Craftgift.ie Privacy Policy
Last updated: 1 August 2026
1. Introduction
CraftGifts.ie respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit CraftGifts.ie, create an account, place an order, apply for or operate a seller account, contact us or otherwise use our marketplace services.
This Policy also explains how personal data may be processed through shared marketplace systems, which currently includes CraftGifts.ie and Gifts4U.ie.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679, the Data Protection Act 2018, applicable Irish electronic communications law and other applicable data-protection legislation.
2. Who We Are
CraftGifts.ie is operated under licence by:
IPCOM LIMITED
Company number: 602426
Registered office: Maynooth, Co. Kildare, Ireland
Email: admin@craftgifts.ie
Telephone: +353 (0)85 171 6344
IPCOM LIMITED is the controller of personal data processed in connection with operating CraftGifts.ie and the shared marketplace platform, except where this Policy explains that a marketplace seller, payment provider or another party acts as a separate controller.
IPCOM LIMITED has not appointed a Data Protection Officer. Questions, requests or concerns relating to personal data may be sent to admin@craftgifts.ie.
3. Our Shared Marketplace Platform
CraftGifts.ie and Gifts4U.ie are operated under licence by IPCOM LIMITED and may use shared technical infrastructure and databases.
The two marketplaces have separate branding and commercial focuses: CraftGifts.ie specialises in handmade, craft, artisan and creative products, while Gifts4U.ie is intended to offer a broader range of gifts and retail products.
Because the marketplaces use a shared platform and database, the following information may be stored, administered and processed within the same technical system:
- customer accounts and login information;
- seller accounts and seller-administration information;
- product listings, descriptions, images and inventory information;
- orders, payments, delivery information, returns and refunds;
- customer and seller communications;
- security, audit and technical records; and
- marketing and cookie preferences.
A customer or seller account created through one marketplace may therefore be recognised or administered through shared systems used by the other marketplace.
Products may also be made available through more than one marketplace where this is appropriate to the product, seller and commercial focus of each website.
Order and account information may be accessible to authorised administrators through the shared platform where necessary to:
- operate and maintain the marketplaces;
- administer customer and seller accounts;
- process and manage orders;
- facilitate payments, seller payouts, returns and refunds;
- provide customer and seller support;
- maintain platform security;
- prevent fraud and misuse;
- comply with legal and accounting obligations; and
- improve the operation of the marketplace services.
Information held within the shared platform will only be used for the purposes explained in this Privacy Policy and on an appropriate lawful basis.
Marketing preferences across the marketplaces
CraftGifts.ie and Gifts4U.ie are separate brands for marketing purposes.
Agreeing to receive marketing from CraftGifts.ie will not automatically be treated as consent to receive marketing from Gifts4U.ie, or vice versa, unless the consent request clearly states that it applies to both marketplaces.
Where a marketing preference or objection is recorded through the shared platform, we may retain and apply that preference across the relevant systems to ensure that the user's choice is respected.
4. Marketplace Sellers
CraftGifts.ie is an online marketplace through which independent sellers offer products for sale.
IPCOM LIMITED controls personal data used to operate the marketplace, administer accounts, facilitate orders, provide support, maintain security and manage the shared platform.
When you place an order, the relevant seller will receive the personal data reasonably necessary to accept, fulfil and administer that order. This may include:
- your name;
- your delivery address;
- your email address and telephone number;
- the products ordered;
- personalisation instructions;
- delivery and tracking information;
- communications relating to the order; and
- return, refund or complaint information.
The seller will generally act as a separate data controller when using that information to:
- accept and fulfil the sales contract;
- prepare, personalise and dispatch goods;
- communicate with you about your order;
- deal with delivery, returns, refunds and complaints;
- comply with the seller's tax, accounting and legal obligations; and
- establish, exercise or defend legal claims.
Sellers must not use personal data received through the marketplace for unrelated direct marketing unless they have their own valid lawful basis and comply with all applicable marketing and data-protection legislation.
Where a data-protection request concerns processing undertaken independently by a seller, we may direct you to that seller or assist in transmitting the request.
5. Personal Data We Collect
Depending on how you use the marketplace, we may collect and process the following categories of personal data.
Identity and account data
- name;
- username and account identifier;
- password in encrypted or hashed form;
- customer or seller account type;
- account status;
- login records; and
- account-security information.
