Privacy Policy

Last updated: March 2026

1. Who We Are

Glass Bag Recycling Ltd (trading as GlassBag / glassbag.ie) is the data controller responsible for your personal data. We are registered with the Companies Registration Office in Ireland (Company Number 669725).

Address: 35 Ashford Street, Dublin 7, D07 N8F8, Ireland
Email: info@glassbag.ie
Phone: 086 871 9777

2. What Personal Data We Collect

We collect the following personal data when you use our service or website:

Identity data: Full name
Contact data: Email address, phone number, delivery address, Eircode
Payment data: Payment card details (processed securely by Shopify Payments; we do not store card numbers)
Order data: Order history, subscription details, collection records
Technical data: IP address, browser type, device information, pages visited
Communication data: Messages sent via our chat widget, email correspondence, customer support interactions
Review data: Product reviews including name, email and review text (via Loox)

3. How We Use Your Data

We use your personal data for the following purposes:

Order fulfilment: Processing your sign-up, scheduling collections, managing your subscription
Subscription management: Recurring billing, plan changes, cancellations
Collection scheduling: Routing collections by Eircode area, sending text reminders
Customer support: Responding to queries via email, phone or chat
Marketing: Sending promotional emails and offers (only with your consent)
Website improvement: Analysing how visitors use our site to improve the experience
Legal compliance: Meeting our legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

Contract performance: Processing necessary to fulfil our service agreement with you (order processing, subscription management, collection scheduling)
Legitimate interest: Website analytics, fraud prevention, improving our service, customer support
Consent: Marketing communications, non-essential cookies and tracking. You can withdraw consent at any time.
Legal obligation: Where we are required to process data by law (e.g. tax records, financial reporting)
Contractual requirement: Providing your name, email, address and Eircode is necessary to enter into a service agreement with us. Without this information, we cannot provide our collection service.

5. Cookies and Tracking

Our website uses cookies and similar technologies to provide core functionality, analyse usage and deliver relevant advertising. For full details on the cookies we use, their purposes and how to manage them, please see our Cookie Policy.

6. Third-Party Data Processors

We share your personal data with the following third-party processors who help us deliver our service:

Processor	What They Process
Shopify	Hosts our website, processes orders, stores customer data, handles payments via Shopify Payments
ReCharge	Manages recurring subscriptions and billing
Stripe	Processes payments for legacy subscriptions
Google (Analytics, Tag Manager)	Website analytics and tag management — collects anonymised usage data
Meta (Facebook Pixel)	Advertising conversion tracking and audience building
Hotjar	Session recordings and heatmaps to understand user behaviour
Segment	Analytics data pipeline — routes analytics data to other services
Loox	Collects and displays product reviews (reviewer name, email, review text)
Limespot	Product recommendations based on browsing behaviour
Vercel	Hosts our API backend (processes chat messages, webhooks)
Supabase	Database storage for order data, email logs and webhook events
Google Workspace	Email communications
Pandectes	GDPR cookie consent management

All processors are bound by data processing agreements and process data only on our instructions. Where data is transferred outside the EEA, appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

Active customers: Data retained for the duration of your subscription or service agreement
Former customers: Core records (name, email, order history) retained for up to 7 years after your last transaction for tax and legal compliance
Marketing data: Retained until you unsubscribe or withdraw consent
Analytics data: Aggregated and anonymised data may be retained indefinitely
Chat messages: Retained for up to 12 months for customer support purposes

8. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
Right to data portability: Receive your data in a structured, commonly used format
Right to restrict processing: Request that we limit how we use your data
Right to object: Object to processing based on legitimate interest or for direct marketing
Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@glassbag.ie. We will respond within 30 days.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include:

SSL/TLS encryption on all website traffic
Secure payment processing via Shopify Payments (PCI DSS compliant)
Access controls limiting data access to authorised personnel only
Regular review of security practices

10. Children's Privacy

Our service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Our website uses cookies and analytics tools to personalise your experience and show relevant content, but these do not involve automated individual decision-making.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact us:

Glass Bag Recycling Ltd
35 Ashford Street, Dublin 7, D07 N8F8, Ireland
Email: info@glassbag.ie
Phone: 086 871 9777

14. Data Protection Commission

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Irish Data Protection Commission:

Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
Website: www.dataprotection.ie
Phone: +353 (0)1 765 0100 / 1800 437 437
Email: info@dataprotection.ie