# Privacy Policy

**ZinuFlex™ — PPC Galway Ltd**
Last updated: May 2025

---

## Who We Are

ZinuFlex™ is a trading name of PPC Galway Ltd, a company registered in Ireland.

**PPC Galway Ltd**
27 Mulvoy Business Park, Sean Mulvoy Road, Galway, H91CFC4, Ireland
Email: info@ppcgalway.ie
VAT: IE4700552E

We are the data controller for the personal data collected through zinuflex.ie.

---

## What Data We Collect

When you use our website or place an order, we may collect the following personal data:

- **Identity data:** name
- **Contact data:** email address, delivery address, phone number
- **Transaction data:** details of purchases and payments
- **Technical data:** IP address, browser type, pages visited (via cookies)
- **Marketing data:** your preferences for receiving marketing from us

---

## How We Use Your Data

We use your personal data for the following purposes:

| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling your order | Performance of a contract |
| Sending order confirmations and dispatch notifications | Performance of a contract |
| Managing subscription orders and cancellations | Performance of a contract |
| Processing refunds | Performance of a contract |
| Sending marketing emails (if you opted in) | Consent |
| Improving our website and user experience | Legitimate interests |
| Complying with legal obligations | Legal obligation |

---

## Cookies

We use cookies to improve your experience on our website. These include:

- **Essential cookies:** required for the website to function (shopping cart, checkout)
- **Analytics cookies:** help us understand how visitors use our site (e.g. Google Analytics)
- **Marketing cookies:** used to show relevant advertising (e.g. Meta Pixel)

You can manage your cookie preferences via the cookie banner when you first visit our site.

---

## Who We Share Your Data With

We may share your data with trusted third parties who help us operate our business:

- **Shopify** — our e-commerce platform (order processing and storage)
- **An Post** — for delivery of your order
- **Stripe / Shopify Payments** — for secure payment processing
- **Google Analytics** — for website analytics
- **Email marketing providers** — if you have opted in to marketing

We do not sell your personal data to any third party.

---

## Data Retention

- Order data is retained for 7 years to comply with Irish tax and accounting obligations
- Marketing data is retained until you unsubscribe or request deletion
- Website analytics data is retained for 26 months

---

## Your Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

- **Right to access** — request a copy of the data we hold about you
- **Right to rectification** — request correction of inaccurate data
- **Right to erasure** — request deletion of your data ("right to be forgotten")
- **Right to restrict processing** — request that we limit how we use your data
- **Right to data portability** — receive your data in a portable format
- **Right to object** — object to processing based on legitimate interests
- **Right to withdraw consent** — withdraw marketing consent at any time

To exercise any of these rights, please email info@ppcgalway.ie. We will respond within 30 days.

---

## Marketing Communications

If you have opted in to marketing, you may receive emails from us about:
- Product updates and new launches
- Health tips and advice
- Special offers and promotions

You can unsubscribe at any time by clicking "unsubscribe" in any email or by emailing info@ppcgalway.ie.

---

## Data Security

We take the security of your personal data seriously. Our website uses SSL encryption and we work only with reputable third-party providers who maintain appropriate security standards.

---

## Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

---

## Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.

---

## Contact

For any privacy-related queries:
PPC Galway Ltd trading as ZinuFlex™
27 Mulvoy Business Park, Sean Mulvoy Road, Galway, H91CFC4, Ireland
Email: info@ppcgalway.ie