Privacy Policy

Privacy Policy

Effective date: 9 October 2025

1) Who we are

AcrossThePondFoods.com (“Across the Pond Foods”, “we”, “our”, “us”) is an online store selling foods from Ireland to customers in the United States and other locations. We operate a WordPress/WooCommerce e-commerce website at https://acrossthepondfoods.com.

Controller: International Systems Equipment Ltd.
Address: Cabra Business Park, Thurles, Co. Tipperary, E41 WY66, Ireland
Email: hello@acrossthepondfoods.com

We are the “controller” of your personal data under EU/EEA and Irish law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Acts 1988–2018 (Ireland). We have not appointed a Data Protection Officer. For privacy questions, contact us by email.

Transparency commitment (important for Google Shopping): We do not hide or misrepresent how we collect or use data. Before you buy, we show the full price we can calculate (and explain any duties/taxes we can’t). We do not imply endorsements or affiliations that do not exist.

2) Scope

This policy explains how we collect, use, disclose, and protect personal data when you visit our website, create an account, place an order, contact us, or otherwise interact with us. Cookies and similar technologies are covered in Section 8 and our Cookie Policy.

3) Data we collect

CategoryExamplesSource
Identity & contactname, billing & shipping address, email, phoneprovided by you (account, checkout, contact)
Order detailsitems purchased, order number, delivery instructions, order notesprovided by you and generated by us
Payment-related infopayment method, payment status, transaction IDs (we do not store full card numbers)provided to/processed by our payment providers
Account datausername, hashed password, order history, saved addressesprovided by you
Communicationsemails, contact forms, customer service messages, product reviewsprovided by you
Technical dataIP address, device identifiers, browser type/version, time zone, referral URLs, pages viewed, interaction datacollected automatically via your browser and cookies/SDKs
Marketing preferencesnewsletter opt-in/opt-out, consent recordsprovided by you

We do not intentionally collect special category data (e.g., health, religion) or criminal offence data.

4) Purposes and legal bases

We process personal data only where an Article 6 GDPR legal basis applies:

PurposeLegal basis
Process and fulfil orders, take payment, arrange delivery, provide invoices and updatesContract (Art. 6(1)(b))
Create/manage your account and order historyContract (Art. 6(1)(b))
Customer support and enquiriesContract (Art. 6(1)(b)); Legitimate interests (Art. 6(1)(f))
Fraud prevention, security, abuse monitoringLegitimate interests (Art. 6(1)(f)); Legal obligation (Art. 6(1)(c))
Service communications about your order/accountContract (Art. 6(1)(b))
Marketing emails (e.g., promotions)Consent (Art. 6(1)(a)); you may withdraw at any time
Site operation, diagnostics, debugging, analytics to improve user experienceLegitimate interests (Art. 6(1)(f))
Compliance with tax, accounting, consumer and customs lawsLegal obligation (Art. 6(1)(c))

When we rely on legitimate interests, we balance them against your rights and freedoms.

5) If you don’t provide data

If you don’t provide required data (e.g., name, address, payment details), we cannot process your order. For optional activities like marketing, you are not required to provide data; refusal has no effect on purchases.

6) Platform & hosting (WordPress/WooCommerce)

Our store runs on WordPress and WooCommerce. Data you provide is stored on our website and processed by our service providers (see Section 7) for hosting, payments, email delivery, and shipping. When you leave reviews/comments, the site may collect your IP address and browser user agent to help spam detection.

7) Who we share data with (recipients)

We share personal data only as needed for the purposes above:

We require processors to use appropriate safeguards and process personal data only on our documented instructions.

8) Cookies and similar technologies

We use cookies/SDKs to:

You can manage preferences in our cookie banner (where available) and via your browser settings. Essential cookies are necessary and cannot be switched off. Details of cookies and retention are in our Cookie Policy (linked in the footer).

