Last updated: 14 August 2026
This Privacy Policy explains how Electrical Rewind Service (Limerick) Limited, trading as ERS Shop, collects, uses, stores and protects your personal information when you visit or use www.ersshop.ie. It is intended to comply with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Data Protection Act 2018, the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. 336/2011) and other applicable Irish legislation.
1. Who We Are
ERS Shop is the trading name of Electrical Rewind Service (Limerick) Limited. We are the data controller for the personal information described in this Privacy Policy.
Company Registration Number (CRO): 196398
Registered address: Unit B1 Corcanree Business Park, Dock Rd., Limerick, Ireland, V94 H5W4
Website: www.ersshop.ie
Email: info@ersshop.ie
Telephone: (061) 500 600
For data protection matters, including requests to exercise your rights, please contact us at info@ersshop.ie.
2. Scope
This Privacy Policy applies to visitors to our website, customers, prospective customers, suppliers making enquiries through the website and anyone who contacts us.
We are committed to handling personal information fairly, lawfully and transparently. We collect only the information that is reasonably necessary for the relevant purpose. Access to personal information is limited to authorised personnel and trusted service providers who require it to perform their duties. Our practices are reviewed periodically to help ensure they remain appropriate, secure and aligned with applicable Irish and European data protection requirements.
3. Information We Collect
Depending on how you interact with us, we may collect:
- Name.
- Billing and delivery addresses.
- Email address.
- Telephone number.
- Account login details, where you create an account on ersshop.ie (we store passwords in hashed form only).
- Order history.
- Payment information — card details are entered into and processed by Stripe. We do not receive or store your full card number.
- Communications with our customer service team.
- IP address, browser type, device information and cookie identifiers.
- Website usage information collected through cookies and analytics technologies (see Section 9).
- Business contact details of supplier and trade contacts who enquire through the website.
4. How We Collect Information
Information may be collected when you:
- Browse our website.
- Create an account on ersshop.ie.
- Place an order.
- Contact us by email, telephone or contact form.
- Subscribe to marketing communications.
- Interact with cookies and analytics technologies, where you have consented to them.
5. Why We Use Your Information, and Our Lawful Basis
We process personal information for the purposes set out below. The table also states the lawful basis under Article 6 GDPR on which we rely for each purpose.
Purpose | Lawful basis |
Processing and fulfilling your order, including arranging delivery | Performance of a contract with you |
Processing payments | Performance of a contract with you |
Handling returns, warranty claims and customer support | Performance of a contract with you |
Retaining transaction and tax records | Compliance with a legal obligation |
Preventing fraud and maintaining website security | Legitimate interests — protecting our business and our customers from fraudulent transactions and misuse of our website |
Improving our product range and services using order and sales data | Legitimate interests — understanding what our customers buy so we can stock and serve them better |
Measuring how visitors use our website, using analytics cookies | Consent (see Section 9) |
Sending marketing communications to existing customers about similar products | Legitimate interests, together with the existing-customer exemption in Regulation 13(11) of S.I. 336/2011 (see Section 8) |
Sending marketing communications to subscribers who are not existing customers | Consent |
Setting non-essential cookies and similar technologies | Consent |
Responding to enquiries from suppliers and trade contacts | Legitimate interests — managing our supplier relationships |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms. You may object to processing carried out on this basis at any time — see Section 15.
6. Payments
Payments are processed by Stripe. Your card details are entered directly into Stripe’s payment interface. We do not receive or store your full card number.
Stripe provides us with the information we need to identify your payment and fulfil your order, and to handle refunds, chargebacks and disputes. This includes your name, your contact details and a transaction reference.
Our contracting Stripe entities are Stripe Payments Europe, Limited and Stripe Technology Europe, Limited, both based in Dublin. Stripe Technology Europe, Limited is authorised by the Central Bank of Ireland as an electronic money institution under reference number C187865.
Stripe acts as our data processor when it processes payments on our behalf and on our instructions. Stripe also acts as a data controller in its own right for activities whose purposes it determines, including fraud prevention and its own legal, regulatory and anti-money-laundering obligations. Stripe’s own privacy policy applies to that processing and is available at stripe.com/privacy. Stripe’s Data Protection Officer can be contacted at dpo@stripe.com.
7. Delivery
DPD and An Post our delivery partnesr. We share with them only the information necessary to deliver your order: your name, delivery address, telephone number and email address where required for delivery notifications, and your order reference.
8. Marketing
If you subscribe to our newsletter or marketing communications, we may send you information about products, services and promotions.
Where you have bought from us, we may send you marketing about our own similar products and services on the basis of Regulation 13(11) of S.I. 336/2011. You will have been given a clear opportunity to object when your details were collected, and every message we send contains an unsubscribe link.
In all other cases we send marketing only where you have given consent.
