Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains how Irish Car Plates ("we", "us") collects and uses your personal data when you order from irishcarplates.ie. We comply with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

Data controller

The data controller is [YOUR BUSINESS NAME], registered at [YOUR BUSINESS ADDRESS]. You can contact us at [YOUR EMAIL].

What we collect

  • Name and delivery address (to ship your plates)
  • Email address and phone number (order updates and support)
  • Vehicle registration number and supporting documents (to make legal plates)
  • Payment information (processed directly by Stripe, we never see your card number)
  • Technical data: IP address, browser, device, pages visited

Why we use it

  • Contract: to make and deliver the plates you order.
  • Legal obligation: tax, accounting, and vehicle registration record-keeping requirements.
  • Legitimate interest: fraud prevention, site security, basic analytics.
  • Consent: non-essential cookies and marketing emails.

Who we share it with

  • Stripe (payment processing)
  • Our delivery partner (An Post or courier)
  • Our hosting and email providers (data processors)
  • Revenue and other authorities where required by law

We do not sell your data.

Advertising measurement

With Analytics acceptance, Google Analytics measures order steps, plate style and quantity choices, add-on selections, registration-format warning status and completed order values. We do not include your entered plate text, name, email, phone or address in these events.

With your Marketing acceptance, Google Ads and OpenAI receive page visits, ad-click identifiers, device information and paid-order references and values for advertising measurement and advertising optimisation. Google stores first-party ad-click cookies to connect a later paid order to an ad visit. This Google Ads setup does not share your name, email, phone or delivery address for customer matching. Refusing Marketing blocks the Google Ads tag and purchase reports. Changing your choice does not send previously blocked purchases.

Your browser stores a visitor reference, choice time, region where available, and the version and text of the notice and choices shown. Earlier acceptance evidence is retained when you withdraw. Each reported purchase references its advertising choice. Use Cookie settings in the footer to withdraw Marketing at any time; your refusal applies to other open tabs too.

How long we keep it

Order records are kept for 7 years for tax and accounting purposes. Marketing consent is kept until you withdraw it. Analytics data is kept for up to 26 months.

Your rights

Under GDPR you have the right to:

  • Access the data we hold about you
  • Have inaccurate data corrected
  • Have your data erased (where we don't need to keep it by law)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Complain to the Irish Data Protection Commission, dataprotection.ie

To exercise any of these rights, email [YOUR EMAIL].

Security

We use HTTPS across the site, hashed credentials, and limit access to personal data on a need-to-know basis. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes

We may update this policy. Material changes will be posted on this page with a new "last updated" date.