TERMS & CONDITIONS
Cancellations:
Our products are made to order and therefore cancellations made within 48 hours prior to delivery will not be refunded.
To ensure we see and confirm cancellations your cancellation requests must be made during the office hours 9.00am to 3pm.
Returns & Refunds:
In the unfortunate event that your order is damaged on delivery please contact us by email at info@rosaleenskitchen.ie and we will give this our immediate attention.
At the time of delivery please inspect your products thoroughly. Damages and shortages must be reported within 24 hours of delivery otherwise claims will not be accepted. Always keep proof of delivery and any damaged packaging should this occur.
Please give a full detailed report and keep any damaged packaging which we can use to build a report and rectify the issue effectively.
This returns policy does not affect your statutory rights.
Payments:
We do not store any Card details. Credit and Debit card details you submit to Stripe via their payment gateway in order to purchase products are not saved unless you click the save details option. Any details entered on Stripe’s payment gateway will be kept encrypted and private and not given to any third party.
General:
The website www.rosaleenskitchen.ie is owned and operated by Rosaleen’s Kitchen (referred to as “we”, “us” or “our”).
If you use our website by means of accessing, browsing and/or making a transaction, you agree and acknowledge to have read, understand and accept the terms & conditions outlined below.
We reserve the right to change the terms and conditions at any time. As a user you are bound to these terms and conditions and as such should check them regularly.
We reserve the right to change our product prices, product range at any time. This includes our right to discontinue a product or service at any time.
We reserve the right to refuse any order if we believe it lacks information or is suspicious.
All of our products are produced in our dedicated gluten certified free bakery. That means that we can guarantee that all products produced in our bakery are gluten free. Coeliac’s, although we don’t let any gluten into our bakery, we cannot guarantee that our products will remain gluten free after leaving our bakery due to cross contamination during delivery. If the packaging containing your products is damaged or you suspect cross contamination, please refrain from consuming the products.
Rosaleen’s Kitchen’s website, including content and materials published on said website, are protected by intellectual property rights and/or owned by Rosaleen’s Kitchen and may not be used without written permission.
Site Availability:
Although Rosaleen’s Kitchen will endeavour to keep our website online 24 hours 7 days a week without error we cannot guarantee it. In some cases unexpected errors, breakdowns or maintenance may occur and therefore we are not liable for its unavailability.
Privacy Policy:
Last updated: [29/Sept/2026]
- Who we are
This website, www.rosaleenskitchen.ie ("the Website"), is operated by [Rosaleen's Kitchen Limited and Eonico Ltd], trading as Rosaleen's Kitchen and Crust.
We are the data controller for the personal data we process about you through the Website and when you order from us or contact us. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), the Data Protection Acts 1988 to 2018, and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. No. 336 of 2011) ("ePrivacy Regulations").
Contact for privacy matters:
Email: [info@crustglutenfree.ie/ niamh@rosaleenskitchen.ie]
We are not required to appoint a Data Protection Officer. Please send any privacy questions to the contact details above.
- Personal data we collect
What we collect depends on how you use the Website and our services.
Category | Examples | Source |
Identity and contact data | Name, email address, phone number, delivery and billing address | You, when you order, register or contact us |
Order and transaction data | Products ordered, order history, delivery instructions, collection or delivery dates, amounts paid | You, and our payment provider |
Payment data | Payment card details are handled directly by our payment provider [e.g. Stripe / PayPal / WooCommerce Payments]. We do not see or store your full card number. We get a confirmation of payment and limited details such as the card type and last four digits. | Payment provider |
Account data | Username, password (stored in encrypted form), preferences | You, if you create an account |
Dietary and allergy information | Details you choose to give us about coeliac disease, allergies or intolerances, for example in order notes or messages | You |
Communications | Emails, contact form messages, feedback, reviews | You |
Marketing preferences | Whether you have signed up for our newsletter or marketing messages | You |
Technical and usage data | IP address, browser type, device information, pages visited, referring website, and cookie identifiers | Cookies and similar technologies (see section 8) |
Special category (health) data
Information about coeliac disease, allergies or intolerances can count as health data under Article 9 of the GDPR. We only process this kind of information when you choose to give it to us, and only so that we can prepare your order safely and answer your questions. We rely on your explicit consent to do this (Article 9(2)(a) GDPR). You can withdraw consent at any time. If you do, we may not be able to accommodate specific dietary requests. We don't need health information to fulfil a standard order, so please only give us what is necessary.