You may unsubscribe at any time using the link in any marketing email, or by contacting us using the details in Section 18. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Our marketing emails are sent using Mailchimp, which processes your email address and subscription preferences on our behalf.
9. Cookies, Analytics and Advertising
We use cookies and similar technologies on our website. Cookies that are strictly necessary for the website to function — for example to keep items in your basket or to keep you logged in — are set automatically.
All other cookies and technologies, including those used for analytics (Google Analytics) and advertising (Google Ads), are set only where you have given your consent through our cookie banner. You can change or withdraw your cookie preferences at any time through the cookie settings link on our website.
Further details of the specific cookies we use, their purpose and their duration are set out in our Cookie Policy, which is available on our website.
10. Sharing Your Information
We share personal information with the following categories of recipient, only where necessary for the purposes set out in this policy:
- Payment providers — Stripe Payments Europe, Limited and Stripe Technology Europe, Limited (Ireland).
- Delivery partners — DPD, An Post.
- E-commerce platform provider — AB Commerce.
- Analytics and advertising providers — Google (Google Analytics, Google Ads), where you have consented.
- Email marketing provider — The Rocket Science Group LLC, trading as Mailchimp, an Intuit company (United States).
- IT support providers.
- Professional advisers, including our accountants and legal advisers.
- Public authorities and regulators, where we are legally required to do so.
We do not sell your personal information.
11. International Transfers
Our Stripe contracting entities are established in Ireland. Stripe may nonetheless transfer personal information to its affiliates and service providers outside the European Economic Area, including in the United States and India. Stripe has certified its participation in the EU–US Data Privacy Framework, and its data processing agreement also provides for Standard Contractual Clauses approved by the European Commission where these are required.
Google processes personal information outside the European Economic Area, principally in the United States. Google LLC and its wholly-owned US subsidiaries are certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. Google also provides Standard Contractual Clauses as part of its data processing terms.
Mailchimp processes personal information in the United States. The Rocket Science Group LLC, trading as Mailchimp, is certified under the EU–US Data Privacy Framework as a covered entity within Intuit’s certification. Standard Contractual Clauses approved by the European Commission are also incorporated into Mailchimp’s data processing addendum and apply where the Data Privacy Framework does not cover a transfer.
You may request further information about these safeguards, including a copy of the relevant clauses, by contacting us using the details in Section 18.
12. Security
We implement appropriate technical and organisational measures to protect personal information against accidental loss and against unauthorised access, alteration or disclosure. These include encryption of data in transit, restricted access on a need-to-know basis, and the use of reputable service providers for payment processing and hosting.
13. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purposes for which it was collected, and to comply with our legal obligations, resolve disputes and enforce our agreements. Our retention periods are:
Information | Retention period |
Order, invoice and transaction records | 6 years from the end of the relevant accounting period |
Customer account details | For as long as your account remains open, and for 2 years after your last activity |
General enquiries and correspondence | 2 years from the date of the enquiry |
Marketing subscriber details | Until you unsubscribe or withdraw consent, plus a short suppression period so we can honour your opt-out |
Warranty and returns records | For the duration of the warranty period, plus 6 years |
Website analytics data | 14 months |
Cookie consent records | 12 months, after which we ask for your consent again |
When information is no longer needed, we delete it or anonymise it.
14. Automated Decision-Making and Profiling
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Where you have consented to advertising cookies, Google may use your browsing activity to show you our advertising on other websites. You may object to this at any time by withdrawing your cookie consent or by contacting us.
15. Your Rights
Under the GDPR you have the following rights in relation to your personal information:
- The right to access the personal information we hold about you.
- The right to have inaccurate information corrected.
- The right to have your information erased in certain circumstances.
- The right to restrict processing in certain circumstances.
- The right to object to processing carried out on the basis of our legitimate interests, and an absolute right to object to processing for direct marketing.
- The right to data portability.
- The right to withdraw consent at any time, where processing relies on consent.
To exercise any of these rights, contact us using the details in Section 18. We will respond within one month of receiving your request. That period may be extended by up to two further months for complex requests, in which case we will tell you within the first month and explain why. We may need to verify your identity before we can act on a request.
If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Data Protection Commission:
Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland.
Telephone: 01 765 0100 or 1800 437 737. Website: www.dataprotection.ie
16. Children’s Privacy
Our website is intended for use by adults and is not directed at children. In Ireland the digital age of consent is 16. We do not knowingly collect personal information from children under 16. If you believe we have done so, please contact us and we will delete it.
17. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be published on www.ersshop.ie together with the revised ‘Last updated’ date. Where changes are significant, we will bring them to your attention.
18. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
ERS Shop, Unit B1 Corcanree Business Park, Dock Rd., Limerick, Ireland, V94 H5W4. Email: info@ersshop.ie. Telephone: (061) 500 600.