Privacy policy

Privacy Policy

Last updated: 5 September 2026

1. About this Privacy Policy

This Privacy Policy explains how AMATTE collects, uses, stores and shares personal data when you visit www.amatte.ie, purchase a product, contact us or otherwise interact with our services.

AMATTE is operated by Janaina C., trading as AMATTE. For the purposes of the General Data Protection Regulation (“GDPR”) and applicable Irish data protection law, AMATTE is the data controller for the personal data described in this policy.

2. Contact details

Email: hello@amatte.ie
Website: www.amatte.ie

3. Personal data we collect

Depending on how you interact with us, we may collect:

  • Your name, email address, telephone number and postal address;
  • Billing and delivery information;
  • Order details, products purchased and transaction history;
  • Personalisation information, such as names, dates, wording, colours and design choices;
  • Messages, customer-service enquiries, reviews and other communications;
  • Account details and preferences, if customer accounts are enabled;
  • Payment status and limited payment information provided by our payment processors;
  • IP address, browser type, device information, cookie identifiers and website activity;
  • Marketing preferences and newsletter subscription status;
  • Information necessary to prevent fraud, protect our website and comply with legal obligations.

AMATTE does not directly store full payment-card numbers. Payments are processed by Shopify Payments or other payment providers made available at checkout.

4. Personalisation information relating to children

Some products may be personalised with a child’s name, birth date or other information supplied by a parent, guardian or other adult purchaser.

We use this information only to create and fulfil the requested product, provide customer support and retain necessary order records.

Customers should provide only the information required for the personalisation. Please do not submit medical information, identification documents or other sensitive information about a child.

Our website is directed to adults and is not intended for children to create accounts or place orders independently.

5. How we obtain personal data

We may collect personal data:

  • Directly from you when you place an order, complete a form, subscribe to marketing or contact us;
  • Automatically through cookies and similar technologies when you use the website;
  • From Shopify and payment providers when they process a transaction;
  • From delivery carriers when they provide shipment or delivery updates;
  • From security, fraud-prevention and technical service providers;
  • From social-media platforms when you interact with an AMATTE account or use an integrated feature.

6. How and why we use personal data

We process personal data only where we have a lawful basis under applicable data protection law.

Contract

We process personal data where necessary to:

  • Receive and assess an order;
  • Process payment;
  • Create personalised or made-to-order products;
  • Arrange production, dispatch and delivery;
  • Provide order updates;
  • Handle cancellations, returns, refunds and complaints;
  • Provide customer support; and
  • Enforce our Terms of Service.

Legal obligations

We may process and retain information where necessary to:

  • Maintain tax, accounting and transaction records;
  • Comply with consumer-protection and product-safety requirements;
  • Respond to lawful requests from public authorities;
  • Establish, exercise or defend legal claims; and
  • Prevent or report unlawful activity where required.

Legitimate interests

Where our interests do not override your rights, we may process data to:

  • Operate and secure our website;
  • Prevent fraud and misuse;
  • Improve our products, website and customer service;
  • Understand general store performance;
  • Keep appropriate records of communications;
  • Protect AMATTE, our customers and other users; and
  • Handle business administration.

Consent

Where required, we rely on your consent to:

  • Send marketing emails;
  • Use non-essential cookies;
  • Use certain analytics or advertising technologies; and
  • Publish identifiable customer photographs or content for promotional purposes.
  • You may withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before consent was withdrawn.

7. Marketing communications

We send marketing emails only where permitted by law.

You may unsubscribe at any time by selecting the unsubscribe link in a marketing message or contacting hello@amatte.ie.

Unsubscribing from marketing does not prevent us from sending necessary transactional messages about an order, payment, delivery, return or customer-service request.

We do not knowingly send direct marketing to children.

8. Cookies and similar technologies

Our website uses cookies and similar technologies to:

  • Operate essential website and checkout functions;
  • Remember selections and preferences;
  • Maintain security and prevent fraud;
  • Measure website performance;
  • Understand how visitors use the store; and
  • Support advertising, where consent has been provided.

Essential cookies may be used without consent where they are necessary to provide the service requested.

