Privacy policy

Esmark Finch Ltd (“Esmark Finch”, “we”) is the controller of personal data processed through this trade store. This notice explains what we collect, why, and your rights under the GDPR and the Irish Data Protection Act 2018.

What we collect

• Account data: work email, password (stored only as an argon2id hash), phone number.
• Business data: company name, contact name, VAT number, billing and delivery addresses, trade references.
• Order data: items, totals, delivery details and payment status. We never receive card details; payments are handled by Revolut.
• Security data: sign-in times, IP address and device information, and an audit log of account changes.

Why, and our lawful basis

• To assess and operate your trade account and fulfil orders: contract (Art. 6(1)(b)).
• To keep accounts secure (email verification codes, fraud prevention): legitimate interests (Art. 6(1)(f)).
• To keep accounting and tax records: legal obligation (Art. 6(1)(c)).
• Optional analytics: consent (Art. 6(1)(a)), which you can withdraw at any time.

Processors

We use these processors under data-processing agreements, with personal data hosted in the EU: Vercel (hosting), Microsoft Azure (database, EU region), Revolut (payments), Resend (email, including sign-in codes), and Microsoft Clarity (analytics, only with consent).

Retention

Account data is kept while your account is active and for up to 2 years after closure. Order and invoice records are kept for 6 years, as Irish tax law requires. Unapproved applications are deleted after 12 months, and sign-ups that never verify their email after 30 days.

Your rights

You can access, correct, export or erase your data, restrict or object to processing, and withdraw consent. Download your data or request erasure from your Account page, or email store@vehicleengineering.ie. You can complain to the Data Protection Commission (dataprotection.ie).