Privacy policy

Last updated: 14 September 2026

At Zirkulu, we respect your privacy and aim to be clear about how we use your personal data.

This Privacy Policy explains how we collect, use, share and protect personal data when you visit zirkulu.com, purchase from us, visit our store, contact us or interact with our marketing.

1. Who Is Responsible for Your Data?

The controller responsible for your personal data is:

Legal business name: Zirkulu Limited
Trading name: Zirkulu
Registered address: 45 Main Street, Kinsale, Cork, Ireland
Postal address: Exchange Buildings, Market Street, Town-Plots, Kinsale, Co. Cork, P17 TD77
Email: info@zirkulu.com

In this policy, “Zirkulu”, “we”, “our” and “us” refer to Zirkulu Limited.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following information.

Identity and contact information

This may include your:

  • name;

  • email address;

  • telephone number;

  • billing address;

  • delivery address; and

  • account details.

Order and transaction information

This may include:

  • products purchased, returned or exchanged;

  • order numbers;

  • purchase dates and values;

  • delivery and tracking information;

  • gift-card activity;

  • payment status; and

  • communications concerning an order.

Payments are processed by third-party payment providers. Zirkulu does not generally receive or store your complete payment-card number.

Website and device information

When you use our Website, we may collect:

  • IP address;

  • browser and device type;

  • device identifiers;

  • pages viewed and links selected;

  • referring website;

  • approximate location;

  • dates and times of visits;

  • shopping-cart activity; and

  • cookie and advertising identifiers.

Communications

We may retain information you provide when you:

  • contact customer service;

  • request a return, repair or warranty assessment;

  • enter a competition;

  • respond to a survey;

  • submit a product review; or

  • communicate with us through email, telephone or social media.

Marketing preferences

We may record whether you have agreed to receive marketing, the types of communications you engage with and when you unsubscribe or change your preferences.

Store and event information

If you visit a Zirkulu store, market or event, we may collect information that you voluntarily provide when purchasing, joining a mailing list, entering a promotion or making an enquiry.

3. How We Collect Personal Data

We collect personal data:

  • directly from you when you purchase, create an account, subscribe, contact us or submit content;

  • automatically through cookies and similar technologies;

  • from our ecommerce, payment, delivery and marketing providers;

  • from social-media platforms when you interact with our pages or advertisements; and

  • from other people, for example when someone sends you a gift or places an order for delivery to your address.

4. How and Why We Use Personal Data

We use personal data only where we have a lawful basis under data-protection law.

To process and deliver orders

We use identity, contact, payment-status and order information to:

  • accept and fulfil purchases;

  • take payment;

  • provide order and delivery updates;

  • process returns, exchanges and refunds; and

  • provide customer support.

Legal basis: Performance of our contract with you.

To manage returns, repairs and warranties

We use your contact, order and product information to assess returns, product faults, repairs and warranty requests.

Legal basis: Performance of our contract, compliance with our legal obligations and our legitimate interest in providing effective after-sales support.

To operate accounts and customer services

We use your information to create and manage customer accounts, answer enquiries and maintain records of our communications.

Legal basis: Performance of our contract and our legitimate interest in providing effective customer service.

To comply with legal obligations

We may process order, payment and customer information for accounting, tax, product-safety, fraud-prevention, regulatory and legal purposes.

Legal basis: Compliance with a legal obligation.

To improve our Website and products

We may analyse how customers use the Website and respond to our products, content and services. This helps us troubleshoot problems, understand demand and improve the customer experience.

Legal basis: Our legitimate interests in operating and improving our business. Where cookies or similar technologies require consent, we rely on your consent.

To send marketing

If you subscribe, we may send emails about Zirkulu products, launches, stories, events and offers.

Legal basis: Your consent, or another basis permitted by electronic-marketing law for communications about similar products to existing customers.

You may unsubscribe at any time by selecting the unsubscribe link in an email or contacting info@zirkulu.com.

Withdrawing consent does not affect processing that took place before consent was withdrawn.

To personalise advertising and measure performance

Where you consent, we may use cookies and similar technologies to understand advertising performance, build audiences and show more relevant Zirkulu advertisements through platforms such as Google or Meta.

Legal basis: Your consent.

You can change your choices through our cookie-preference tool. You may also be able to control advertising through your browser, device or platform settings.

To prevent fraud and protect our business

We may use transaction, device and account information to identify suspicious activity, secure our Website and protect customers and Zirkulu.

Legal basis: Our legitimate interests in preventing fraud and protecting our business, customers and systems.

To manage reviews, competitions and user content

We use information you submit to administer competitions, publish approved reviews and manage photographs, videos or other content submitted to us.

