Privacy Policy
This Privacy Policy explains how Monaghan Electrical Wholesaler Ltd (“we”, “us”, “our”), trading as electricalwholesaler.ie, collects and uses your personal data when you use our website, create an account, or place an order. We are the data controller responsible for your personal data under applicable Irish and EU data protection law.
If you have any questions about this policy or how we use your data, please contact us.
1. Your Rights
You have the following rights over your personal data. To exercise any of them, contact us at [email protected] or via a support ticket.
| Right | What it means | Notes |
|---|---|---|
| Access | Request a copy of the personal data we hold about you | We will respond within one month |
| Rectification | Ask us to correct inaccurate or incomplete data | You can update most account details directly in your profile |
| Erasure | Ask us to delete your personal data | We will delete what we can and explain what we are required to retain and why (e.g. invoices and transaction records required by Irish tax law -see section 7). We will respond within one month. |
| Portability | Receive your data in a structured, machine-readable format | Applies to data you provided, processed by automated means under consent or contract |
| Restriction | Ask us to limit how we use your data | Applies in specific circumstances, e.g. while accuracy is disputed |
| Object | Object to processing based on legitimate interests | We will stop unless we have compelling grounds to continue. For marketing emails, we always stop. |
| Withdraw consent | Withdraw consent at any time where processing is consent-based | Does not affect the lawfulness of processing before withdrawal |
| Complaint | Lodge a complaint with the Irish Data Protection Commission | www.dataprotection.ie -we ask that you contact us first so we can try to resolve it |
2. What Personal Data We Collect
| Category | Data collected |
|---|---|
| Account data | Full name, email address, phone number, business name (optional), business registration number (optional) |
| Google sign-in data | Google account identifier, name, email address (when you register or sign in via Google) |
| Address data | Delivery addresses you add to your account |
| Order data | Items ordered, quantities, prices, order status, delivery details, order history, receipts and VAT invoices |
| Payment data | Transaction references and payment status. We do not store your card details -these are processed directly by our payment provider |
| Support data | Content of support tickets and communications between you and us |
| Marketing preferences | Whether you opted in, receive marketing emails as an existing customer, or said no to marketing emails, and when |
| Cookie consent data | Your cookie preferences and consent choices (see our Cookie Policy) |
| Technical / security data | IP address, browser type and pages requested, recorded in our technical logs (with your email address and order number when you are signed in or ordering); approximate country inferred from your IP address at registration (only the country code is retained -see section 4) |
| Browsing data | Pages and products viewed, items added to your cart, and how you use our pages, collected by analytics and advertising tools only if you accept them in our cookie banner |
3. How and Why We Use Your Data
3.1 Fulfilling your order
What we do: Process your order, arrange delivery, handle returns and refunds, issue receipts and VAT invoices, and communicate with you about your order.
To deliver your order, we give the carrier your name, delivery address, Eircode, phone number and email address, so it can deliver the parcel and send you delivery updates. When we arrange a return or collection for you, we give the carrier your name, address, Eircode and mobile number.
Data used: Account data, address data, order data, payment data.
Legal basis: Performance of our agreement with you -necessary to process and fulfil your order.
3.2 Managing your account
What we do: Create and maintain your account, verify your email address, handle password resets, manage your address list and communication preferences.
Data used: Account data, Google sign-in data (where applicable), address data, marketing preferences.
Legal basis: Performance of our agreement with you -necessary to manage your account.
3.3 Transactional emails
What we do: Send order confirmations, shipping notifications with tracking details, cancellation notices, and support ticket resolution emails. These emails are sent by our email delivery providers from [email protected].
Data used: Name, email address, order data.
Legal basis: Performance of our agreement with you -necessary to keep you informed about your order.
Note: If you unsubscribe from transactional emails, you will no longer receive order confirmations, shipping notifications, or password reset emails. We strongly recommend keeping transactional emails active.
3.4 Marketing emails
What we do: Send you marketing communications about our products, promotions, and news, via Mailchimp. We send them to two groups of customers:
- You opted in -when registering or in your profile page.
- You bought from us -when you place an order, our checkout tells you we may email you offers and gives you a “No thanks, don’t email me offers” box. If you leave it unticked, then once your order is paid we may email you offers on our own products similar to those you bought. You are never added if you have opted out or told us no before.
Your details are held in Mailchimp only if you are in one of these groups.
Data used: Name, email address, phone number, default delivery address and country, the items in your basket (for basket reminders), your orders (for emails after a purchase), subscription status, and how and when you were subscribed or said no.
Legal basis: If you opted in: your consent. If you bought from us and did not tick the box: our legitimate interests in telling our existing customers about products similar to those they bought. The law allows this for existing customers, as long as you can say no at checkout and in every email we send.
You can stop marketing emails at any time, free of charge, via your profile page, by clicking “Unsubscribe” in any marketing email, or by contacting us. When you say no to marketing emails, we always stop. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
3.5 Website security, fraud prevention and fixing problems
What we do: Our systems keep technical logs of how the website is used, to detect and stop attacks, malicious bots and fraud, and to investigate a problem with an order, a payment or an email. These logs may be disclosed to law enforcement if required.
