Here’s a draft Privacy Policy for King of Kefir. Replace the bracketed details and confirm the payment, website and analytics services you actually use before publishing.
Privacy Policy
Last updated: 2 October 2026
At King of Kefir, we respect your privacy. This policy explains how we collect, use and protect your personal information when you visit www.kingofkefir.ie, place an order, subscribe to our newsletter or contact us.
1. Who we are
King of Kefir is operated by Herbel Crest Ltd, which is the controller of the personal information described in this policy.
Business address:
Unit 3, Ardee Business Park
Ardee, Co. Louth
A92 X3YW, Ireland
Privacy contact: info@herbelcrest.ie
Telephone: +353 87 684 2134
2. Information we collect
Depending on how you interact with us, we may collect:
- Your name, email address, telephone number, billing address and delivery address.
- Order details, payment status and transaction references.
- Messages you send us, including questions, feedback or complaints.
- Your newsletter subscription status and marketing preferences.
- Technical information such as your IP address, browser type and device information.
- Information about your use of our website, where permitted by your cookie preferences.
Payments are processed by Stripe & PayPal. We receive payment confirmations and transaction information.
3. How and why we use your information
Under data protection law, we must have a lawful basis for using personal information.
| Purpose | Lawful basis |
|---|---|
| Processing orders, taking payment and arranging delivery | Performance of our contract with you |
| Handling returns, refunds and order-related enquiries | Performance of our contract and compliance with legal obligations |
| Maintaining accounting and tax records | Compliance with legal obligations |
| Sending newsletters and promotional emails | Your consent |
| Keeping our website secure and preventing fraud | Our legitimate interests in protecting our business and customers |
| Handling general enquiries and complaints | Our legitimate interests in communicating with you and resolving issues |
| Using optional analytics or advertising cookies | Your consent |
Where we rely on legitimate interests, we consider the impact on your privacy and use your information only where those interests are not overridden by your rights.
4. Newsletters and marketing
If you subscribe to our newsletter, we will use your email address to send King of Kefir news, product updates and offers.
We use Mailchimp to manage our mailing list and send newsletters.
You can unsubscribe at any time using the link in our marketing emails or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
We may retain a minimal record of your unsubscribe request to ensure we respect your preference.
Unsubscribing from marketing does not stop essential messages about an order you have placed.
5. Who we share information with
We share relevant information with service providers where necessary to operate our business, including:
- Our website hosting and online store providers: Stripe & PayPal.
- Payment providers: Stripe & PayPal.
- Delivery companies handling your order.
- Mailchimp, for newsletter subscriptions and email delivery.
- IT support providers, accountants and professional advisers.
- Public authorities where disclosure is required by law.
We share only the information needed for the relevant service or purpose. Providers processing information on our behalf must do so under appropriate contractual safeguards.
We do not sell your personal information.
6. International transfers
Some service providers may process personal information outside the European Economic Area.
Where this happens, we use an appropriate legal transfer mechanism, such as an EU adequacy decision or European Commission Standard Contractual Clauses, with additional safeguards where required.
You can contact us for further information about safeguards relevant to your information.
7. How long we keep information
We keep personal information only for as long as needed for the purposes described in this policy.
- Orders and accounting records: generally six years where required for Irish tax and accounting purposes, or longer where a specific legal obligation or ongoing dispute requires it.
- Newsletter information: until you unsubscribe or we discontinue the mailing list, subject to retaining a minimal suppression record.
- Enquiries and complaints: 6 years after the matter is resolved.
- Website and security records: 6 years.
- Cookie information: for the periods stated in our Cookie Policy.
We securely delete or anonymise information when we no longer need it.
8. Cookies
Our website uses cookies and similar technologies.
Essential cookies support functions such as the shopping basket, checkout and website security. Optional analytics and advertising cookies, where used, are activated only with your consent.
Our Cookie Policy provides details of the cookies we use, their purposes and how long they last. You can change your optional cookie preferences through [insert cookie settings link or instructions].
9. Keeping information secure
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
Access is limited to people and service providers who need it for their work. No website or transmission method can be guaranteed completely secure.
10. Your rights
Subject to the conditions and exceptions in data protection law, you have the right to:
- Access your personal information and receive a copy.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Request restriction of processing.
- Receive certain information in a portable format.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Withdraw consent where processing relies on consent.
To exercise your rights, email [customer service email]. We may need to verify your identity before responding.
We normally respond within one month. Where an extension is permitted because a request is complex or involves several requests, we will explain the reason within that first month.
11. Complaints
Please contact us if you have a concern about how we handle your information.
You also have the right to complain to the Irish Data Protection Commission, or to the relevant supervisory authority where you live or work in the EU.
Data Protection Commission: www.dataprotection.ie
12. Changes to this policy
We may update this policy to reflect changes to our business or legal requirements. The latest version will appear on this page with its updated date. Where appropriate, we will notify you of material changes.