Privacy Policy

Last updated: 19 August 2026

1. About this Privacy Policy

This Privacy Policy explains how My Custom Clothing collects, uses, stores and shares personal data when you:
  • visit our website;
  • create or use a customer account;
  • place an order;
  • upload artwork or logos;
  • request a quotation;
  • contact us;
  • subscribe to marketing communications;
  • or otherwise interact with us.
This Privacy Policy applies to the website: mycustomclothing.ie It should be read together with our Cookie Policy, Terms and Conditions and any additional privacy information shown when we collect personal data from you.

2. Who We Are

For the purposes of applicable data protection law, the data controller is:

Sam Gibson, sole trader trading as MyCustomClothing.ie
Registered business name: MyCustomClothing.ie
Business name registration number: 791146

Registered / correspondence address:
Linn Bhui
Bothair an Stiofain
Knocknacarra
Galway
H91 V1NV

Operating and returns address:
Unit 24 & 25 Glenrock Industrial Estate
Bothair na Mine
Galway
H91 XC62

Email: info@mycustomclothing.ie
Telephone: 087 783 0020

References in this Privacy Policy to “My Custom Clothing”, “we”, “us” or “our” mean Sam Gibson trading as MyCustomClothing.ie.

Questions about this Privacy Policy or how we use personal data should be sent to info@mycustomclothing.ie.

3. Personal Data We Collect

The personal data we collect depends on how you interact with us.

3.1 Identity and contact details

We may collect:
  • your name;
  • company or organisation name;
  • job title;
  • billing and delivery address;
  • email address;
  • telephone number;
  • Eircode;
  • and other contact details you provide.

3.2 Customer account information

When you create or use an account, we may collect:
  • account username;
  • account login credentials;
  • account preferences;
  • saved billing and delivery addresses;
  • previous orders;
  • reorder information;
  • and information relating to previously supplied artwork or logos.
Passwords are stored in hashed form and we do not have access to your password in readable form.

3.3 Order and transaction information

When you place an order, we may collect:
  • products ordered;
  • garment colours, sizes, fits and quantities;
  • customisation method;
  • branding positions;
  • custom text, names, initials or job titles;
  • uploaded logos or artwork;
  • artwork notes or instructions you provide;
  • digitisation information;
  • packing instructions;
  • any special packing instructions you provide;
  • order value;
  • VAT;
  • delivery method;
  • discounts;
  • payment status;
  • order history;
  • proof and artwork approval communications;
  • and information required to fulfil the order.

3.4 Artwork and customisation files

Where you upload or otherwise provide artwork, we may collect and store:
  • company logos;
  • crests;
  • designs;
  • image files;
  • PDF files;
  • AI or EPS artwork;
  • text, names, initials, numbers or job titles;
  • artwork notes, including information about preferred size, colours, positioning or other preparation requirements;
  • file names;
  • file type;
  • and information linking the artwork to your order or customer account.
Please do not include unnecessary personal, confidential or sensitive information in uploaded artwork or artwork notes.

3.5 Quote and enquiry information

When you request a quote or contact us, we may collect:
  • your name and company name;
  • email address and telephone number;
  • estimated quantities;
  • products required;
  • branding requirements;
  • decoration method;
  • branding positions;
  • delivery location;
  • requested delivery date;
  • uploaded artwork;
  • and any information included in your enquiry.

3.6 Payment information

Where online payments are enabled, payments are processed through Stripe. Depending on the payment options enabled and the customer’s device, payment methods such as Apple Pay or other supported wallet methods may also be offered through Stripe. We may receive limited transaction information such as:
  • payment status;
  • payment amount;
  • transaction reference;
  • payment method type;
  • billing details;
  • and fraud or verification results.
We do not store full payment-card numbers on our website where payment details are submitted directly to the payment provider.

