This privacy policy sets out how Bernard Dervan & Co. Ltd (trading as Dervans Fashions) uses and protects any information that you provide when using this website (hereafter "the Store"). We are fully committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

Should we ask you to provide certain information by which you can be identified when using this website, you can be assured that it will only be used in accordance with this privacy statement. We may update this policy from time to time by updating this page. You should check this page periodically to ensure you are happy with any changes.

1. What We Collect

We may collect the following personal information when you browse, create an account, or make a purchase on our website:

• Name and contact details (including billing address, shipping address, email address, and phone number).
• Payment details (processed securely by third-party payment processors; we do not store full credit card details).
• IP address, device information, and browsing behaviour on our store.
• Any other information relevant to customer surveys, reviews, and/or promotional offers.

2. How We Use the Information We Gather

We require this information to understand your needs, fulfill your orders, and provide you with a better service, specifically for the following reasons:

• To process, fulfill, and ship your orders (including sharing details with our shipping partners like An Post).
• Internal record keeping and accounting requirements.
• To improve our product offerings, website functionality, and customer service.
• To send promotional emails about new products, special offers, or other information we think you may find interesting—but only if you have explicitly opted in to receive marketing. You can opt out at any time.
• To contact you regarding transactional issues, such as abandoned carts, order updates, or Click & Collect notifications.

3. Legal Basis for Processing Personal Data

Under the GDPR, we rely on the following legal bases to process your personal data:

• Performance of a Contract: Processing is necessary to fulfill and deliver your orders.
• Consent: You have explicitly agreed to receive promotional emails, or allowed non-essential tracking cookies.
• Legal Obligation: For tax, accounting, and financial reporting compliance under Irish law.
• Legitimate Interests: To protect our website against fraud, secure our business, and understand customer shopping patterns to improve our store.

4. Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Our store is hosted on Shopify, which is certified Level 1 PCI DSS compliant, ensuring payment transaction data is fully encrypted and secure.

5. Sharing Your Information

We do not sell, distribute, or lease your personal information to third parties. We only share necessary personal data with trusted third parties to run our business, including:

• Shopify: Our e-commerce platform provider.
• Payment Processors: To securely process transactions.
• Delivery Partners: Such as An Post, to deliver your parcels.
• Marketing & Analytics Tools: To understand traffic and manage marketing (subject to your cookie preferences).

6. Your Rights Under GDPR

As a resident of Ireland or the EU, you have the following legal rights regarding your personal data:

• The right to access: You can request a copy of the personal information we hold about you. This service is entirely **free of charge**.
• The right to rectification: You can request that we correct any inaccurate or incomplete personal information.
• The right to erasure ("Right to be Forgotten"): You can request that we delete your personal data under certain conditions.
• The right to restrict or object to processing: You can object to us processing your data, particularly for direct marketing.
• The right to data portability: You can request that we transfer your collected data to another organization.

To exercise any of these rights, please email us at online@dervansfashions.ie. We will respond to your request within 30 days.

---

7. How We Use Cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree via our cookie consent banner, the file is added, and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual.

We use essential cookies to run our shopping cart and checkout, and performance/analytics cookies to evaluate website traffic. You can choose to accept or decline cookies. Declining tracking cookies will not affect your ability to browse our store, but declining essential cookies may prevent you from completing a purchase.

8. List of Key Cookies We Collect

As our store is powered by Shopify, the table below lists the essential and performance cookies used on our website to ensure a seamless shopping experience:

Cookie Name	Cookie Purpose & Description
_ab	Used in connection with access to admin settings.
_secure_session_id	Essential cookie used in connection with navigation through a storefront and checkout.
cart	Essential cookie used in connection with the shopping cart. Keeps track of items in your cart.
cart_sig	Used in connection with checkout.
cart_ts	Used in connection with checkout.
checkout_token	Used in connection with checkout.
secret	Used in connection with customer login verification.
keep_alive	Used in connection with buyer sessions.
_shopify_y	Shopify analytics. Keeps track of user behavior.
_shopify_s	Shopify analytics. Keeps track of sessions.
_shopify_sa_p	Shopify analytics relating to marketing and referrals.
_y / _s	Shopify performance and visitor metrics tracking.

---

9. Links to Other Websites

Our website may contain links to other websites of interest (for example, the An Post portal). Once you leave our site, please note that we have no control over other websites. Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting such sites. Such sites are not governed by this privacy statement.

10. Contact Us & Data Protection Complaints

If you have questions about this privacy statement, the data we hold, or wish to file a correction or erasure request, please contact us at:

Bernard Dervan & Co. Ltd (trading as Dervans Fashions)
62-65 Main Street, Loughrea, Co. Galway, H62 VX03
Email: online@dervansfashions.ie

If you feel we have not handled your personal data correctly, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.