Legal

Privacy Policy

What personal data we collect, why we collect it, how long we keep it, and the rights you have over it under the GDPR.

Who we are

This site is operated by Terraform Maps of Galway, Ireland — the data controller for any personal data described below.

Registered name and address: legal entity name, registered address and company registration number to be confirmed. Contact for any privacy matter: privacy@terraform.ie.

What we collect, and why

We collect as little as we can. Everything below has a stated purpose and a lawful basis under Article 6 of the GDPR.

Data Purpose Lawful basis Kept for
Name, email, delivery and billing address, phone To take, make and deliver your order Contract 7 years
Order and payment records Accounting and tax obligations Legal obligation 7 years
Message you send us via a form or email To answer you Legitimate interests 24 months
Email address for map releases To email you about new maps Consent Until you unsubscribe
Cookie consent choice To honour your choice Legal obligation 180 days

We do not run advertising trackers, sell data, build profiles, or use automated decision-making.

Payments

Card payments are processed by our payment provider, not by us. We never see or store your full card number. Our provider acts as an independent controller for the payment transaction and holds its own privacy notice: payment provider to be confirmed — e.g. Stripe / Realex / PayPal.

Who else processes your data

We use a small number of processors, each under a data-processing agreement:

  • Hosting — Raidboxes GmbH, servers in the EU, powered by 100% renewable electricity.
  • Email — mail provider to be confirmed, for transactional and enquiry email.
  • Delivery — An Post and international carriers receive your name, address and phone number in order to deliver.
  • Newsletter — newsletter provider to be confirmed, if you have signed up.

Where a processor is outside the EEA we rely on the European Commission’s Standard Contractual Clauses. We do not transfer data outside the EEA for any other reason.

Your rights

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to our processing, receive it in a portable format, and withdraw consent at any time. Ask us at privacy@terraform.ie and we will respond within one month.

If you are not satisfied with our response you can complain to the Irish supervisory authority: the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963.

Security and children

The site is served over HTTPS. Access to order data is limited to the people who need it to fulfil orders. Our services are not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

If we change this policy we will update the version and date at the side of this page, and for a material change we will say so on the site.