Where required by law, analytics, advertising and other non-essential cookies will not be activated until you provide consent through our cookie banner. You may change or withdraw your choices through the store’s privacy or cookie settings.

Further information may be provided through our cookie preferences tool.

9. How we share personal data

We may share personal data only where necessary with:

  • Shopify, which hosts and operates our e-commerce platform;
  • Payment processors and financial institutions;
  • Delivery carriers and postal providers;
  • Email, customer-support and communication providers;
  • Website hosting, security, analytics and fraud-prevention providers;
  • Professional advisers, such as accountants or legal advisers;
  • Government bodies, regulators, courts or law-enforcement authorities where legally required;
  • A purchaser or successor if the business is sold, reorganised or transferred, subject to appropriate safeguards.

These providers receive only the information reasonably necessary for their role and must process it under applicable law and contractual obligations.

We do not sell personal data for monetary payment.

10. Shopify

Our store is hosted by Shopify. Shopify processes personal data to provide the website, checkout, payment, security and related e-commerce services.

Shopify may also process certain information for its own purposes as described in the Shopify Consumer Privacy Policy.

Requests relating specifically to data controlled by Shopify may also be submitted through the Shopify Privacy Portal.

11. International data transfers

Some service providers, including Shopify and its partners, may process information outside Ireland or the European Economic Area.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we rely on appropriate safeguards, such as European Commission Standard Contractual Clauses, together with any additional measures required by law.

You may contact us for further information about the safeguards relevant to your personal data.

12. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on the type of information and may include:

  • Order, payment, invoice and accounting records: generally retained for at least six years where required for Irish tax and accounting purposes;
  • Customer-service and complaint records: retained for as long as necessary to resolve the matter and manage legal claims;
  • Personalisation details: retained with the relevant order record where necessary to demonstrate what was requested and supplied;
  • Marketing information: retained until you unsubscribe or consent is otherwise withdrawn, subject to keeping a minimal suppression record to respect your choice;
  • Website security records: retained for a limited period appropriate to security and fraud-prevention needs.

We may retain information for longer where required by law or necessary to establish, exercise or defend a legal claim. When information is no longer required, it will be deleted or anonymised.

13. Data security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, loss, alteration, disclosure or misuse.

No online system is completely secure. Please avoid sending payment-card details, identification documents or other unnecessary sensitive information by ordinary email.

If you create a customer account, you are responsible for keeping your password confidential.

14. Your GDPR rights

Subject to applicable conditions and exceptions, you may have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Request deletion of your data;
  • Restrict certain processing;
  • Object to processing based on legitimate interests;
  • Object at any time to direct marketing;
  • Receive certain data in a portable format;
  • Withdraw consent where processing is based on consent; and
  • Lodge a complaint with a data-protection authority.

To exercise a right, email hello@amatte.ie. We may request information necessary to confirm your identity and protect your data.

We will respond within the period required by applicable law, normally within one month. This period may be extended for complex or numerous requests where permitted, and we will inform you if an extension is necessary.

15. Complaints

Please contact us first at hello@amatte.ie if you have a concern about how we process personal data.

You also have the right to complain to the Irish supervisory authority:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Website: www.dataprotection.ie
Telephone: +353 1 765 0100

If you live elsewhere in the European Economic Area, you may also contact the data-protection authority in your country of residence.

16. Children

The store is intended for use by adults. We do not knowingly allow children to create accounts, place orders or subscribe to marketing.

If you believe a child has provided personal data directly to us without appropriate adult involvement, contact hello@amatte.ie so that we can review and, where appropriate, delete it.

This does not prevent an adult from supplying limited personalisation details necessary to create a product intended for a child, as described above.

17. External websites

Our website may contain links to third-party websites or social-media platforms. Those services operate under their own privacy policies, and AMATTE is not responsible for their independent privacy practices.

Please review the privacy information of any third-party service before providing personal data.

18. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, services or legal obligations.

The revised version will be published on this page with an updated date. Where required, we will provide additional notice or request renewed consent.

19. Contact

For questions, complaints or requests concerning personal data, contact:

Email: hello@amatte.ie