Privacy Policy

Last updated: 5 July 2026

HandSolace ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. This policy explains what personal data we collect, how we use it, and your rights.

1. Information we collect

Contact and order details: name, email, phone, shipping and billing address.
Payment information: processed securely by our payment providers; we do not store full card numbers.
Account information: if you create an account, your login credentials.
Communications: messages you send us via email or forms.
Technical data: IP address, browser, device, pages viewed, referring URL, cookies and similar technologies.

2. How we use your information

Process and deliver your orders and provide customer support.
Manage returns, cancellations and refunds under Irish and EU consumer law.
Send transactional emails (order confirmation, shipping updates).
Send marketing communications where you have consented (you can unsubscribe at any time).
Improve the Site, our products and prevent fraud.
Comply with our legal obligations.

3. Who we share information with

We share personal information only with third parties who help us run our business, including:

Payment processors (e.g. Stripe, PayPal, Shopify Payments).
Ecommerce and hosting platforms (e.g. Shopify).
Delivery and fulfilment partners (e.g. An Post, courier providers).
Advertising and measurement providers — Meta Platforms Ireland Ltd (Meta Pixel and Shopify's official Facebook & Instagram integration), used only where you have given marketing consent.
Professional advisers and regulators where required by law.

Some of these providers may process data outside the European Economic Area (including in the United States). Where that happens we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

4. Cookies and tracking (Cookie Policy)

Strictly necessary storage is used to run the shop. Optional analytics, marketing and preference storage is never activated before you give consent in the cookie banner. Until you choose, no Meta Pixel is loaded, no advertising request is made and no advertising identifier is stored. Ad-click parameters from a Meta ad are held only in the page's memory and are discarded if you reject.

This list is generated from what the deployed production build actually uses:

Name	Provider	Purpose	Category	Duration	Party
`hs_consent`	HandSolace (cookie + localStorage)	Stores your cookie decision, its timestamp and the policy version.	Strictly necessary	180 days	First party
`hs_attr`	HandSolace (cookie + localStorage)	Ad-click and campaign parameters (fbclid, UTM, Meta campaign/adset/ad IDs) so an order can be attributed to the advertising funnel. Written only after marketing consent.	Marketing — consent required	30 days	First party
`_fbp`	Meta Pixel	Browser identifier used by Meta to measure our advertising. Created by Meta only after marketing consent.	Marketing — consent required	Up to 90 days (set by Meta)	First party, shared with Meta
`_fbc`	Meta Pixel	Stores the last ad click ID for attribution. Created by Meta only after marketing consent.	Marketing — consent required	Up to 90 days (set by Meta)	First party, shared with Meta
Shopify cart & session storage (e.g. `cart`, `_secure_session_id`, `_shopify_y`)	Shopify	Keeps your basket, secures the checkout session and prevents fraud on shop.handsolace.com. Shopify's own analytics cookies are governed by Shopify's consent state, which we synchronise with your choice through Shopify's Customer Privacy API.	Strictly necessary / Shopify analytics (consent-governed)	Session up to 1 year (set by Shopify)	Shopify (checkout domain)

Changing your mind: you can withdraw at any time by emailing us at support.handsolace@gmail.com, or by blocking or deleting cookies in your browser settings (browsers allow you to block third-party cookies and clear stored cookies for this site). You can also opt out of Meta's advertising personalisation in your Facebook or Instagram ad settings. Withdrawing never prevents you from browsing, using the cart, reaching checkout or completing an order.

5. Direct marketing

We only send marketing emails if you have opted in or purchased from us. Every email includes an unsubscribe link. You can also contact us to opt out at any time.

6. Data security and retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including using reputable service providers and encrypted connections (HTTPS). We keep personal information only for as long as needed to fulfil the purposes described above or to meet legal, tax and accounting requirements.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email support.handsolace@gmail.com. If you are not satisfied with how we handle your data, you may lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

8. Children

The Site is not directed at children under 16 and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.

10. Contact

Privacy questions: support.handsolace@gmail.com