Legal

Privacy Policy

Last updated: August 2026

1. Who is responsible for your data

La Piedra del Molino, operated by The Good Olive Oil, registered in Ireland (CRO No. 775106). Contact: hola@lapiedradelmolino.com.

2. What data we collect and why

When you place an order

Name, delivery address, email address, telephone number. Legal basis: performance of a contract.

When you sign up for our newsletter

Email address. Legal basis: consent. You can withdraw at any time via the unsubscribe link.

When you contact us

Name, email address, message content. Legal basis: legitimate interest in responding to enquiries.

Website analytics

Anonymised usage data via Google Analytics 4. Legal basis: consent, collected via our cookie banner.

Payment processing

Handled entirely by Stripe. We do not store card details. Stripe’s privacy policy: stripe.com/privacy.

3. How we use your data

  • Process and fulfil your orders
  • Communicate about your orders
  • Send marketing emails if subscribed (unsubscribe any time)
  • Improve our website
  • Comply with legal obligations

We will never sell your personal data to third parties.

4. Who we share your data with

  • Stripe — payment processing
  • Shipping carriers — name and address only, for delivery
  • Email platform — email address only, with consent
  • Google Analytics — anonymised analytics

All third parties are contractually required to protect your data.

5. How long we keep your data

  • Order data: 7 years (Irish tax and accounting requirements)
  • Newsletter subscribers: until unsubscribed
  • Contact enquiries: 2 years
  • Analytics data: 14 months (Google Analytics default)

6. Your rights under GDPR

You have the right to: access your data · correct inaccurate data · erasure (“right to be forgotten”) · restrict or object to processing · data portability · withdraw consent at any time for newsletter.

Contact hola@lapiedradelmolino.com. We respond within 30 days.

Complaints: Irish Data Protection Commission at dataprotection.ie.

7. International transfers

Data may be transferred outside the EEA (including to the US via Stripe and Google) under Standard Contractual Clauses approved by the European Commission.

8. Security

We use appropriate technical and organisational measures to protect your data. Payment data is encrypted and processed entirely by Stripe.

9. Changes to this policy

We may update this policy at any time. The current version is always on this page.