Data used: IP address, browser type, the pages requested and when, and, when you are signed in or place an order, your email address and order number. Also whether our emails to you were delivered.
Retention: Up to 6 months, then deleted automatically.
Legal basis: Our legitimate interests in keeping our website and customers secure, preventing fraud, and resolving problems with orders, payments and emails.
3.6 Country detection at registration
What we do: When you register, we use your approximate geographic location -inferred from your IP address via our content delivery and security provider -to pre-set your account region (Ireland or UK). This determines which market, pricing, and shipping options apply to your account. Only the resulting country code is stored; the raw IP address is not retained by us for this purpose. You can request a correction at any time via a support ticket.
Data used: IP address (processed to derive country code, then discarded); country code (stored on account).
Legal basis: Our legitimate interests in setting up your account accurately for the correct market, pricing, and shipping options. You have the right to object to this processing and request a correction at any time.
3.7 Website analytics
What we do:
- Umami -we use a self-hosted, privacy-first analytics tool to understand how our website is used. Umami collects no personal data and sets no cookies. It cannot identify individual visitors.
- Google Analytics -used to measure website traffic and behaviour. Only loaded if you accept analytics cookies via our cookie consent banner.
- Microsoft Clarity -records how our pages are used (clicks, scrolling, page layout) so we can find and fix problems. Only loaded if you accept analytics cookies. On account, sign-in, sign-up, delivery and payment pages, all text is masked in your browser before anything is sent.
Data used: Umami: no personal data. Google Analytics and Microsoft Clarity: browsing data and a random visitor ID (if consented).
Legal basis: Umami: no personal data processed. Google Analytics and Microsoft Clarity: your consent.
3.8 Cookie consent logging
What we do: We record your cookie consent choices to demonstrate compliance with our legal obligations. For signed-in users, we log your user ID, timestamp, choices made, and the version of the cookie banner shown. For anonymous visitors, we log an anonymous session identifier in place of a user ID.
Data used: User ID (signed-in) or anonymous session ID, timestamp, consent choices, banner/policy version.
Retention: 6 months by default.
Legal basis: Our legitimate interests in demonstrating compliance with our cookie consent obligations.
3.9 Live chat (Tawk.to)
What we do: Our website includes a live chat feature provided by Tawk.to. Before you can chat, the chat window asks for your approval to use personal information such as your name and email. The chat sets two cookies to keep its connection (see our Cookie Policy).
Legal basis: Your consent given within the Tawk.to interface.
3.10 Payment fraud detection
What we do: When you navigate to checkout, our payment provider (Stripe) collects device and browser signals to assess the risk of fraudulent transactions. Stripe loads only on the checkout page -it is not active when you are browsing the rest of the website.
Data used: Device identifiers, browser characteristics, and interaction patterns during the checkout process.
Legal basis: Our legitimate interests in preventing payment fraud and protecting customers from unauthorised use of their payment details.
3.11 Legal obligations and law enforcement
What we do: Retain data as required by Irish law (e.g. financial and tax records) and disclose data to law enforcement or regulatory authorities when legally required to do so.
Legal basis: Legal obligation -we are required by law to retain certain records and to cooperate with authorities when lawfully requested.
3.12 Advertising (Google Ads and Meta)
What we do: Measure whether our adverts on Google, Facebook and Instagram lead to purchases, and show relevant adverts to people who have visited our website. Only if you accept advertising cookies; Meta has its own switch in the cookie banner.
Data used:
- Google Ads: pages and products viewed, items added to your cart, and your purchase (order value and products). At purchase we also send a hashed (scrambled, one-way) copy of your email address so Google can match the sale to an advert.
- Meta: the same events from your browser. When you complete a purchase, our server also sends Meta the purchase (order value and products), a hashed copy of your email address and country, your IP address, your browser type, and the Meta cookie IDs.
Legal basis: Your consent. You can withdraw it at any time from the cookie settings link in the footer; we then stop sending this data.
Meta Platforms Ireland Ltd and Google receive this data as independent controllers and use it under their own privacy policies.
3.13 Google Customer Reviews
What we do: The order confirmation page has a “Rate your experience” button. Nothing is sent to Google unless you click it. When you do, we give Google your email address, order reference, delivery country and an estimated delivery date, and Google invites you to review your purchase from us. Google only contacts you if you accept its invitation.
Legal basis: Legitimate interests (collecting independent reviews of our service), from the moment you click the button. You can decline Google’s invitation, and you can object at any time by contacting us.
