Privacy Policy

Last updated: 2nd June 2025

At Ponc, we are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and in compliance with applicable Irish and EU data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Ponc Design
Registered in Ireland
Email: [erica@ponc.design]
Website: [ponc.design]

2. What Information We Collect

We collect and process the following types of personal data:

  • Identity Data: Your name, username, or similar identifier.
  • Contact Data: Billing address, delivery address, email address, phone number.
  • Financial Data: Payment card details (processed securely via third-party providers).
  • Transaction Data: Details of purchases made through our website.
  • Technical Data: IP address, browser type, device information.
  • Usage Data: How you interact with our website and services.
  • Marketing & Communications Data: Your preferences in receiving marketing from us.

3. How We Use Your Information

We use your data to:

  • Process and fulfil your orders.
  • Communicate with you regarding your orders or account.
  • Send you marketing communications (only if you’ve opted in).
  • Improve our website and services.
  • Comply with legal obligations.

We do not sell your personal data to third parties.

4. Lawful Bases for Processing

We process your data under the following lawful bases:

  • Contract: To perform our obligations under a contract with you.
  • Consent: When you have given clear permission (e.g. for marketing).
  • Legal obligation: To comply with applicable laws.
  • Legitimate interests: To improve our service and prevent fraud.

5. Sharing Your Data

We may share your data with trusted third parties, including:

  • Payment processors (e.g. Stripe, PayPal)
  • Delivery and logistics partners (e.g. An Post, couriers)
  • Website and IT service providers
  • Legal and regulatory authorities (if required by law)

All such partners are bound by GDPR-compliant data processing agreements.

6. International Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or Data Privacy Framework participation.

7. Data Security

We use appropriate technical and organisational security measures to protect your personal data, including encryption, secure servers, and access controls.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which we collected it, including for legal, accounting, or reporting obligations.

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure of your data (“right to be forgotten”)
  • Object to or restrict processing
  • Data portability
  • Withdraw consent (for marketing or other consent-based processing)

To exercise any of these rights, contact us at [erica@ponc.design].

10. Cookies

We use cookies to enhance your browsing experience and analyse website traffic. For more information, please see our [Cookie Policy].

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and dated accordingly.

12. Complaints

If you are not satisfied with how we handle your data, you can contact the Data Protection Commission (DPC):
Website: https://www.dataprotection.ie
Email: info@dataprotection.ie