Contact and address data
- email address;
- telephone number;
- billing address;
- delivery address; and
- business or trading address.
Order and transaction data
- products ordered;
- seller information;
- order value and currency;
- payment and order status;
- delivery and tracking information;
- personalisation instructions;
- order history;
- cancellations, returns, exchanges and refunds;
- discounts, gift certificates and promotional codes; and
- complaints and dispute information.
Payment-related data
Payment-card credentials are ordinarily entered directly into systems operated by our payment-service providers and are not stored directly by CraftGifts.ie.
We may receive and retain related information, including:
- payment status;
- transaction reference;
- payment amount and currency;
- limited payment-method information;
- refund and chargeback information;
- seller payout information; and
- fraud, security or verification results.
Seller data
- business and trading details;
- company or sole-trader information;
- contact and address information;
- tax and VAT information;
- seller application and approval information;
- payment onboarding and payout information;
- product listings, images and descriptions;
- sales, commission, payout and refund records;
- seller-support communications;
- seller account activity; and
- compliance and account-status information.
Technical and usage data
- IP address;
- browser type and version;
- operating system and device information;
- session and login information;
- pages viewed and marketplace functions used;
- referring website, campaign or source;
- timestamps and server logs;
- security and error logs; and
- cookie and consent information.
Communications and content
- contact-form submissions;
- customer and seller enquiries;
- messages exchanged through the marketplace;
- reviews and other submitted content;
- complaints and dispute correspondence;
- customer-support records; and
- records of consent, objections and preference changes.
6. How We Obtain Personal Data
We may obtain personal data:
- directly from you when you create an account, place an order, submit a seller application, list a product, complete a form, contact us or exercise a legal right;
- automatically through cookies, server logs and similar technologies;
- through marketplace orders, payments, returns, refunds and communications;
- from marketplace sellers in connection with orders, complaints, refunds and seller administration;
- from payment, delivery, fraud-prevention, identity-verification and other service providers;
- from public company, business or professional registers where relevant to seller verification; and
- from CraftGifts.ie or Gifts4U.ie through the shared marketplace platform and database.
7. How and Why We Use Personal Data
| Purpose | Information used | Lawful basis |
|---|---|---|
| Create and administer customer accounts | Identity, contact, account and technical information | Performance of a contract or steps requested before entering a contract |
| Operate accounts across the shared CraftGifts.ie and Gifts4U.ie platform | Identity, contact, account, order and technical information | Performance of a contract and legitimate interests in operating an efficient shared marketplace platform |
| Process and facilitate marketplace orders | Identity, contact, order, payment and communications information | Performance of a contract and legitimate interests in operating the marketplace |
| Provide order information to the relevant seller | Identity, contact, delivery, order and personalisation information | Performance of a contract and steps requested before entering a contract |
| Facilitate payments, commission, seller payouts, chargebacks and refunds | Order, payment, seller and transaction information | Performance of a contract, legal obligations and legitimate interests in administering marketplace payments |
| Administer seller applications and seller accounts | Identity, contact, business, verification, payment onboarding and seller information | Steps requested before entering a contract, performance of a contract, legal obligations and legitimate interests |
| Provide customer and seller support | Identity, contact, account, order and communications information | Performance of a contract and legitimate interests in providing support and resolving problems |
| Deal with returns, refunds, complaints and disputes | Order, payment, communications and dispute information | Performance of a contract, legal obligations and legitimate interests in resolving complaints and defending legal claims |
| Prevent fraud, misuse and security incidents | Identity, account, transaction, technical and security information | Legitimate interests in protecting customers, sellers, systems and transactions, and legal obligations where applicable |
| Maintain accounting, tax and business records | Identity, order, payment, transaction and seller information | Compliance with legal obligations |
| Operate, maintain and improve the marketplaces | Technical, usage, communications and aggregated information | Legitimate interests in maintaining and improving the services, and consent where non-essential cookies or tracking technologies are used |
| Send optional marketing communications | Identity, contact and marketing-preference information | Consent or another lawful marketing basis where specifically permitted by law |
| Comply with legal or regulatory requirements | Any relevant category of personal data | Compliance with legal obligations and legitimate interests in establishing, exercising or defending legal claims |
8. Our Legitimate Interests
Where we rely on legitimate interests, those interests may include:
- operating and administering the marketplaces;
- maintaining the shared platform and database;
- providing customer and seller support;
- securing accounts, transactions and infrastructure;
- preventing and investigating fraud and misuse;
- improving the reliability and usability of our services;
- maintaining appropriate audit and business records;
- protecting the rights of customers, sellers and IPCOM LIMITED; and
- establishing, exercising or defending legal claims.
