Privacy note

HYVE Grocers Ltd., trading as HYVE, company number 784901, is the controller for personal data processed through this website.

• Registered office: Saint Brendan's Street, Portumna, Galway, H53 AK88, Ireland
• Privacy contact: hyvegrocery@gmail.com
• Phone: +353 89 454 1692

We have not appointed a data protection officer.

The customer details we keep are your name, address, phone number, and email. We use them to deliver the order, hand it over at collection, and send the receipt.

• Account data: email address, the time you verify a one-time code, and your role on the account. We do not store a password. Sign-in codes are stored only as a hash, expire after 10 minutes, and can be tried a limited number of times.
• Order data: the goods, quantities, prices, delivery or collection choice, requested date, order notes, and the payment reference Stripe returns to us. Card numbers stay with Stripe.
• Guest checkout: the email address you enter. We create a customer record for that email so we can send the receipt and attach the order. The email stays unverified until you use a one-time code.
• A private order link in the receipt. It gives read-only access to that order for 30 days without signing in.
• Staff audit records. When a staff member changes shop data, we store who made the change, what changed, and the IP address and browser user-agent of that staff session.
• Technical data needed to run the site, including a sign-in cookie and the basket, wishlist, and theme values described in the cookie notice.

We do not ask for your card number. Stripe collects that on its own payment page. We do not use advertising profiles, and we do not sell personal data.

We use personal data on these grounds:

• Contract. To take your order, take payment, deliver or hand over the goods, send the receipt, and show you your orders. This covers guest checkout as well as signed-in checkout.
• Legal obligation. To keep accounting and tax records, and to respond to lawful requests.
• Legitimate interests. To limit repeated sign-in attempts, protect the shop from fraud and abuse, tell shop staff that an order has been paid, and keep an audit trail of staff changes. You can object to processing based on legitimate interests. We will stop unless we have a compelling reason to continue.

We do not send marketing messages. Email is used for one-time sign-in codes and order receipts. If text messages are switched on, they go to shop staff when an order is paid. They are not sent to you as marketing. We will ask for consent before we send marketing or set any non-essential tracking.

We use service providers who process data on our instructions:

• Neon, to host the database of accounts, addresses, and orders.
• Vercel, to host the website and run the unpaid-order cleanup.
• Stripe, to take card payments and confirm whether payment succeeded.
• Resend, to email sign-in codes and order receipts.
• Twilio, if it is enabled, to text shop staff that an order has been paid.
• Upstash, to rate-limit sign-in code requests by email address.
• Cloudinary, to store and display product images uploaded by staff.

Staff who need the data to pack, deliver, or support an order can see it. A payment confirmation may also be copied to the shop’s own notification addresses. We may disclose data if the law requires it, or to establish, exercise, or defend a legal claim.

Some of these providers are established outside the European Economic Area, including in the United States. Where personal data leaves the EEA, we use an adequacy decision or another lawful tool, such as Standard Contractual Clauses, together with any extra measures the transfer requires.

• Sign-in codes expire after 10 minutes.
• Unpaid orders are marked cancelled after they have been waiting for more than 8 hours. The daily cleanup can take up to about 32 hours. We keep the cancelled record, including the contact details and basket, rather than deleting it immediately.
• Paid orders, receipts, and the address used for that order are kept for the life of the order and then for 6 years, for tax, accounting, and complaints.
• Saved addresses stay on the account until you delete them or close the account, and they also remain inside the order they were used for.
• The private tracking link in a receipt works for 30 days.
• A sign-in session lasts up to 30 days, or until you sign out.
• Staff audit records, including IP address and user-agent, are kept for 3 months.
• Hosting logs may include IP address, browser type, and the page requested. We keep them for 3 months.

You can ask us to:

• confirm whether we use your personal data, and for a copy of it;
• correct inaccurate data;
• delete data, or restrict how we use it;
• receive data you provided, in a portable format, where the law gives that right;
• object to processing based on legitimate interests;
• withdraw consent, where we are relying on consent. We do not rely on consent for orders or essential storage.

Email hyvegrocery@gmail.com. We may need to confirm that the request comes from you. We aim to reply within one month. Closing an account deactivates it. We delete or anonymise data we no longer need, and we keep order records where tax or legal duties require that.

You can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, or at dataprotection.ie. You can also complain to another EU supervisory authority where you live or work.

The site is served over HTTPS. Sign-in uses a short-lived code rather than a password, and the code is stored as a hash. Card details are entered on Stripe, not on a HYVE page. Access to the admin area is limited to staff roles. These measures reduce risk. No website can promise that unauthorised access is impossible.

The shop is for people who can enter a contract for groceries. We do not knowingly create accounts for children under 16. If you believe a child has given us personal data, email hyvegrocery@gmail.com and we will delete what we do not need to keep.

If we start using data for a new purpose, add a provider, or introduce analytics or advertising, we will update this note and the date at the top. Where the law requires consent for a new use, we will ask before that use starts.