Privacy Policy
Last updated: May 2026
Introduction
This Privacy Policy explains how Galway Maritime collects, uses, stores, and protects your personal data when you use our website or interact with our business.
We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Act 2018, and applicable ePrivacy legislation.
By using this website, you agree to the practices described in this policy.
Data Controller
Galway Maritime
Laurence House
Merchants Road
Galway
Ireland
Email: info@galwaymaritime.com
Website: https://galwaymaritime.com
Personal Data We Collect
We may collect and process the following categories of personal data:
Information You Provide Directly
- Name
- Billing address
- Shipping address
- Email address
- Telephone number
- Account login information
- Order and transaction details
- Messages submitted through contact forms or email correspondence
Information Collected Automatically
- IP address
- Browser type and version
- Device information
- Website usage data
- Referring websites
- Cookies and tracking technologies
Payment Information
Payments made through our website are processed securely by third-party payment providers. We do not store full payment card details on our servers.
How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling orders
- Providing customer support
- Managing your account
- Delivering products and services
- Processing payments and refunds
- Communicating regarding orders or enquiries
- Improving website functionality and user experience
- Preventing fraud and ensuring website security
- Meeting legal and tax obligations
- Sending marketing communications where you have consented
Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Processing orders and payments | Contract |
| Delivering customer support | Contract / Legitimate Interests |
| Fraud prevention and website security | Legitimate Interests |
| Maintaining tax and accounting records | Legal Obligation |
| Marketing emails and newsletters | Consent |
| Website analytics and performance monitoring | Consent / Legitimate Interests where applicable |
Sharing Your Data
We may share personal data with trusted third-party service providers where necessary to operate our business and website, including:
- Payment processors
- Courier and delivery providers
- Website hosting providers
- IT and security providers
- Analytics providers
- Email and marketing platforms
- Accounting or legal service providers
These third parties are only provided with the data necessary to perform their services and are required to protect your information appropriately.
We do not sell your personal data.
International Data Transfers
Some of our third-party service providers may process personal data outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries recognised as providing an adequate level of data protection
- Other lawful transfer mechanisms permitted under GDPR
Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy or as required by law.
Typical retention periods include:
- Order and transaction records: up to 6 years
- Customer service enquiries: up to 24 months
- Marketing subscriptions: until consent is withdrawn
- Analytics and cookie data: according to cookie duration settings
- Website security logs: retained for a limited operational period
Retention periods may be extended where required by law or for legitimate business purposes.
Your Rights Under GDPR
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Withdraw consent at any time
- Request transfer of your data
- Lodge a complaint with a supervisory authority
We will respond to valid requests within one month in accordance with GDPR requirements.
To exercise any of these rights, contact us using the details listed above.
Right to Lodge a Complaint
If you believe your personal data has been handled improperly, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Website: https://www.dataprotection.ie
Security of Your Data
We implement appropriate technical and organisational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction.
These measures may include:
- Secure website encryption (SSL/TLS)
- Restricted access to systems
- Security monitoring
- Secure third-party payment processing
- Regular software and security updates
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
Cookies
Our website uses cookies and similar technologies to improve functionality, analyse website traffic, and enhance user experience.
Cookies may include:
- Essential website functionality cookies
- Shopping cart and account session cookies
- Analytics cookies
- Performance cookies
- Marketing or advertising cookies where applicable
Where required by law, non-essential cookies will only be used after obtaining your consent.
You may manage or withdraw cookie consent through your browser settings or our cookie consent tools where available.
Analytics and Third-Party Services
We may use third-party services such as:
- Google Analytics
- Payment gateways
- Embedded content providers
- Email marketing platforms
- Security and anti-spam providers
These providers may collect data in accordance with their own privacy policies.
Marketing Communications
Where you have opted in, we may send marketing emails regarding products, promotions, or updates.
You can unsubscribe from marketing communications at any time by:
- Clicking the unsubscribe link in emails
- Contacting us directly
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
External Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.
We encourage users to review the privacy policies of any external websites they visit.
Children’s Privacy
Our website and services are not directed toward children under the age of 16, and we do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements, technology, or business operations.
Any updates will be posted on this page with the revised “Last updated” date.
Contact Us
If you have any questions regarding this Privacy Policy or your personal data, please contact:
Galway Maritime
Email: info@galwaymaritime.com