Privacy Policy
Last updated: September 2026
Key Details
Data Controller
Orla Cusack, trading as Practical & Precious
Contact
practicalandprecious@gmail.com
Website
1. Who We Are
Practical & Precious is operated by Orla Cusack, a sole trader based in Ireland. In this Privacy Policy, "we", "us", and "our" refer to Orla Cusack trading as Practical & Precious.
Practical & Precious is the data controller in respect of any personal data collected through:
•Our website at www.practicalandprecious.ie
•Our social media channels (Instagram, TikTok, Pinterest, YouTube)
•Email communications and newsletter subscriptions
•Our digital products, courses, and any e-commerce functionality on our website
As a data controller, we are responsible for deciding how and why your personal data is processed, and we are committed to handling it in accordance with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and all other applicable data protection legislation.
2. Contact Details
If you have any questions about this Privacy Policy, or if you wish to exercise any of your data protection rights, please contact us:
Orla Cusack — Practical & Precious
Email: practicalandprecious@gmail.com
Website: www.practicalandprecious.ie
We will respond to your enquiry within one calendar month of receipt.
3. Personal Data We Collect
We collect and process the following categories of personal data, depending on how you interact with us:
3.1 Information You Provide Directly
•Name and email address — when you subscribe to our newsletter, purchase a product, or complete a contact form.
•Billing and shipping address — when you make a purchase through our website.
•Payment information — processed securely by our payment provider (see Section 6); we do not store card details.
•Messages and enquiries — the content of any message you send us via our website contact form or by email.
•Social media handles — if you share these with us voluntarily.
•User-generated content — comments, reviews, or other content you submit to us.
3.2 Information Collected Automatically
•Device and browser information — including browser type, operating system, and device identifiers.
•IP address — collected automatically when you visit our website.
•Usage data — pages visited, time spent, referring URLs, and click behaviour.
•Cookie data — as described in our Cookie Policy (available on our website).
3.3 Information From Third Parties
•Social media data — if you interact with our social media accounts (Instagram, TikTok, Pinterest, YouTube), those platforms may share limited interaction data with us in accordance with their own privacy policies.
•Analytics providers — aggregated, anonymised data from Google Analytics about how visitors use our website.
4. How and Why We Use Your Data
We only process your personal data where we have a valid lawful basis to do so under Article 6 of the GDPR. The table below sets out the purposes for which we process personal data and the lawful basis we rely on.
Purpose
Sending our newsletter and marketing emails
Name, email address
Consent (Art. 6(1)(a))
Processing orders and delivering digital products
Name, email, billing address, payment data
Contract (Art. 6(1)(b))
Responding to enquiries and customer support
Name, email, message content
Contract / Legitimate Interests (Art. 6(1)(b)(f))
Improving our website and user experience
Usage data, IP address, cookie data
Legitimate Interests (Art. 6(1)(f))
Analytics and website performance
Anonymised usage data
Legitimate Interests (Art. 6(1)(f))
Complying with legal obligations (e.g. tax records)
Name, address, transaction data
Legal Obligation (Art. 6(1)(c))
Preventing fraud and ensuring website security
IP address, device data
Legitimate Interests (Art. 6(1)(f))
Where we rely on legitimate interests as our lawful basis, we have carried out a balancing test to confirm that our interests are not overridden by your rights and interests. You may request a copy of our legitimate interests assessment by contacting us.
5. Email Marketing
We send our newsletter and promotional emails only to people who have explicitly opted in to receive them. Each marketing email we send includes an unsubscribe link that allows you to opt out at any time, at no cost.
If you unsubscribe, we will remove you from our marketing list promptly — within 10 working days at most. We may retain your email address on a suppression list to ensure we do not contact you again in error.
We use a third-party email marketing platform to manage our mailing list and send communications. Please see Section 6 for details.