3.7 Delivery information

We may collect information needed to deliver orders, including:
  • recipient name;
  • delivery address;
  • telephone number;
  • delivery instructions;
  • Eircode;
  • courier tracking information;
  • selected shipping method;
  • packing instructions;
  • and any other delivery information you provide.

3.8 Communications

We may retain communications sent by email, telephone, contact forms or other channels, including:
  • enquiries;
  • quote discussions;
  • order instructions;
  • complaints;
  • support requests;
  • artwork approvals;
  • proof approvals;
  • and delivery correspondence.

3.9 Technical and usage information

When you use our website, we may collect technical information such as:
  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • website pages viewed;
  • referral source;
  • date and time of visits;
  • website interactions;
  • cookie identifiers;
  • login and security information;
  • and error or diagnostic information.
Some of this information is collected using cookies or similar technologies. Further information is provided in our Cookie Policy.

3.10 Marketing preferences

Where applicable, we may collect:
  • whether you have opted into marketing;
  • the date and method of consent;
  • preferred communication channels;
  • email engagement information;
  • and unsubscribe or objection records.

4. How We Collect Personal Data

We may collect personal data:
  • directly from you when you place an order, create an account, submit a form, upload artwork or contact us;
  • automatically when you use our website;
  • from payment providers;
  • from delivery or courier providers;
  • from your employer, colleague or organisation where they place an order on your behalf;
  • from a person who provides your details as the delivery recipient or contact person;
  • from service providers supporting our website and business systems;
  • and from publicly available business sources where appropriate.
Where another person provides us with your details, they should ensure they are authorised to do so and that you have been informed about this Privacy Policy.

5. How and Why We Use Personal Data

We only use personal data where we have an appropriate legal basis. The main legal bases relevant to this business are performance of a contract, taking steps before entering a contract, compliance with legal obligations, legitimate interests and consent.

5.1 To respond to enquiries and prepare quotations

We use your details to:
  • understand your requirements;
  • communicate with you;
  • review uploaded artwork;
  • calculate pricing;
  • prepare quotations;
  • and answer questions.
Legal basis: Taking steps at your request before entering into a contract, and our legitimate interests in responding to business enquiries.

5.2 To process and fulfil orders

We use personal data to:
  • process your order;
  • calculate product and customisation pricing;
  • collect payment;
  • arrange embroidery, printing or other garment customisation work;
  • prepare proofs;
  • communicate about production;
  • prepare and pack garments in accordance with selected packing instructions;
  • deliver products;
  • and provide customer service.
Legal basis: Performance of a contract.

5.3 To manage artwork, digitisation and repeat orders

We may use artwork and previous order information to:
  • prepare products;
  • identify whether digitisation has already been completed;
  • avoid charging repeat digitisation fees where appropriate;
  • process repeat orders;
  • and confirm which logo or design should be used.
Legal basis: Performance of a contract and our legitimate interests in providing an efficient repeat-order service. A selection such as “Use previously supplied logo” does not necessarily provide an automated customer-side logo library. Our staff may manually match the request with a previous order or artwork reference.

5.4 To manage customer accounts

We use account data to:
  • create and administer accounts;
  • display order history;
  • support repeat ordering;
  • maintain account security;
  • and store account preferences.
Legal basis: Performance of a contract and legitimate interests in managing customer relationships.

5.5 To process payments and prevent fraud

We may use personal data to:
  • process or verify payments;
  • detect suspicious transactions;
  • prevent fraud;
  • protect customer accounts;
  • and manage refunds or payment disputes.
Legal basis: Performance of a contract, compliance with legal obligations and legitimate interests in protecting our business and customers.

5.6 To deliver orders

We use delivery details to:
  • calculate delivery options;
  • arrange delivery;
  • share necessary details with couriers;
  • provide tracking information where available;
  • and resolve delivery issues.
Orders may be delivered by An Post or personally by our team, depending on the order and delivery location. Legal basis: Performance of a contract.

