores payment/order identifiers and payment status needed to manage the order, but it is not designed to store your complete payment-card number.
Website analytics
The website includes server-side analytics used to understand traffic and product interest. The current analytics system records information such as page path, page title/type, an anonymised/hashed visitor identifier derived from a truncated network address and browser user-agent, referrer domain and broad device type. It is used for aggregate website analysis rather than to build a named customer advertising profile.
Why we use personal data
- To perform a contract: taking payment, processing orders, manufacturing goods, delivery/collection, customer service and order communications.
- To comply with legal obligations: accounting, tax, consumer-rights and other records we are required to retain.
- Legitimate interests: operating and securing the website, preventing abuse, maintaining appropriate business records, understanding website performance and dealing with enquiries, provided those interests are not overridden by your rights.
- Consent: where we specifically ask for consent for an optional use that requires it. Where processing is based on consent, it can be withdrawn without affecting earlier lawful processing.
Who receives personal data?
Information may be shared where necessary with service providers involved in operating the business, such as Stripe for payment processing, hosting/email providers, delivery providers, professional advisers and authorities where disclosure is legally required. Providers should receive only the information reasonably needed for their role.
International transfers
Some technology providers may process information outside Ireland or the European Economic Area. Where this occurs, the relevant provider/controller arrangements and lawful transfer safeguards should be reviewed as part of the business's data-protection compliance.
How long we keep information
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and dispute-resolution obligations. Business transaction records may need to be retained for a number of years; Irish Revenue guidance requires certain original business records to be retained for six years. Data that is no longer required should be securely deleted or anonymised where appropriate.
Your rights
Subject to the GDPR and applicable Irish data-protection law, you may have rights including access, rectification, erasure, restriction, portability and objection. Where processing relies on consent, you may withdraw that consent. Some rights are subject to legal conditions and exemptions.
To make a data-protection request, contact info@bluecaptimber.ie. You also have the right to lodge a complaint with the Irish Data Protection Commission.
Security
We use reasonable technical and organisational measures appropriate to the information and the way it is processed. No internet service can guarantee absolute security, so access to Workshop and service-provider accounts should be restricted to authorised users.
Changes to this notice
This privacy policy should be reviewed whenever the way the website or business processes personal data changes. The latest review date appears at the top of this page.