When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number or other details to help you with your experience.
We collect information from you when you place an order, subscribe to a newsletter or enter information on our site.
Provide us with feedback on our products or services Enquire about our products/services.
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible.
We use regular Malware Scanning.
Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.
We implement a variety of security measures when a user places an order enters, submits, or accesses their information to maintain the safety of your personal information.
All transactions are processed through a gateway provider and are not stored or processed on our servers.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
If you turn cookies off, It won’t affect the user’s experience .
|Initiated by this website|
|PHPSESSID||The PHPSESSID cookie is native to PHP and enables websites to store serialised state data. It is used to establish a user session and to pass state data via a temporary cookie, which is commonly referred to as a session cookie. (expires when you close your browser)||On visit||When you close your browser|
|Initiated by Google Analytics | Read More|
|_ga||Used to distinguish users.||On visit||After 2 Years|
|_gid||Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named||On visit||1 minute|
|Initiated by Add This| Read More|
|loc||Geolocation, which is used to help providers determine how users who share information with each other are geographically located (state level).||On visit||13 Months|
|mus||Unclassified||On visit||1 Year|
|ouid||Unclassified||On visit||1 Year|
|uid||Creates a unique, machine-generated user ID. AddThis, which is owned by Clearspring Technologies, uses the user ID to make it possible for the user to share content across social networks and provide detailed statistics to various providers.||On visit||1 Year|
|uvc||Detects how often the social sharing service, AddThis, encounters the same user.||On visit||13 Months|
|__atuvs||This cookie is associated with the AddThis social sharing widget which is commonly embedded in websites to enable visitors to share content with a range of networking and sharing platforms. This is believed to be a new cookie from AddThis which is not yet documented, but has been categorised on the assumption it serves a similar purpose to other cookies set by the service.||On visit||2 Years|
|Initiated by Others|
|DotomiUser||Via a unique ID that is used for semantic content analysis, the user’s navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.||On visit||1 Year|
|bkdc||Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user’s movement on websites that use the same ad network.||On visit||179 days|
|bku||Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user’s movement on websites that use the same ad network.||On visit||179 days|
|dtm_test||Via a unique ID that is used for semantic content analysis, the user’s navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.||Session||1 Year|
|To keep track of cart data, WooCommerce makes use of 3 cookies: The first two cookies contain information about the cart as a whole and helps WooCommerce know when the cart data changes. The final cookie (wp_woocommerce_session_) contains a unique code for each customer so that it knows where to find the cart data in the database for each customer. No personal information is stored within these cookies.|
|cf-cookie-banner||Used for many WordPress functions and for plugins to work as required.||Session|
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
We do not include or offer third-party products or services on our website.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We use Google AdSense Advertising on our website.
We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.
Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.
Users can visit our site anonymously.
Can change your personal information:
We honour Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
It’s also important to note that we do not allow third-party behavioral tracking
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under the age of 13 years old.
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
We will notify you via email
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
If at any time you would like to unsubscribe from receiving future emails, you can email us at [email protected] and we will promptly remove you from ALL correspondence.
Thank you for trusting us with some information about you. We take that trust seriously and we want you to know how we use your information and why.
If you have queries about how we use your data, or comments or questions about this Policy, please do email us. The email address to use is set out in section 2 below.
Policy updates: We keep this Policy under regular review, and this page may be updated from time to time. Please come back here to check the latest version. This Policy was last updated on the date given at the bottom of this policy.
Cotton On is registered company based in Galway, Ireland selling customised embroidered gifts and clothing.
Email address for official notices: [email protected]
In order for us to process any order received from a customer, we require the following information to carry out our work with you:
Size and details of the product purchased
Contact telephone number so we can contact you in case of any problems with your order.
Anyone who sets up an account with Cotton On will have all their personal information stored on our website database. This is only for your own personal usage which allows you the convenience of us storing your data for purchasing more goods from us at a later stage. We recognise that many of our products are bought annually for birthdays and anniversaries. Therefore accounts will be considered dormant and deleted after a period of 2 years of inactivity.
We process your data to support the delivery the goods and services you have bought. We keep records of the goods/services provided to you, and information you give us, so we can support you when needed and advise you of any additional services you may need.
Financial and credit card details
We do not hold or store any of your personal credit card payment details as this is held by the credit card payment providers who process your credit card payments to us. For card payments taken over the phone, we destroy the card details once the transaction has been completed.
