Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains how Glass Bag Recycling Ltd, trading as GlassBag, collects and uses personal data when you visit glassbag.ie, buy from us, subscribe to our glass collection service, contact support, or otherwise interact with us.

Who we are

Glass Bag Recycling Ltd is the data controller for the personal data described in this policy.

• Company number: 669725
• Registered address: 35 Ashford Street, Dublin 7, D07 N8F8, Ireland
• Email: info@glassbag.ie
• Phone: 086 871 9777
• Waste collection permit: NWCPO-25-13230-01

Personal data we collect

Depending on how you use GlassBag, we may collect:

• Identity and contact details: name, email address, phone number, billing address, collection address and Eircode.
• Order and subscription details: plan, purchase history, subscription status, collection preferences, bag quantities, support requests and account activity.
• Collection and route information: service area, route notes, collection confirmations, missed-collection reports and operational notes needed to provide the service.
• Payment information: payment status, transaction references and billing history. Full card details are handled by our payment processors and are not stored by GlassBag.
• Technical and usage data: IP address, browser/device information, cookie identifiers, pages viewed, site interactions and checkout diagnostics.
• Marketing and communications data: email/SMS preferences, consent records, campaign interactions, reviews, survey responses and messages with our team.

How we collect data

We collect data directly from you when you place an order, create or manage an account, subscribe, contact us, leave a review or use our website. We also receive data from service providers that help operate the store, subscriptions, payments, analytics, advertising, customer support, email/SMS notifications and route planning.

Why we use personal data and our legal bases

Purpose	Legal basis
Process orders, payments, subscriptions and account changes	Performance of a contract; legal obligation for accounting and tax records
Schedule collections, plan routes, send service updates and resolve missed collections	Performance of a contract; legitimate interests in operating an efficient collection service
Provide customer support and respond to enquiries	Performance of a contract; legitimate interests in helping customers and keeping records of support interactions
Prevent fraud, secure the website, diagnose errors and protect our business	Legitimate interests; legal obligation where applicable
Send service emails, renewal notices, account messages and operational SMS notifications	Performance of a contract; legitimate interests in providing service information
Send optional marketing emails/SMS or use non-essential cookies and pixels	Consent, where required; legitimate interests where permitted by law
Analyse site performance, improve our service and measure advertising	Consent for non-essential cookies where required; legitimate interests in understanding and improving the service
Comply with waste, company, accounting, tax, consumer protection and data protection obligations	Legal obligation

Cookies and similar technologies

We use cookies and similar technologies to run the website and checkout, remember preferences, understand site performance and, where consent is given, support advertising and analytics. You can manage non-essential cookies through the cookie banner or your browser settings. More detail is available in our Cookie Policy.

Who we share data with

We only share personal data where needed to run GlassBag, provide the service, comply with law or protect our rights. Our service providers may include:

• Shopify and Shopify-related services for the online store, checkout, order management and payments.
• ReCharge for subscription management and recurring billing.
• Payment processors such as Shopify Payments and Stripe for card processing and fraud checks.
• Route-planning and operational tools, including SmartRoutes, for collection scheduling and delivery/collection updates.
• Email, SMS and customer communication providers, including Google Workspace, Resend, SendGrid and Twilio where used.
• Website, database and hosting providers, including Vercel and Supabase.
• Analytics, cookie-consent, advertising and review providers, including Google, Meta, Pandectes and Loox where enabled.
• Professional advisers, insurers, regulators, public authorities or law enforcement where required or appropriate.

Where a provider acts as our processor, we require it to process personal data only for our instructions and to apply appropriate safeguards.

International transfers

Some providers may process personal data outside Ireland or the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses or other transfer mechanisms permitted by data protection law.

How long we keep data

We keep personal data only for as long as needed for the purpose collected, including service delivery, support, legal, accounting and dispute-resolution purposes. As a guide:

• Account, order, subscription and collection records are kept while your account or subscription is active.
• Core transaction, accounting and tax records are normally kept for up to 7 years after the relevant transaction or account closure.
• Customer support records are normally kept for up to 24 months unless needed for an active issue, claim or legal obligation.
• Marketing consent and suppression records are kept while relevant, including records needed to respect unsubscribes.
• Cookie and analytics data is kept according to the settings of the relevant tools and is often aggregated or anonymised for reporting.

Your rights

Subject to the limits set out in data protection law, you may have the right to request access to your personal data, correction, deletion, restriction, portability, objection to certain processing and withdrawal of consent where processing is based on consent. You also have the right to object to direct marketing at any time.

To exercise your rights, contact us at info@glassbag.ie. We may need to verify your identity before responding. You also have the right to complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, or through dataprotection.ie.

Marketing choices

You can unsubscribe from marketing emails using the unsubscribe link in the email. You can opt out of marketing SMS by following the instructions in the message or contacting us. Service messages about your account, payment, renewal or collection may still be sent where needed to provide the service.

Security

We use administrative, technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorised access, disclosure or alteration. No online service can be guaranteed to be completely secure, but we work to keep our systems and providers under regular review.

Children

GlassBag is not directed at children and we do not knowingly collect personal data from children for the purpose of providing the service.

Automated decision-making

We do not use personal data to make decisions that produce legal or similarly significant effects by solely automated means. We may use automated tools to support routing, fraud checks, service reminders and marketing measurement.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on glassbag.ie with the date of the latest update.