5.7 To maintain accounting and legal records

We may retain order, invoice, payment and communication records to:
  • maintain business and accounting records;
  • prepare tax and VAT returns where applicable;
  • respond to audits;
  • handle disputes;
  • and comply with legal obligations.
Legal basis: Compliance with legal obligations and legitimate interests in maintaining appropriate business records. Irish Revenue generally requires relevant business and tax records to be retained for six years.

5.8 To improve and secure our website

We may use technical information to:
  • operate and maintain the website;
  • troubleshoot faults;
  • improve usability;
  • measure website performance;
  • prevent misuse;
  • detect attacks;
  • and maintain security.
Legal basis: Legitimate interests in operating a secure, effective website. Where non-essential cookies or analytics require consent, we rely on consent.

5.9 To send service communications

We may send communications relating to:
  • quotes;
  • orders;
  • account security;
  • proofs;
  • payments;
  • production;
  • delivery;
  • complaints;
  • and changes affecting a service you use.
These communications are not marketing and may be necessary to fulfil your order or respond to your request. Legal basis: Performance of a contract, taking steps before entering a contract, and legitimate interests.

5.10 To send marketing communications

Where permitted, we may send information about products, offers or services. We will rely on:
  • your consent; or
  • a lawful existing-customer exception where its conditions are met.
Marketing consent is separate from accepting this Privacy Policy. Marketing checkboxes will be optional and will not be pre-selected. You can unsubscribe at any time by using the unsubscribe link in an email or contacting us. The general rule in Ireland is that electronic direct marketing requires clear affirmative consent, subject to a limited existing-customer exception.

5.11 To establish, exercise or defend legal claims

We may use or retain relevant information where necessary to:
  • resolve complaints;
  • recover debts;
  • respond to disputes;
  • enforce our terms;
  • and establish, exercise or defend legal claims.
Legal basis: Legitimate interests and, where applicable, compliance with legal obligations.

6. Where We Need Personal Data

Some information is necessary for us to provide a quotation, process an order or meet legal obligations. Where a required field is not completed, we may be unable to:
  • provide an accurate quote;
  • process an order;
  • take payment;
  • deliver goods;
  • create an account;
  • or respond fully to your request.
Optional fields, including optional artwork notes where applicable, will be identified accordingly.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies for:
  • essential website functions;
  • account login;
  • basket and checkout operation;
  • security;
  • customer preferences;
  • analytics;
  • embedded content;
  • and marketing, where applicable.
Strictly necessary cookies may operate without consent where they are required to provide the website or service requested. Non-essential analytics, advertising or similar cookies will only be activated where required consent has been obtained. Details of the cookies used, their providers, purposes and durations are provided in our separate Cookie Policy. Where cookies or similar technologies involve processing personal data, relevant data-protection information is also provided.

8. Who We Share Personal Data With

We may share personal data only where necessary with appropriate recipients, including the following.

8.1 Website, hosting and technical support providers

Providers that host, maintain, secure, back up or support our website and database may process limited personal data where necessary to provide those services.

8.2 Payment providers

Providers that process card or online payments. Provider: Stripe Payment methods such as Apple Pay may be made available through Stripe where enabled.

8.3 Email and communication providers

Providers used to send order notifications, quotations, transactional emails or customer communications. Provider: Microsoft, including Microsoft 365 and Outlook where used.

8.4 Delivery and courier providers

Delivery companies may receive the recipient’s name, address, Eircode, telephone number and delivery instructions where necessary to deliver an order. Provider: An Post, where applicable. Some orders may instead be delivered personally by our team.

8.5 Production and fulfilment partners

Where necessary, information may be provided to embroidery, printing, garment supply or fulfilment partners. Only the information reasonably required to complete the work will be shared.

8.6 IT, security and support providers

Service providers may process limited data when supporting website operation, backups, cybersecurity, maintenance or technical troubleshooting.