4. Who We Share Your Data With
We share your data with the following service providers, who act as processors under our instructions unless otherwise stated:
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Stripe | Payment processing and fraud detection (checkout page only) | USA | SCCs |
| Email delivery providers | Transactional emails | USA and EU | USA: EU-U.S. Data Privacy Framework, with SCCs as a fallback. EU: within EEA |
| Mailchimp (Intuit) | Marketing email management (customers who opted in, or bought from us and did not say no) | USA | SCCs |
| Analytics and advertising (if consented); Google sign-in; Customer Reviews invitations | USA | SCCs | |
| Meta Platforms Ireland | Advertising measurement (if consented) | Ireland (EU), with transfers to the USA by Meta | Meta’s own safeguards |
| Microsoft (Clarity) | Website usage analytics (if consented) | USA | SCCs |
| Cloudflare | Content delivery, security, country detection | USA | SCCs |
| Tawk.to | Live chat (if accepted in plugin) | USA | SCCs |
| Hosting providers | Website and data hosting | UK and EU | EU adequacy decision for the UK |
| An Post | Delivery, tracking, and returns we arrange for you. An Post acts as an independent controller under its own privacy notice | Ireland | Within EEA |
| DPD Ireland | Delivery, tracking, and collections we arrange for you | Ireland | Within EEA |
| Pallet and courier services | Delivery and collection of large items, when we book one for you | Ireland | Within EEA |
Where we are legally required to disclose data (e.g. to the Revenue Commissioners, An Garda Síochána, or the DPC), we will do so.
5. International Transfers
Where your data is transferred outside the EU/EEA (primarily to US-based service providers listed above), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) approved by the European Commission. Cloudflare’s GDPR commitments are documented at cloudflare.com/trust-hub/gdpr.
6. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Our service providers are contractually required to apply equivalent standards.
Your card payment details are processed directly by our payment provider using encryption -we never see or store them.
No internet transmission is 100% secure. We can only protect data once we have received it.
7. Data Retention
We retain your data only for as long as necessary for the purpose it was collected, or as required by Irish and EU law.
| Data | Retention period |
|---|---|
| Technical logs (IP address, browser, email address and order references) and email delivery records | Up to 6 months, then deleted automatically |
| Cookie consent records | 6 months. Your choice is remembered for 30 days, then we ask again |
| Marketing consent records | Up to 6 years from your last marketing interaction or withdrawal of consent -retained to demonstrate compliance and defend regulatory or legal claims |
| Marketing opt-out (suppression) | Email address and opt-out flag retained indefinitely to ensure you are not re-added to marketing lists |
| Marketing emails as an existing customer (not opted in) | Stopped, and you are removed from our marketing list, if you place no order with us for 12 months |
| Account data -no orders placed | Up to 2 years from your last login or activity, then deleted. You may request earlier deletion at any time. |
| Account data -orders placed | Account profile retained for up to 6 years from your last order, in line with Irish financial record-keeping requirements. You may request deletion of your account and marketing data at any time -order and invoice records required by Irish tax law will be retained for the remainder of the 6-year period even if your account is deleted. |
| Order and transaction records (invoices, receipts, VAT records) | 6 years from the end of the accounting period in which the transaction occurred -required by Irish tax and company law |
| Support tickets -order or complaint related | Up to 6 years from resolution or last related order -to comply with consumer law and to defend legal claims |
| Support tickets -general enquiries (no order) | Up to 2 years from last contact, then deleted |
8. Marketing Communications
Marketing emails are sent via Mailchimp. You receive them if you opted in, or if you bought from us and did not tick “No thanks, don’t email me offers” at checkout (see section 3.4). You can opt in when registering or at any time via your profile page. You can opt out by:
- Ticking “No thanks, don’t email me offers” at checkout
- Clicking “Unsubscribe” in any marketing email
- Updating your preferences in your profile page
- Contacting us
Your marketing preferences are stored in your account. If you receive marketing emails, your name, email address, phone number, default delivery address, basket and orders are also held in Mailchimp. Opting out stops all marketing emails, and we keep a record that you said no so you are not added again. Opting out does not affect transactional emails (order confirmations, shipping notifications, etc.).
9. Transactional Emails
Transactional emails (order confirmations, shipping notifications, password resets, ticket resolutions) are sent by our email delivery providers. These emails are part of our service to you and cannot be individually opted out of. You may unsubscribe from all emails via any transactional email, but doing so will also stop order confirmations, shipping notifications, and password reset emails from reaching you.
10. Cookies
For full details on the cookies we use and how to manage your preferences, see our Cookie Policy. Cookie preferences can be updated at any time via the cookie settings link in the footer of every page.
11. Changes to This Policy
We may update this policy from time to time. The current version is always on this page, with the date it was last updated.
12. Contact Us
For questions about this policy, to exercise your rights, or to raise a concern:
Monaghan Electrical Wholesaler Ltd Plantation Road, Monaghan, Co. Monaghan, H18 E781 Email: [email protected] Phone: +353 (0)47 81135 Support tickets: /en/c/support-tickets
To complain to the Irish Data Protection Commission: Website: www.dataprotection.ie Phone: +353 (0)57 868 4800 Post: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28
We ask that you contact us in the first instance so we can attempt to resolve your concern directly.