Privacy policy


Last updated: 30 September 2026

At Nightshade Books & Vinyl, we respect your privacy and take the protection of your personal information seriously.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, create an account, place an order, contact us, sign up for communications or otherwise interact with Nightshade Books & Vinyl.

This Privacy Policy should be read together with our Terms of Service, Returns & Refunds Policy and Shipping Policy.

1. Who we are

Nightshade Books & Vinyl is the data controller responsible for the personal information we collect and process in connection with our website and business.

If you have any questions about how we use your personal information, or if you wish to exercise your data protection rights, please contact us:

Nightshade Books & Vinyl
Email:

info@nightshade.ie

We are based in Ireland and are subject to applicable Irish and European data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

2. Information we collect

Depending on how you interact with us, we may collect the following information:

Information you provide to us

This may include:

  • Your name;

  • Email address;

  • Telephone number;

  • Billing address;

  • Delivery address;

  • Payment and transaction information;

  • Account information, if you create an account;

  • Information you provide when contacting us;

  • Information you provide when submitting a product review or other content; and

  • Any other information you voluntarily provide to us.

Information collected automatically

When you visit our website, certain information may be collected automatically through cookies and similar technologies.

This may include:

  • IP address;

  • Browser and device information;

  • Operating system;

  • Pages and products viewed;

  • How you interact with our website;

  • Referring website or source;

  • Approximate location derived from technical information; and

  • Information about your use of the website.

The exact information collected depends on the technologies and services enabled on our Shopify store.

3. How we collect your information

We may collect personal information:

  • Directly from you when you place an order or create an account;

  • When you contact us;

  • When you subscribe to our mailing list;

  • When you submit a review or other content;

  • Automatically when you browse or use our website;

  • Through Shopify and other service providers that help us operate our store; and

  • Where permitted by law, from other third parties that provide services to us.

4. How we use your information

We use personal information only where we have a lawful basis to do so.

Processing and fulfilling orders

We use your information to:

  • Process and fulfil your orders;

  • Take and process payments;

  • Arrange delivery;

  • Provide order confirmations and updates;

  • Handle returns, refunds and exchanges;

  • Provide customer support; and

  • Maintain records of transactions.

The primary legal basis for this processing is that it is necessary to perform our contract with you.

Running and improving our website

We may use information about how customers interact with our website to:

  • Operate and maintain the website;

  • Improve our products and services;

  • Understand how customers use our website;

  • Identify technical problems;

  • Improve the shopping experience; and

  • Maintain website security.

Depending on the circumstances, the legal basis for this processing may be legitimate interests, consent or another lawful basis under applicable data protection law.

Where cookies or similar technologies require consent, we will ask for consent before using them for those purposes.

Customer service

We use information you provide when contacting us to respond to enquiries, resolve problems and provide customer support.

The legal basis will generally be performance of a contract, where your enquiry relates to an order, or legitimate interests where appropriate.

Legal and accounting obligations

We may process and retain personal information where necessary to:

  • Comply with tax, accounting and other legal obligations;

  • Maintain appropriate business records;

  • Prevent or investigate fraud;

  • Resolve disputes;

  • Establish, exercise or defend legal claims; or

  • Respond to lawful requests from government authorities or law enforcement.

The legal basis for this processing may be legal obligation or legitimate interests, depending on the circumstances.

5. Marketing communications

If you choose to subscribe to our mailing list, we may use your email address to send you marketing communications about Nightshade Books & Vinyl, including new products, books, vinyl, events, offers and other news.

Where consent is required, we will only send marketing communications where you have provided the appropriate consent.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at

info@nightshade.ie

Unsubscribing from marketing communications will not affect service messages relating to orders you have placed, such as order confirmations, dispatch notifications or information about a return.

Where applicable, we may rely on the limited existing-customer exception under Irish electronic marketing rules, subject to the conditions and opt-out requirements that apply.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to provide functionality, remember preferences, understand how the website is used and, where applicable, support marketing and advertising.

Some cookies are necessary for the website and checkout to function and cannot be disabled through our cookie settings.

Other cookies may require your consent depending on their purpose and applicable law.

You can manage cookies through your browser settings and, where available, through the cookie controls provided on our website.