8.7 Analytics and cookie providers

Where enabled and consented to, analytics or advertising providers may receive online identifiers and usage information. Provider: Google Analytics, where enabled.

8.8 Professional advisers

We may share relevant information with:
  • accountants;
  • legal advisers;
  • insurers;
  • auditors;
  • debt recovery providers;
  • and other professional advisers.

8.9 Public authorities

We may disclose information where required by law, court order, Revenue, An Garda Síochána, regulatory authorities or another body with lawful authority.

8.10 Business changes

If the business is sold, reorganised or transferred, relevant personal data may be disclosed to advisers and prospective or actual purchasers, subject to appropriate confidentiality and data-protection measures. We do not sell personal data to advertisers or unrelated third parties.

9. International Transfers

Some service providers may process personal data outside Ireland or the European Economic Area. Where personal data is transferred outside the EEA, we will take appropriate steps intended to ensure an adequate level of protection, which may include:
  • transferring data to a country covered by an adequacy decision;
  • using approved Standard Contractual Clauses;
  • applying additional safeguards where appropriate;
  • relying on an applicable recognised data-transfer framework;
  • or relying on another lawful transfer mechanism.
Further information about relevant safeguards may be requested by contacting us.

10. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, operational and dispute-resolution requirements. The GDPR storage-limitation principle requires personal data to be deleted or securely disposed of when it is no longer needed. Our retention schedule is as follows.

Orders, invoices and accounting records

Normally retained for six years from the end of the relevant accounting period, or longer where an audit, investigation, dispute or legal obligation requires it.

Quote requests that do not become orders

Normally retained for 24 months after the last meaningful contact.

General enquiries

Normally retained for 24 months after the enquiry is closed, unless a longer period is needed for a dispute or ongoing business relationship.

Customer accounts

Retained while the account remains active and for 24 months after closure or prolonged inactivity, except where order, accounting or other records must be retained longer.

Uploaded artwork and logos

Retained while needed to:
  • prepare or fulfil an order;
  • support proof approval;
  • handle complaints;
  • or facilitate agreed repeat ordering.
Uploaded artwork and logos will normally be retained for 24 months after the last order using the relevant artwork or logo. Customers may ask us to delete artwork that is no longer required, subject to legal, contractual or dispute-related retention requirements.

Proofs and production files

Normally retained for 24 months after completion unless required longer to support repeat orders, complaints or legal claims.

Marketing data

Retained until you unsubscribe, withdraw consent or object. We may keep a minimal suppression record to ensure we do not send further marketing after an opt-out.

Website security logs

Security and technical logs are retained only for as long as reasonably necessary for website security, troubleshooting, fraud prevention, incident investigation and protection of legal rights. Retention periods may vary depending on the type of log and the service provider involved.

Cookie information

Retained for the periods shown in the Cookie Policy. We review retention periods periodically and securely delete information that is no longer required.

11. Data Security

We use reasonable technical and organisational measures intended to protect personal data against:
  • accidental loss;
  • unauthorised access;
  • misuse;
  • alteration;
  • disclosure;
  • or destruction.
Measures may include:
  • access controls;
  • password protection;
  • encryption in transit;
  • website security monitoring;
  • backups;
  • software updates;
  • restricted administrative access;
  • and staff or contractor confidentiality obligations.
Data-protection principles require appropriate security and confidentiality measures. No website, email system or internet transmission can be guaranteed to be completely secure. Customers should avoid sending unnecessary sensitive information by email or upload. Where a personal-data breach creates a legally reportable risk, the appropriate regulator and, where required, affected individuals will be notified in accordance with applicable law.

12. Your Data Protection Rights

Subject to legal conditions and exceptions, you may have the following rights.

Be informed

You have the right to clear information about how your personal data is used.

Access your personal data

You may request confirmation of whether we process your personal data and obtain a copy.

Correct inaccurate information

You may ask us to correct inaccurate or incomplete personal data.

