privacy policy

This privacy policy describes how whalestospace, based at Toe Head, West Cork, Ireland (“we”, “us”), processes personal data when you use whalestospace.com (the “site”). It is written to reflect the EU General Data Protection Regulation (“GDPR”) and Irish data protection law.

who is responsible?

For the purposes of GDPR, the data controller is whalestospace. Contact: sendthemupw2s@gmail.com or write to us at Toe Head, West Cork, Ireland.

what data we collect and why

Newsletter / field communications roster

• Data: email address (and any technical data our email provider logs when you receive messages).
• Purpose: sending updates you asked for about the project and products.
• Lawful basis: your consent when you sign up.
• Processor: we use Brevo (Sendinblue SAS) to store contacts and send email. Brevo may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses). See Brevo’s privacy documentation for details.

Contact form

• Data: name, email, subject, message content.
• Purpose: replying to your enquiry and keeping a record of the conversation if needed.
• Lawful basis: legitimate interests in responding to inquiries (and steps prior to a contract where relevant). You may object as described below.
• Processor: messages may be sent via Brevo’s transactional email API.

Purchases (Stripe)

• Data: when you checkout, Stripe collects payment, billing, shipping, and contact details needed to process payment and fulfil your order. We receive information Stripe shares with us (such as what you bought, amounts, and delivery details).
• Purpose: performing the purchase contract, delivery, taxes, fraud prevention, and customer support.
• Lawful basis: performance of a contract; legal obligations where applicable; legitimate interests in fraud prevention and dispute handling.
• Stripe acts as a separate controller for much of payment processing. See Stripe’s privacy policy.

Site operation and security

• Data: server logs may include IP address, user agent, timestamps, and URLs requested when you browse the site.
• Purpose: security, debugging, and lawful operation of the service (including hosting on our infrastructure provider).
• Lawful basis: legitimate interests in running a secure website, or legal obligation where applicable.

Cart in your browser

• Data: cart contents stored in local storage on your device.
• Purpose: remembering your selections until checkout.
• Lawful basis: strictly necessary for the service you request; see also our Cookie policy.

retention

We keep data only as long as needed for the purposes above: for example, marketing emails until you unsubscribe (and a short period afterward for suppression lists); order-related records as required for tax, accounting, and consumer law; contact messages long enough to resolve the query and any follow-up.

sharing

We share data with processors who help us run the site and business (e.g. hosting, email, payments) under contracts that require them to protect personal data. We do not sell your personal data.

international transfers

Some providers may process data outside the European Economic Area. Where that happens, we rely on mechanisms recognised under GDPR (such as adequacy decisions or Standard Contractual Clauses).

your rights

Under GDPR you may have the right to:

• access your personal data;
• rectify inaccurate data;
• erase data in certain circumstances;
• restrict or object to certain processing;
• data portability where applicable;
• withdraw consent for consent-based processing (e.g. newsletter) at any time, without affecting earlier lawful processing;
• lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

To exercise your rights, email sendthemupw2s@gmail.com. We may need to verify your identity before responding.

children

The site is not directed at children. If you believe we have collected a child’s data in error, contact us and we will delete it.

changes

We may update this policy from time to time. The “last updated” date at the bottom will change when we do. Material changes may be highlighted on the site where appropriate.

Last updated: 22 March 2026