Because the specific cookies and third-party technologies used by a Shopify store can change depending on the apps and services installed, our cookie practices may be updated from time to time.

7. Who we share information with

We may share personal information with trusted service providers where necessary to operate our business and provide our services.

These may include:

  • Shopify, which provides our ecommerce platform and related services;

  • Payment providers involved in processing transactions;

  • Delivery and postal providers;

  • Technology and hosting providers;

  • Email and communications providers;

  • Accounting and financial service providers;

  • Customer service or support providers;

  • Website analytics providers; and

  • Other service providers that process information on our behalf.

We only share information where there is a lawful basis for doing so and only to the extent reasonably necessary for the relevant purpose.

We may also disclose information where required by law, to protect our legal rights, prevent fraud or respond to lawful requests from public authorities.

8. Shopify

Our online store is powered by Shopify.

Shopify processes personal information in connection with the operation of our store, including information relating to browsing, accounts, orders and payments.

Shopify may also process personal information for its own purposes as described in its privacy documentation.

You can read Shopify's privacy information here:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy

Where Shopify processes information as a service provider on our behalf, it does so in accordance with the applicable contractual and legal requirements.

9. Payment information

Payments made through our online store are processed through the payment providers made available by Shopify.

We do not ordinarily have access to your full payment card number.

Payment providers may collect and process payment information in accordance with their own privacy policies and applicable legal requirements.

We receive information necessary to confirm and administer your transaction, such as payment status, transaction details and order information.

10. International transfers

Some of the service providers we use, including Shopify and technology providers, may process or store personal information outside Ireland or the European Economic Area.

Where personal information is transferred outside the EEA, we will ensure that an appropriate legal mechanism is in place where required by applicable data protection law.

This may include an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.

11. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • Fulfil an order;

  • Provide customer support;

  • Maintain business and accounting records;

  • Comply with legal and tax obligations;

  • Resolve disputes;

  • Prevent fraud; or

  • Establish, exercise or defend legal claims.

Different types of information may therefore be retained for different periods.

When information is no longer required, we will delete it or anonymise it where reasonably practicable, subject to any legal or legitimate business requirements to retain it.

12. Your data protection rights

Under the GDPR, you may have a number of rights in relation to your personal information, including:

  • The right to access the personal information we hold about you;

  • The right to rectification of inaccurate or incomplete information;

  • The right to erasure of your personal information in certain circumstances;

  • The right to restriction of processing in certain circumstances;

  • The right to data portability in certain circumstances;

  • The right to object to certain processing, including direct marketing; and

  • The right to withdraw consent where we rely on consent as the legal basis for processing.

These rights are subject to certain legal conditions and exemptions and therefore may not apply in every situation.

The Irish Data Protection Commission confirms these rights and the circumstances in which they apply.

13. How to exercise your rights

To exercise your data protection rights, please contact us at:

info@nightshade.ie

 

Please provide enough information for us to understand your request and, where necessary, verify your identity.

We will respond to valid requests within the timeframe required by applicable data protection law.

There is generally no charge for exercising your data protection rights, although applicable law permits certain exceptions.

14. Complaints

If you have concerns about how we handle your personal information, please contact us first at:

info@nightshade.ie

 

We will do our best to resolve your concern.

You also have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority for data protection.

The DPC's website is:

https://www.dataprotection.ie/

15. Children's privacy

Our website is intended for general consumers and is not specifically directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided us with personal information unlawfully, please contact us at

info@nightshade.ie

 

so that we can investigate and take appropriate action.

 

16. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

17. Third-party websites

Our website may contain links to third-party websites, including publishers, record labels, social media platforms or other services.

If you follow a link to a third-party website, that website will have its own privacy policy and terms.

We are not responsible for the privacy practices of third-party websites that we do not control.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, the services we use, our processing activities or applicable legal requirements.

The latest version will always be available on our website.

Where appropriate, we will notify customers of significant changes in accordance with applicable law.

19. Contact us

If you have any questions about this Privacy Policy, how we use your personal information, or your data protection rights, please contact:

Nightshade Books & Vinyl
Email:

info@nightshade.ie

 

Nightshade Books & Vinyl