Request deletion

You may ask us to delete personal data where there is no continuing lawful reason to retain it.

Restrict processing

You may ask us to limit how personal data is used in certain circumstances.

Data portability

Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format.

Object to processing

You may object to processing based on legitimate interests in certain circumstances. You have an absolute right to object to personal data being used for direct marketing.

Withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place lawfully before consent was withdrawn.

Rights relating to automated decisions

You have rights relating to decisions based solely on automated processing where those decisions produce legal or similarly significant effects. We do not currently make decisions producing legal or similarly significant effects based solely on automated processing. These rights are established under the GDPR, although individual rights may be subject to conditions and exceptions.

13. How to Exercise Your Rights

To exercise a data-protection right, contact: Email: info@mycustomclothing.ie Post: MyCustomClothing.ie [CONFIRMED BUSINESS ADDRESS TO BE INSERTED] Please describe:
  • the right you wish to exercise;
  • the personal data involved;
  • and any information that will help us identify the relevant records.
We may need to verify your identity before releasing or changing personal data. Requests will normally be handled without charge. A reasonable fee may be permitted where a request is manifestly unfounded, excessive or repetitive, or where additional copies are requested, to the extent permitted by law.

14. Complaints

We encourage you to contact us first so that we can try to address your concern. You also have the right to raise a concern with the Irish Data Protection Commission. Data Protection Commission 6 Pembroke Row Dublin 2 D02 X963 Ireland Email: info@dataprotection.ie Complaints and concerns can also be submitted through the Data Protection Commission’s online contact process.

15. Direct Marketing

We will not use a quote request, order form or customer account as automatic agreement to receive unrelated marketing. Where marketing consent is requested:
  • it will be separate from other terms;
  • it will be optional;
  • the checkbox will not be pre-selected;
  • and you can withdraw consent at any time.
Service emails concerning an active quote, order, payment, proof, delivery or account are not marketing communications.

16. Third-Party Links and Embedded Content

Our website may contain links to third-party websites or embedded content. Those third parties may collect information under their own privacy policies. We are not responsible for how an independent third party processes personal data. You should review the privacy information provided by the relevant third party.

17. Social Media

If you interact with us through a social-media platform, both we and the platform may process information relating to that interaction. The platform’s processing is governed by its own privacy terms. Please avoid posting private order, payment or artwork information publicly on social media.

18. Children’s Data

Our website and services are intended primarily for businesses and adult customers. We do not knowingly seek to collect personal data from children through customer accounts, quote forms or online orders. If you believe a child has supplied personal data without appropriate authority, contact us so we can review and, where appropriate, delete it.

19. Special Category and Sensitive Data

We do not ask customers to provide special-category personal data, such as health, biometric, religious or political information. Please do not include such information in:
  • artwork;
  • artwork notes;
  • custom text;
  • quote forms;
  • packing instructions;
  • delivery instructions;
  • or general correspondence,
unless it is genuinely necessary and has been agreed with us in advance.

20. Automated Processing and Profiling

We may use automated website functions to:
  • calculate product prices;
  • calculate quantity discounts;
  • determine shipping options;
  • calculate VAT where applicable;
  • apply digitisation rules;
  • prevent checkout for quote-only requirements;
  • or detect potentially fraudulent activity.
These operational calculations do not currently constitute solely automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

21. Changes to This Privacy Policy

We may update this Privacy Policy when:
  • our website or services change;
  • we introduce new providers;
  • legal requirements change;
  • or our processing activities change.
The latest version will be published on this page with the updated date. Where a change is significant, we may provide an additional notice through the website, customer account or email where appropriate.

22. Contact Us

Questions, requests or complaints relating to privacy can be sent to: Sam Gibson trading as MyCustomClothing.ie [CONFIRMED BUSINESS ADDRESS TO BE INSERTED] Email: info@mycustomclothing.ie Telephone: 087 783 0020