Before relying on legitimate interests, we consider whether the processing is necessary and whether your interests, rights or freedoms override those interests.
9. Information Required from You
Certain personal data is required to create an account, enter into a marketplace or sales contract, process payment, deliver an order or comply with legal obligations.
For example, we and the relevant seller generally require your name, contact details, order information and delivery address to process and fulfil an order.
Sellers are required to provide appropriate identity, business, contact and payment information to operate a seller account and receive payments.
If required information is not provided, we may be unable to:
- create or maintain an account;
- approve a seller application;
- process or fulfil an order;
- process payment or seller payouts;
- provide a requested service; or
- comply with a legal obligation.
10. Who We Share Personal Data With
We do not sell personal data.
Where necessary and lawful, we may share personal data with:
- marketplace sellers for order acceptance, fulfilment, delivery, customer service, returns, refunds and legal compliance;
- payment-service providers for payment processing, seller onboarding, payouts, refunds, fraud prevention and chargebacks;
- delivery, postal and logistics providers;
- hosting, cloud, email, database, security and technical-service providers;
- analytics, advertising and marketing providers where permitted by law and, where required, with your consent;
- customer-support and communications providers;
- accountants, auditors, legal advisers, insurers and other professional advisers;
- CraftGifts.ie and Gifts4U.ie through shared marketplace systems operated under licence by IPCOM LIMITED;
- a purchaser, investor or successor in connection with a proposed sale, restructuring or transfer of all or part of the business, subject to appropriate safeguards; and
- courts, regulators, public authorities and law-enforcement bodies where disclosure is required or permitted by law.
Where a service provider processes personal data solely on our behalf, we require appropriate contractual, confidentiality, security and data-protection safeguards.
11. International Data Transfers
Some service providers may process personal data outside Ireland or the European Economic Area.
Where personal data is transferred outside the EEA, we will use an appropriate transfer mechanism as required by law. Depending on the country and recipient, this may include:
- a European Commission adequacy decision;
- approved Standard Contractual Clauses;
- binding corporate rules;
- another legally recognised transfer mechanism; and
- supplementary technical, contractual or organisational safeguards where appropriate.
You may contact us for further information about safeguards relevant to a particular transfer.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security, complaint-handling and dispute-resolution requirements.
Retention periods depend on factors including:
- the type and sensitivity of the information;
- the purpose for which it was collected;
- whether an account or contract remains active;
- applicable tax, accounting and regulatory requirements;
- security and fraud-prevention requirements;
- whether a complaint, investigation or dispute is ongoing; and
- applicable statutory limitation periods.
| Record type | General retention approach |
|---|---|
| Orders, payments, invoices and transaction records | Retained for the period required by applicable accounting, tax and legal requirements |
| Customer and seller accounts | Retained while the account remains active and for an appropriate period after closure where required for administration, security or legal purposes |
| Seller applications and compliance records | Retained during the application or contractual period and afterwards where required for administration, compliance or legal claims |
| Support enquiries and correspondence | Retained according to the nature of the enquiry, contractual requirements and the possibility of a complaint or legal claim |
| Marketing preferences | Retained until consent is withdrawn or an objection is made; a limited suppression record may be retained to ensure that the preference continues to be respected |
| Technical and security logs | Retained for a limited operational or security period, unless required for an investigation or legal proceedings |
| Complaints, disputes and legal claims | Retained until final resolution and for any relevant period afterwards during which a claim may be brought |
13. Marketing Communications
We will send electronic marketing only where permitted by law.
Marketing consent may be requested separately for CraftGifts.ie and Gifts4U.ie, or through a clearly worded consent option that expressly covers both marketplaces.
Consent to marketing from one marketplace will not automatically be treated as consent to marketing from the other unless the consent request clearly stated that it applied to both brands.