- How and why we use your data (legal bases)
Purpose | Legal basis (GDPR Article 6) |
Processing, preparing, delivering or arranging collection of your orders, including made-to-order and seasonal products | Performance of a contract (Art. 6(1)(b)) |
Taking payment, issuing receipts, and handling refunds and returns | Performance of a contract (Art. 6(1)(b)) |
Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
Replying to enquiries and customer service requests | Legitimate interests in responding to you (Art. 6(1)(f)), or contract where the enquiry relates to an order |
Managing your account | Performance of a contract (Art. 6(1)(b)) |
Sending newsletters, offers and marketing emails or texts | Consent (Art. 6(1)(a)), or, for existing customers, the soft opt-in under Regulation 13 of the ePrivacy Regulations (similar products, with an easy opt-out in every message) |
Accommodating allergy or dietary requirements | Explicit consent (Art. 9(2)(a)) |
Running, securing and improving the Website, and preventing fraud | Legitimate interests (Art. 6(1)(f)) |
Using non-essential cookies (analytics, marketing) | Consent (Art. 6(1)(a) and Regulation 5 of the ePrivacy Regulations) |
Complying with food safety, product recall or traceability obligations, and establishing or defending legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we have weighed our interests against your rights and freedoms. You can contact us for more information about that assessment.
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
- Marketing
We will only send you marketing messages if you have agreed to receive them, or if you are an existing customer and we are telling you about similar products (in which case you will have had the option to opt out when you gave us your details). Every marketing message includes a simple way to unsubscribe. You can also opt out at any time by emailing [email]. We never sell your personal data.
- Who we share your data with
We only share your personal data where necessary, with:
- Payment processors, such as [Stripe /SumUp], to process payments securely.
- Delivery and courier companies, such as [An Post / DPD / local courier], to deliver your orders.
- Website hosting and e-commerce platform providers, such as [e.g. WordPress/WooCommerce host name].
- Email and newsletter providers, such as [e.g. Mailchimp].
- Analytics providers, such as [e.g. Google Analytics], but only if you consent to analytics cookies.
- Professional advisers, such as accountants, auditors, solicitors and insurers.
- Public authorities, regulators or law enforcement, such as the Revenue Commissioners, the Food Safety Authority of Ireland or An Garda Síochána, where the law requires it.
- A buyer or successor, if the business or its assets are sold or restructured.
Our service providers act as data processors on our behalf. They are bound by written contracts under Article 28 GDPR and may only use your data according to our instructions.
- International transfers
Some of our service providers may process data outside the European Economic Area (EEA), for example in the United States. When that happens, we make sure appropriate safeguards are in place as required by Chapter V of the GDPR. These include an EU adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses. You can contact us for more information or a copy of the relevant safeguards.
- How long we keep your data
We only keep personal data for as long as we need it for the purposes it was collected for:
Data | Retention period |
Order, invoice and transaction records | 6 years from the end of the relevant financial year (Irish tax and company law requirements) |
Customer account data | Until you close your account, plus up to [12 months] |
Enquiries and correspondence | Up to [2 years] after the matter is resolved |
Allergy and dietary information | Only for as long as it is needed to fulfil the relevant order(s), or until you withdraw consent |
Marketing list | Until you unsubscribe. We keep a suppression record so we don't contact you again. |
Cookie data | See our Cookie Policy / cookie banner for each cookie's lifespan |
- Cookies
The Website uses cookies and similar technologies. Strictly necessary cookies, for example those that keep your shopping basket and checkout working, are used without consent because the Website cannot work without them. We only use analytics, marketing or other non-essential cookies if you agree to them through our cookie banner. The banner lets you accept or reject non-essential cookies equally easily. You can change your choices at any time through [the "Cookie Settings" link in the footer]. For full details of the cookies we use, their purpose and duration, see our [Cookie Policy].
- How we protect your data
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. These include SSL/TLS encryption on the Website, secure third-party payment processing, access controls, and staff confidentiality. No online transmission is completely secure. If a personal data breach is likely to put you at risk, we will notify the Data Protection Commission within 72 hours and tell you where the law requires it.
- Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (a subject access request).
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten") in certain circumstances.
- Restrict how we process your data in certain circumstances.
- Data portability, meaning you can receive data you gave us in a commonly used, machine-readable format.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time. This does not affect processing carried out before you withdrew it.
To exercise any of these rights, contact us using the details in section 1. We will respond within one month. We can extend this by up to two more months for complex requests, and if we do, we will tell you. There is usually no charge. We may need to confirm your identity before acting on a request.
- Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
- Children
The Website and our products are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
- Third-party websites
The Website may link to other websites, such as social media pages, retailers like Dunnes Stores, or the Crust Gluten Free brand. We are not responsible for the privacy practices of those websites, so please read their privacy policies.
- Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the "Last updated" date. If we make significant changes, we will tell you by email or by a notice on the Website.