Privacy Policy

Last Updated: 13/10/2025

This Privacy Policy describes how Carpet Express Ltd (“we”, “us”, “our” or the “Site”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://www.carpetexpress.ie (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” mean the user of the Services, whether a customer, website visitor, or another individual whose personal data we process in connection with this policy.

Please read this Privacy Policy carefully.

1. Data Controller

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), Carpet Express Ltd, located at 74 Navan Road, Cabra West, Dublin 7, D07 NX62, is the data controller of your personal information.

If you have any questions about this Privacy Policy or our data practices, you can contact us at:
Email: info@carpetexpress.ie
Phone: 018579838

Our Data Protection Officer can be contacted at: info@carpetexpress.ie

2. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. The updated version will be posted on this page, with the “Last updated” date revised accordingly.

3. Personal Information We Collect

We collect personal information that you provide directly to us, information automatically collected about your use of our Services, and information obtained from third parties.

A. Information You Provide Directly

Contact details: name, address, phone number, email.
Order details: billing and shipping address, payment confirmation, products purchased.
Account information: username, password, and related credentials.
Shopping information: wishlists, cart contents, loyalty points, reviews, gift cards.
Customer support messages and inquiries.

You may choose not to provide certain information, but this may limit your ability to use particular features.

B. Information Collected Automatically

We collect information about how you interact with our Site (“Usage Data”), including:

Device type, browser, and operating system.
IP address and location derived from it.
Pages viewed, links clicked, and referring URL.

We collect this data using cookies, pixels, and similar tracking technologies (“Cookies”).

For information on the cookies we use, see our Cookies section below.

C. Information from Third Parties

We may receive information from:

Service providers (e.g., hosting, e-commerce, and analytics platforms).
Payment processors, to process payments securely.
Marketing partners, to deliver targeted advertising.

All third parties are required to handle your personal information in accordance with data protection laws.

4. Legal Bases for Processing

We rely on one or more of the following legal bases for processing your personal data:

Purpose of Processing

Legal Basis under GDPR

Providing and managing your account, fulfilling orders

Performance of a contract (Art. 6(1)(b))

Customer support and communications

Legitimate interests (Art. 6(1)(f))

Marketing and promotional communications

Consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f))

Fraud prevention and site security

Legitimate interests (Art. 6(1)(f))

Legal compliance (e.g., tax, accounting)

Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, we have conducted a balancing test to ensure that your rights are not overridden by our interests.

You have the right to object to processing based on legitimate interests at any time.

5. How We Use Your Personal Information

We use your personal information to:

Provide, personalise, and improve the Services.
Process and fulfill your orders.
Manage your account and preferences.
Send you service-related communications (e.g., order confirmations).
Send marketing materials (where permitted).
Detect, prevent, and investigate fraud or security incidents.
Comply with our legal obligations.
Improve our products, services, and user experience.

6. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects.
If this changes, we will update this Privacy Policy to explain the logic, significance, and consequences of such processing.

7. Cookies

We use Cookies and similar technologies to:

Operate and secure the Site.
Analyse usage patterns to improve performance.
Personalise content and advertising.

You can manage or disable cookies via your browser settings. However, doing so may affect your user experience or restrict access to some features.

See our Cookie Policy for full details.

8. How We Share Your Personal Information

We may share your information:

With service providers and vendors performing services on our behalf (e.g., IT, payment, delivery, analytics).
With affiliates or subsidiaries.
With business and marketing partners (subject to your consent, where required).
In connection with a merger, acquisition, or sale.
To comply with legal obligations or protect our rights.

We do not sell your personal data or share it with third parties for their own marketing purposes without consent.

9. Data Transfers Outside the EEA/UK

If we transfer your personal information outside the European Economic Area (“EEA”) or the United Kingdom, we will:

Ensure the recipient country has an adequacy decision from the European Commission; or
Use Standard Contractual Clauses (SCCs) approved by the European Commission; or
Implement other lawful safeguards.

You can request a copy of these safeguards by contacting us at info@carpetexpress.ie.

10. Data Retention

We keep your personal information only as long as necessary to:

Provide the Services;
Comply with legal and accounting obligations;
Resolve disputes; and
Enforce agreements.

We apply retention schedules per data category (e.g., account info retained for active users, financial records retained per legal requirements).

11. Security

We implement appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, alteration, or destruction.
However, no system is completely secure. Please use secure channels when communicating sensitive data.

12. Your Data Protection Rights

Under the GDPR, you have the right to:

Access your personal data.
Request correction or deletion.
Restrict or object to processing.
Request data portability.
Withdraw consent (where processing is based on consent).
Lodge a complaint with a supervisory authority (see below).

You can exercise your rights by contacting us at info@carpetexpress.ie.
We may need to verify your identity before processing your request.

13. Supervisory Authority

If you believe we have not handled your personal information properly, you may lodge a complaint with:

Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: https://www.dataprotection.ie

14. Data Breaches

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

15. Children’s Data

Our Services are not intended for children under 16. We do not knowingly collect or process personal data from minors.
If you believe a child has provided us with personal data, contact info@carpetexpress.ie to request deletion.

16. Data Protection by Design and Default

We apply data protection principles from the outset when developing systems and processes and conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities.

17. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

Carpet Express Ltd
Address: 74 Navan Road, Cabra West, Dublin 7, D07 NX62
Email: info@carpetexpress.ie
Phone: 018579838