Privacy & Cookie Policy
How ÍON Oils & Spices looks after your information when you shop with us, and the cookies this website uses. Last updated 8 October 2026.
Who we are
This website and shop are run by ÍON Oils & Spices (Ion Organics), producers of organic cold pressed oils and spices in Ireland. We are the data controller for the personal information collected through this website.
Questions about this policy or your information: email ionorganicoil@gmail.com or use the form on our contact page.
What we collect and why
Orders. When you buy from us we collect your name, billing and delivery address, email address, phone number and what you ordered. We use this to process and deliver your order, send order and delivery emails, handle returns and keep the records the law requires. The legal basis is performing our contract with you, and our legal obligations for tax and accounting records.
Payments. Card payments are handled by our payment providers, SumUp and WooPayments (powered by Stripe). Your card details go straight to them and we never see or store them. They also run their own fraud checks.
Your account. If you create an account, we keep your details and order history so you can log in, reorder and track orders. You can ask us to close it at any time.
Email newsletter. If you sign up to our emails, we use Klaviyo to send you news, recipes and offers. The legal basis is your consent, and every email has an unsubscribe link.
Contact form and live chat. If you use our contact form or chat with us through the Tidio chat window, we use what you send us to reply and help with your question. Tidio stores the conversation on our behalf.
Website statistics and email tracking. If you accept cookies, we use Google Analytics and WooCommerce order attribution to understand how visitors find and use the shop, and Klaviyo to see which products you view so our emails are more relevant. None of this runs until you accept, and you can change your choice at any time. The legal basis is your consent.
Who we share it with
We do not sell your information. We only share it with the companies we need to run the shop and deliver your order:
- SumUp and WooPayments (Stripe), for payments and fraud prevention.
- An Post and other delivery partners, who get your name, address and phone number to deliver your parcel.
- Our website provider and hosting company, who host the site, and our email providers, which send our order emails.
- Klaviyo, for our email newsletter, and Tidio, for live chat.
- Google, for Google Analytics (only with your consent).
We may also share information where the law requires it. Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards approved under EU law, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
We keep order records for six years, as Irish tax law requires. Newsletter details are kept until you unsubscribe. Enquiries and chat conversations are kept for up to 12 months unless they lead to an order. Analytics data is kept for 14 months.
Your rights
Under the GDPR you can ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it (including for direct marketing, at any time), and to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us using the details above. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Data Protection Commission at dataprotection.ie.
Cookies
Cookies are small files stored on your device. Necessary cookies keep the shop working and are always on. Analytics and marketing cookies are only set if you accept them in our cookie banner, and you can change your choice at any time with the cookie button in the corner of the page.
Necessary
- jz_consent (this website, 6 months): remembers your cookie choice.
- woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* (this website, up to 2 days): keep your basket working.
- Tidio chat (stored in your browser): keeps your chat conversation open as you move between pages.
- Our payment providers may set their own cookies at checkout to prevent fraud.
Analytics and marketing (only if you accept)
- _ga, _ga_CNTF2Q2CSW (Google Analytics, up to 13 months): tell visits apart and keep track of your session.
- sbjs_* (WooCommerce, session): remember how you found us, for example a Google search, so we can see which sources lead to orders.
- __kla_id (Klaviyo, up to 2 years): links your visits to our emails, if you are on our list, so we can send you relevant products.
You can also block or delete cookies in your browser settings. Blocking necessary cookies will stop the basket and checkout from working.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