Legal basis: Performance of an agreement, consent or our legitimate interests, depending on the circumstances.

5. Cookies and Similar Technologies

Our Website uses cookies and related technologies to:

  • operate essential Website and checkout functions;

  • remember selections and preferences;

  • measure Website traffic and performance; and

  • support marketing and advertising.

Essential cookies may be used because they are necessary for the Website to function. Analytics, personalisation and advertising cookies will be used only where permitted and, where required, after you provide consent.

You can manage non-essential cookies through the cookie banner or cookie-preference tool available on the Website.

Further information about the individual cookies we use, their providers and duration should be included in a separate Cookie Policy or within the Website’s cookie-preference tool.

6. Who We Share Personal Data With

We may share personal data with trusted providers where necessary to operate our business, including:

  • Shopify, which hosts and supports our ecommerce store;

  • payment processors and payment-method providers;

  • delivery companies, postal services and fulfilment providers;

  • email, customer-service and marketing platforms;

  • analytics, advertising and social-media platforms, where you have consented;

  • IT, website-hosting, security and fraud-prevention providers;

  • professional advisers such as accountants, insurers and legal advisers; and

  • public authorities, regulators or law-enforcement bodies where required by law.

These organisations receive only the information reasonably required for the relevant service.

Some providers act as processors under our instructions. Others, including certain payment, delivery and advertising providers, may act as independent controllers and process data under their own privacy policies.

We do not sell your personal data in the ordinary meaning of the word.

7. International Data Transfers

Some of our providers may process personal data outside Ireland or the European Economic Area.

Where personal data is transferred internationally, we use an appropriate legal safeguard where required. This may include:

  • an adequacy decision adopted by the European Commission;

  • approved Standard Contractual Clauses;

  • participation in a legally recognised transfer framework; or

  • another safeguard permitted by data-protection law.

You may contact us for more information about the safeguards applying to a particular transfer.

8. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, warranty and dispute-resolution requirements.

As a general guide:

  • order and transaction records are normally retained for the period required by Irish tax and accounting law;

  • customer-service, returns and warranty records are retained for as long as necessary to manage the request and any related claim;

  • account information is retained while the account remains active and for a reasonable period afterwards;

  • marketing information is retained until you unsubscribe or we determine that it is no longer appropriate to contact you;

  • cookie information is retained for the period shown in our cookie-preference tool; and

  • competition entries and user-submitted content are retained for the period explained when the information is collected.

We may retain limited information after an unsubscribe request to ensure that your preference continues to be respected.

9. How We Protect Personal Data

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

No online service can guarantee complete security. You should use a strong, unique password for your account and contact us if you suspect unauthorised use.

10. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

  • request access to your personal data;

  • have inaccurate or incomplete information corrected;

  • request deletion of your personal data;

  • restrict how we use your personal data;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • receive certain personal data in a portable format;

  • withdraw consent where processing relies on consent; and

  • lodge a complaint with a data-protection authority.

These rights are subject to legal conditions and exceptions.

To exercise a right, email info@zirkulu.com. We may need to verify your identity before completing the request.

You will not normally be charged for exercising your rights. We aim to respond within one month, although the law allows additional time for particularly complex requests.

11. Complaints

Please contact us first if you have a question or concern about how we use your personal data. We will do our best to resolve it.

You also have the right to complain to the Irish Data Protection Commission:

Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963
Ireland
Website: www.dataprotection.ie

If you live elsewhere in the European Economic Area, you may also contact the supervisory authority in your country.

12. Children’s Privacy

Our Website is intended for a general audience and is not directed at children.

We do not knowingly collect personal data directly from children under 16 for account registration or marketing without the authorisation required by law.

If you believe a child has provided personal data to us without appropriate permission, contact info@zirkulu.com.

13. Third-Party Websites and Social Media

Our Website may link to third-party websites, social-media services or other platforms.

Those organisations control their own processing and privacy practices. We encourage you to review their privacy policies before providing personal data.

14. Automated Decision-Making

We do not currently make decisions producing legal or similarly significant effects about customers solely through automated processing.

Our ecommerce and payment providers may use automated tools to identify potentially fraudulent transactions. Where applicable, further information is available in those providers’ privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business, Website, providers or legal obligations.

When we make changes, we will update the date at the top of the policy. If a change materially affects how we use personal data, we will provide additional notice where appropriate.

16. Contact Us

For questions, requests or complaints concerning your personal data or this Privacy Policy, contact:

Zirkulu Limited
Exchange Buildings
Market Street
Town-Plots
Kinsale
Co. Cork
P17 TD77
Ireland

Email: info@zirkulu.com

×