Effective Date:  24 October 2025

This Privacy Policy explains how 'Mouse House Studio' (referred to as "we," "us," or "our"), an art and ceramics business based in Ireland, collects, uses, and protects your personal data when you use our website, purchase our products, or interact with us.

We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Irish Data Protection Act 2018.

The Data Controller is:

• Name: 'Mouse House Studio'
• Address: Ballina Rd. Killala, Co. Mayo, Ireland 
• Email: christina@mousehousestudio.eu
• Website:https://mousehousestudio.eu

We only collect personal data that is necessary for the purposes set out below.

Category of DataPurpose of ProcessingLegal Basis for Processing (GDPR Article 6)

Identity Data (Name)Processing and fulfilling product orders.Contract (Necessary for the performance of a contract).

Contact Data (Email, Shipping Address, Phone Number)Processing and shipping orders, communicating about your order, customer service.Contract (Necessary for the performance of a contract).

Financial/Transaction Data(Payment confirmation, purchased products, not including full card details)Processing payments and refunds.Contract (Necessary for the performance of a contract) and Legal Obligation (Tax/accounting records).

Communications Data(Correspondence via email, contact form, or social media)Responding to your queries and feedback, providing customer service.Legitimate Interests (Providing good customer service).

Marketing Data (Email address if you subscribe)Sending promotional emails, newsletters, or information about new products (only with your explicit consent).Consent (You have given clear consent).

Technical Data (IP address, browser type, device information, website usage)Website analytics, improving website performance, security, and preventing fraud.Legitimate Interests (Monitoring and improving our service and security).

We collect data from you in the following ways:

• Direct Interactions: When you place an order, sign up for a newsletter, fill out a contact form, or communicate with us via email.
• Automated Technologies: When you interact with our website, we may automatically collect Technical Data through cookies and similar tracking technologies.
• Third Parties: We may receive data from third-party services that support our business (e.g., payment processors, shipping providers, website hosting platforms).

We only share your personal data with third parties where it is necessary for our business operations, such as:

• Service Providers: Third parties who provide essential services, such as payment processing ([e.g., Stripe, PayPal]), shipping and delivery services ([e.g., An Post, DHL]), and website hosting.
• Legal & Regulatory Authorities: When legally required to do so, for example, to comply with tax obligations, a court order, or a request from the Irish Data Protection Commission (DPC).

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

As an Irish business, your personal data is primarily processed within the European Economic Area (EEA).

However, some of our service providers (e.g., website hosting, email marketing tools) may be based outside the EEA. Where this is the case, we take steps to ensure your personal data is protected by requiring those providers to implement adequate safeguards, such as reliance on the European Commission's Standard Contractual Clauses (SCCs).

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain:

• Order and Transaction Data for a minimum of six years after the relevant tax year to comply with Irish tax law.
• Marketing Data (if you subscribed) until you unsubscribe or if we decide to discontinue our mailing list and deem your data unnecessary.

Under GDPR, you have the following rights regarding your personal data:

1. The Right to Be Informed: To be informed about how your data is processed (as outlined in this policy).
2. The Right of Access: To request a copy of the personal data we hold about you.
3. The Right to Rectification: To have inaccurate or incomplete data corrected.
4. The Right to Erasure ('Right to be Forgotten'): To request the deletion of your personal data, subject to certain legal exceptions.
5. The Right to Restrict Processing: To ask us to suspend the processing of your personal data in certain circumstances.
6. The Right to Data Portability: To request your data in a structured, commonly used, machine-readable format.
7. The Right to Object: To object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the absolute right to object to the processing of your personal data for direct marketing purposes.
8. Rights in relation to automated decision making and profiling.

If you have provided consent for us to process your data, you have the right to withdraw that consent at any time.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

If you wish to exercise any of the rights set out above, please contact us at:

Email: christina@mousehousestudio.eu

We will respond to all legitimate requests within one month.

If you are not satisfied with how we have handled your personal data, you have the right to make a complaint at any time to the supervisory authority for data protection in Ireland, which is the Data Protection Commission (DPC).

• Data Protection Commission (DPC)
• Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28
• Website: www.dataprotection.ie

We would appreciate the chance to deal with your concerns before you approach the DPC, so please contact us in the first instance.

We may update this policy from time to time. The latest version will always be posted on this page with the effective date. Please check back frequently to see any updates or changes.