You may withdraw marketing consent or object to direct marketing at any time by:
- using the unsubscribe link in the communication;
- changing your account preferences, where available; or
- contacting admin@craftgifts.ie.
Withdrawing consent does not affect processing carried out before the withdrawal.
Transactional and service communications relating to an account, order, payment, delivery, security matter or legal notice are not marketing communications and may continue where necessary.
14. Cookies and Similar Technologies
CraftGifts.ie and Gifts4U.ie use cookies and similar technologies to:
- operate the shared platform;
- maintain user sessions;
- remember account and website preferences;
- secure accounts and transactions;
- understand website usage; and
- support analytics, advertising and marketing where consent has been provided.
Cookies that are strictly necessary to provide a service requested by you may be used without consent.
Analytics, advertising and other non-essential cookies will only be used where the required consent has been obtained.
You may accept, reject or manage non-essential cookie categories through the cookie controls provided on the relevant marketplace.
Further information about the cookies used, their providers, purposes and durations is available through our Cookie Policy or cookie preference centre.
15. Automated Decision-Making
IPCOM LIMITED does not currently make decisions based solely on automated processing that produce legal effects, or similarly significant effects, for customers or sellers.
Payment, fraud-prevention or identity-verification providers may use automated tools when assessing transactions or accounts.
Where a provider acts as a separate controller, its own privacy policy will explain that processing and any rights that apply.
16. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include:
- account access controls and administrator permissions;
- password hashing and secure authentication;
- encryption of data in transit;
- system logging and security monitoring;
- backups and recovery procedures;
- software maintenance and security updates;
- supplier due diligence and contractual safeguards; and
- administrator confidentiality and access restrictions.
No internet-based service can guarantee absolute security. Customers and sellers should use strong, unique passwords and take reasonable steps to protect their login credentials.
17. Your Data-Protection Rights
Subject to the conditions and exemptions provided by law, you may have the right to:
- obtain confirmation as to whether we process your personal data;
- access personal data and receive a copy of it;
- correct inaccurate or incomplete personal data;
- request erasure of personal data in certain circumstances;
- request restriction of processing in certain circumstances;
- receive certain personal data in a structured, commonly used and machine-readable format;
- transmit eligible personal data to another controller;
- object to processing based on legitimate interests;
- object to direct marketing at any time;
- withdraw consent where processing is based on consent;
- not be subject to certain decisions based solely on automated processing; and
- lodge a complaint with a supervisory authority.
These rights are not absolute. A request may be restricted or refused where permitted by law, including where information must be retained to comply with a legal obligation or establish, exercise or defend a legal claim.
18. Exercising Your Rights
To exercise a data-protection right, contact:
Please describe your request clearly and identify the account, order, seller account or other information concerned.
We may request reasonable evidence of identity where necessary to prevent unauthorised disclosure. We will not request more information than is reasonably necessary to verify the requester.
We will respond within the period required by law. In complex cases, or where several requests are received, that period may be extended where legally permitted. We will explain any permitted extension.
Ordinarily no fee is charged. A reasonable fee may be charged, or a request may be refused, where permitted by law because it is manifestly unfounded or excessive.
19. Children's Personal Data
The marketplaces are intended for adults who can enter legally binding transactions.
We do not knowingly invite children to create seller accounts or enter sales contracts independently where they do not have legal capacity to do so.
Products intended for children are purchased by adults.
Where personalisation information concerning a child is supplied, it should be provided only by a parent, guardian or another person lawfully entitled to provide it.
If you believe that a child has provided personal data improperly, please contact us so that the matter can be investigated.
20. External Links and Third-Party Services
CraftGifts.ie may contain links to seller websites, social-media services and other third-party websites.
Those third parties may process personal data under their own privacy policies.
IPCOM LIMITED is not responsible for independent processing undertaken by a third party merely because a link to that service appears on one of our marketplaces.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our marketplaces, shared platform, technology, service providers, legal obligations or processing activities.
The current version will be published on CraftGifts.ie with the date on which it was last updated.
Where a change materially affects how personal data is used, we will take reasonable steps to bring it to the attention of affected users where required.
22. Complaints
If you have concerns about how IPCOM LIMITED processes your personal data, please contact us first at:
You also have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Telephone: 01 765 0100
Website: www.dataprotection.ie