9) International transfers

We are based in Ireland and mainly process data in the EEA. Some providers are outside the EEA, including the United States. Where personal data is transferred to a country without an EU adequacy decision, we use appropriate safeguards such as EU Standard Contractual Clauses (SCCs). For eligible U.S. providers, we may rely on the EU-U.S. Data Privacy Framework. You can request information on relevant safeguards at hello@acrossthepondfoods.com (we may redact sensitive details).

10) Data retention

We keep personal data only as long as necessary for the purposes collected and to meet legal/accounting/reporting requirements.

DataTypical retention
Order records (identity/contact/order details/invoices)up to 7 years from the end of the relevant tax year
Account datafor as long as the account is active; upon deletion request, we delete/anonymise within a reasonable period unless retention is required by law
Customer service communicationsup to 3 years after resolution
Marketing consent & suppression recordswhile subscribed and up to 2 years after withdrawal (for suppression)
Technical/security logstypically 6–24 months, longer if needed for investigations

We may anonymise data (no longer personal) and retain it indefinitely.

11) Security

We use appropriate technical/organisational measures: HTTPS/TLS, access controls, least-privilege policies, secure password hashing, regular patching/backups. No system is completely secure; please use a strong unique password and keep your credentials confidential.

12) Your rights (GDPR)

Subject to conditions and exemptions, you have the right to access, rectification, erasure, restriction, portability, object (including to legitimate interests) and to withdraw consent at any time (without affecting prior processing). We do not make decisions solely based on automated processing that produce legal or similarly significant effects.

To exercise rights, email hello@acrossthepondfoods.com. We may verify your identity. We aim to respond within one month (may extend by up to two months for complex requests).

13) Children’s data

Our website is not directed to children and we do not knowingly collect personal data from anyone under 16. If a child has provided data, contact us and we will take appropriate steps to delete it.

14) Marketing communications

If you opt in, we may send marketing emails about products and offers. You can unsubscribe any time using the link in the email or by contacting us at hello@acrossthepondfoods.com. We do not sell your data to third parties for their own marketing.

15) Complaints

Please contact us first with any concerns. You also have the right to complain to the Data Protection Commission (DPC) in Ireland or to your local EU supervisory authority.

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — www.dataprotection.ie

16) Changes to this policy

We may update this policy from time to time. We will post the updated version on our website and adjust the effective date. If changes materially affect your rights, we will provide additional notice (e.g., email or on-site notice).

17) Contact us

Email: hello@acrossthepondfoods.com
Post: Cabra Business Park, Thurles, Co. Tipperary, E41 WY66, Ireland


18) Additional disclosures for United States residents (CCPA/CPRA & similar)

We are an Ireland-based retailer that sells to U.S. customers. The following disclosures apply to U.S. residents where state laws (e.g., California CCPA/CPRA, Colorado, Connecticut, Virginia) require them.

Categories collected (past 12 months)

Purposes of collection/use

As described in Sections 4–8 (fulfil orders, customer service, security/fraud prevention, analytics, marketing with consent, legal compliance).

Sources of personal information

You (account, checkout, contact), your device/browser (cookies/SDKs), and our service providers (payments, shipping).

Sharing/disclosure

We disclose personal information to service providers (payments, hosting, email, shipping, security, professional advisers) for business purposes. We do not sell personal information for money. We also do not “share” personal information for cross-context behavioural advertising unless you consent via our cookie banner (if we enable such tools). You can opt out at any time via the cookie banner or by emailing us.

Retention

See Section 10.

Your U.S. rights

Depending on your state, you may have rights to access, correct, delete, port, and opt out of sales or sharing for targeted advertising, and to appeal a decision. Submit requests at hello@acrossthepondfoods.com. We will verify requests and respond within the required timeframes. We will not discriminate against you for exercising your rights.

Do Not Track / Global Privacy Control

Where legally required and technically feasible, we honour Global Privacy Control (GPC) signals as an opt-out of targeted advertising/cross-context sharing.


19) Service provider list (high-level categories)

To stay accurate and avoid implying affiliations we don’t have, we disclose categories rather than an exhaustive brand list (which may change):

If you need the current list of specific vendors, contact hello@acrossthepondfoods.com.


20) Cookie & consent banner (implementation notes)