6. Third Parties We Share Data With
We do not sell, rent, or trade your personal data with third parties for their own marketing purposes. We may share your data with the following categories of trusted third-party service providers, who act as data processors on our behalf:
Service Provider
Purpose & Data Shared
Email marketing platform (e.g. Mailchimp / Flodesk)
Managing newsletter subscriptions and sending marketing emails — name and email address
Payment processor (e.g. Stripe / PayPal Payments)
Securely processing online payments — billing details and transaction data. We do not store card data ourselves.
E-commerce platform
Managing our online shop, orders, and customer accounts — name, address, order history
Google Analytics
Website analytics — anonymised usage and device data
Google (Workspace)
Email hosting and business communications — email correspondence
Social media platforms (Meta, TikTok, Pinterest, YouTube)
Content distribution and audience insight — interaction data under each platform's own policies
Cloud storage / file hosting
Secure storage of business files — may include customer data where necessary
All third-party processors we engage are required to handle your data securely, in accordance with GDPR, and only for the specific purposes we instruct them to.
7. International Data Transfers
Some of the third-party service providers we use are based outside the European Economic Area (EEA), including in the United States. Where your personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as:
•Standard Contractual Clauses (SCCs) approved by the European Commission.
•An adequacy decision by the European Commission in respect of the destination country.
•The EU-US Data Privacy Framework, where applicable.
You may request further information about the specific safeguards in place for any international transfer by contacting us.
8. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are as follows:
Data Type
Retention Period
Newsletter subscribers
Until you unsubscribe, plus 12 months on a suppression list
Customer order records
7 years (Irish Revenue statutory requirement)
Contact form enquiries
2 years from the date of last contact
Website analytics data
26 months (Google Analytics default)
Cookie consent records
12 months
General business correspondence
3 years from the date of the communication
When your data is no longer required, we will securely delete or anonymise it.
9. Your Data Protection Rights
Under GDPR, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to certain exceptions, but we will always respond to your request and explain our reasoning if we are unable to fulfil it.
Right of Access (Article 15)
You have the right to request a copy of the personal data we hold about you, along with information about how we use it. This is known as a Subject Access Request (SAR).
Right to Rectification (Article 16)
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Article 17)
You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it. This is sometimes called the "right to be forgotten".
Right to Restriction of Processing (Article 18)
You have the right to ask us to restrict the processing of your personal data in certain circumstances — for example, while we verify the accuracy of data you have contested.
Right to Data Portability (Article 20)
Where we process your data on the basis of consent or contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transferred to another controller where technically feasible.
Right to Object (Article 21)
You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an unconditional right to object to direct marketing at any time.
Right to Withdraw Consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority for data protection in Ireland:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
Website: dataprotection.ie
Phone: +353 57 868 4800
We would, however, appreciate the opportunity to address your concerns before you approach the DPC, so please contact us in the first instance.
To exercise any of your rights, please contact us at hello@practicalandprecious.ie. We will respond within one calendar month. We may need to verify your identity before acting on a request.
10. Cookies
Our website uses cookies and similar tracking technologies. For full details of the cookies we use, why we use them, and how you can manage your preferences, please refer to our Cookie Policy, which is available on our website.
11. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with their personal data without appropriate parental consent, please contact us immediately and we will take steps to delete that information.
12. Links to Third-Party Websites
Our website may contain links to third-party websites, including our social media profiles and the platforms of brands or collaborators we work with. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of any linked third-party websites and encourage you to review their privacy policies before providing any personal data to them.
13. How We Keep Your Data Secure
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental loss, unauthorised access, use, alteration, or disclosure. These measures include:
•Using reputable, GDPR-compliant third-party platforms with their own robust security measures.
•Password-protecting business accounts and using multi-factor authentication where available.
•Transmitting data over secure, encrypted connections (HTTPS).
•Limiting access to personal data to those who genuinely need it for their role.
While we take every reasonable precaution, no method of data transmission over the internet or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and inform affected individuals without undue delay, as required by GDPR.
14. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make significant changes, we will update the "Last updated" date at the top of this page and may notify you by email or by displaying a prominent notice on our website.
We encourage you to review this policy periodically. Your continued use of our website following any changes constitutes your acknowledgement of the updated policy.