Last updated: 21 October 2026
This Privacy & Security Policy explains how Ireland My Green Diamond handles personal information when you place an order, contact us or use our digital channels. We handle personal information in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other applicable Irish and EU data protection laws.
1. Who We Are
Ireland My Green Diamond is a brand within the Noropa Travel group, established in Ireland and operating digitally. It does not maintain a public-facing physical shop or customer collection office. Privacy enquiries can be sent to the official contact channels below.
For data protection purposes, the controller is the person or legal entity that determines the purposes and means of processing personal information for the relevant activity.
2. Personal Information We Collect
Depending on your order and how you contact us, we may collect only the information reasonably needed to handle the transaction, such as:
- your full name;
- your delivery address and Eircode for postal delivery;
- a landmark or delivery instruction, if you choose to provide one;
- your email address and/or WhatsApp contact details;
- the products ordered, order notes and selected fulfilment method;
- payment confirmation or transaction reference, without requesting your online banking password or card security credentials;
- the registered partner collection point selected for an order, where relevant; and
- information you provide when contacting us with a question, complaint or return request.
Please do not send passwords, full card details, banking login credentials or other unnecessary sensitive information through email or WhatsApp.
3. Why We Use Personal Information and Our Lawful Bases
- To process and fulfil an order: to confirm the order, verify payment, prepare the product, arrange An Post delivery or partner collection, and communicate with you. The lawful basis is performance of a contract or steps taken at your request before entering into a contract.
- To meet legal obligations: to maintain required accounting, tax, consumer-law and transaction records. The lawful basis is compliance with a legal obligation.
- To handle enquiries, complaints, returns and refunds: to respond to your request and manage our legal rights and obligations. The lawful basis may be contract performance, legal obligation or legitimate interests, as applicable.
- To protect our business and customers: to prevent fraud, verify payment and maintain the security of our digital channels. The lawful basis may be legitimate interests, balanced against your rights and freedoms.
- To send marketing: to send promotional offers by email or WhatsApp only where the required consent has been obtained or another lawful basis is available under applicable law. Where consent is used, you can withdraw it at any time.
4. Data Minimisation and Repeated Orders
We request information that is reasonably necessary to process and fulfil the order. You may be asked to provide your details again for a new order so that the information can be confirmed as current and accurate. We do not use order information for unrelated purposes or sell personal information to third parties.
5. Sharing Personal Information
We may share the minimum information necessary with service providers involved in fulfilling your order, such as An Post, a payment provider, a registered partner location handling collection, or a digital service provider supporting our email, website or communications. These parties may process information only as necessary for their services and subject to applicable legal requirements.
We may also disclose information where required by law, a court, a regulator or a competent public authority, or where necessary to establish, exercise or defend legal claims. We do not sell personal information.
6. International Transfers
Where a service provider processes personal information outside the European Economic Area, the transfer must be supported by a valid legal mechanism under data protection law, such as an adequacy decision or appropriate safeguards. Information about a specific transfer can be requested using the contact details in this policy.
7. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer service, handling disputes and meeting applicable accounting, tax and legal retention requirements. Retention periods may therefore vary according to the type of record and the relevant legal obligation. When information is no longer required, it will be securely deleted or anonymised where appropriate.
8. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or destruction. Measures may include limiting access to information, using secure account credentials, keeping systems updated, using encrypted connections where available and taking appropriate backups. No method of electronic transmission or storage can be guaranteed to be completely secure.
9. Cookies and Website Technologies
Our website may use essential technologies needed for basic operation, security and order processing. Where non-essential cookies or similar technologies are used, they will be handled in accordance with applicable rules and consent will be requested where required. You can manage cookie preferences through any cookie control provided on the website and through your browser settings.
10. Your Data Protection Rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- request access to your personal information;
- request correction of inaccurate or incomplete information;
- request erasure of information where the legal conditions are met;
- request restriction of processing in certain circumstances;
- object to processing based on legitimate interests;
- receive certain information in a portable format where the right to data portability applies;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with the Data Protection Commission in Ireland.
To exercise a right, contact sales@irelandmygreendiamond.ie or WhatsApp +353 85 737 23 47. We may need to verify your identity before responding. We will respond within the time limit required by law.
Data Protection Commission: www.dataprotection.ie.
11. Marketing Preferences
We will send marketing communications by email or WhatsApp only where the required consent or other lawful basis applies. You can opt out at any time by using an unsubscribe link where available or by contacting us directly. We may still send non-promotional messages necessary to fulfil an order or respond to your enquiry.
12. Children
Our products and ordering services are intended for general customers and are not directed at children. We do not knowingly collect children’s personal information for marketing purposes. If you believe a child has provided personal information to us unnecessarily, contact us so that we can review the matter.
13. Changes to This Policy
We may update this policy to reflect changes in our services, legal requirements or data handling practices. The current version will be published on our digital channels with its latest updated date.
14. Contact
For privacy questions or requests concerning your personal information, contact Ireland My Green Diamond at sales@irelandmygreendiamond.ie or WhatsApp +353 85 737 23 47.