Online payments are processed via PayPal, Stripe or through AIB Merchant Services.
We receive limited information from our processor for us to tie up your payment with your invoice.
If you pay us by BACS or direct transfer, we know only what the bank tells us, which is usually the name of the person who paid us and how much and the reference number.
We may use your Personal Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
We strive to provide you with choices regarding certain Personal Data uses, particularly around marketing and advertising. Where appropriate, you will be asked whether you wish to receive any marketing communications from us. You can unsubscribe from these emails at any time using the link provided in these communications.
We do not sell or exchange your personal data with organisations who may want to sell you something or use your data for research or other purposes.
We keep a list of the software platforms we use to run our business. If you would like more information on the platforms we use, please email us (at the email address in section 2, above).
We only work with processing partners who are able to ensure the adequate level of protection to your Personal Data. We disclose your Personal Data to third parties or public officials when we are legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it. In order to provide a robust and reliable service, we depend on a number of cloud service providers to carry out key operations within our business. This includes things like document storage, payment processing, email processing, marketing assistance, social media management and website security.
We have an outsourced support team for our own business which may include Web Designers, IT support, Sales and Marketing, Accounting and more. They have limited access to your data, where the service they provide to us means they need it.
For example, if our IT support wants to check the functionality of a laptop or back up, they may need temporary access to information that may include something about you.
For example, if we invoice you, our Accountant needs to process the information in the invoice.
Your information/advice is held in the strictest confidence.
Like most small businesses, we do not have any tailor-made software – we use mainstream packages for everything from our customer records, to email, to accounting.
This means that some of your data may be held in the EEA, and some may be held in services in the USA (with suitable data privacy shields) or elsewhere. We have picked mainstream suppliers with appropriate security standards.
We have a documented data retention schedule. Generally, we will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for and for up to seven (7) years afterwards (for purposes related to Revenue requirements) or otherwise permitted by applicable laws. We may also retain your information during the period of time needed to complete our legitimate business operations, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Under certain circumstances, by law you have the right to:
If you have any questions about this policy or about our data protection compliance, please contact us via email at [email protected]
If you wish to exercise your rights please contact us and we will respond to the request within 30 days.
Your Right to Lodge a Complaint
You as the Data Subject have the right to complain at any time to a supervisory authority in relation to any issues related to our processing of your Personal Data. As our organisation is located in Ireland and we conduct our data processing here, we are regulated for data protection purposes by the Irish Data Protection Commissioner.
You can contact the Data Protection Commissioner as follows:
Phone: +353 57 8684800 or +353 (0)761 104 800
Email: [email protected]
Address: Data Protection Office – Canal House, Station Road, Portarlington, Co. Laois, R32 AP23. Or 21 Fitzwilliam Square Dublin 2. D02 RD28 Ireland
Cookies are small text files that are transferred to your computer’s hard drive through your web browser to enable us to recognise your browser and help us to track visitors to our site for different purposes. Most web browsers automatically accept cookies, but, if you wish, you can set your browser to prevent it from accepting cookies. The “help” portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether.
Technical Personal Data
Like most websites, we gather statistical and other analytical information collected on an aggregate basis of all visitors to our website. We may gather technical information for security reasons. We will make no attempt to identify individual visitors, or to associate the technical details listed below with any individual. We will only use the technical information for statistical and other administrative purposes.
We may collect this technical information from you when you visit our website and accept cookies. This information may include standard information from you (such as browser type and browser language), your Internet Protocol (“IP”) address, and the actions you take on our website (such as the web pages viewed and links clicked). We do note that your IP address is considered personal data under the GDPR.
Certain information in relation to web usage is revealed via our internet service provider or hosting provider who records some of the following data. Whilst we do not access this information regularly, the technical information may be used to inform our security measures, to allow us to improve the information we are supplying to our users, to find out how many people are visiting our sites and for statistical purposes. The information we receive depends upon what you do when visiting our site:
We also receive anonymous, aggregated statistics about visitors to our social media pages through Facebook Insights (https://en-gb.facebook.com/policy). This helps us to understand how people are engaging with our posts and improve our content for our audience.
Last updated: 30 August 2021
Receive updates with latest arrivals, exclusive promotions, discounts & more.