Privacy Policy

Last updated: 12 October 2026

This Privacy Policy explains how Jacked Paddy Nutrition Limited uses personal data when you visit jackedpaddy.ie, place an order or contact us, and the rights you have under the GDPR and Irish data-protection law.

1. Data Controller

Jacked Paddy Nutrition Limited, Company Registration Number 771203, Unit 2, 4 Main Street, Swords, Co. Dublin, K67 E9V4, Ireland.

Privacy contact: support@jackedpaddy.ie, telephone +353 86 456 0533.

2. Information We May Collect

Depending on your interaction with us, this may include your name, billing and delivery addresses, email, telephone number, account details, order history, products purchased, payment status, customer-service correspondence, returns information, IP address, device and browser information, website activity, cookie identifiers, marketing preferences and relevant fraud-prevention information.

Card and wallet payments are processed by Stripe, and your card details are entered into Stripe’s payment fields. We do not receive your full card number. The specific payment information available to us depends on the payment method you use.

3. Purposes and Legal Bases

Contract: processing orders and payments, arranging delivery, maintaining requested customer accounts, communicating about orders and handling contractual returns.
Legal obligation: retaining necessary tax and accounting records and meeting applicable consumer-protection and regulatory obligations.
Legitimate interests: proportionate fraud prevention, website security, business administration, responding to enquiries and establishing, exercising or defending legal claims, where our interests are not overridden by your rights.
Consent: optional marketing where consent is required. Where a limited legal exception allows electronic marketing to existing customers, we apply its conditions and provide an opt-out.

Providing necessary order information is required to process and deliver your purchase. If you do not provide it, we may be unable to fulfil the order. Optional marketing consent is not a condition of purchase.

4. Marketing

We send marketing only where permitted by law. You can unsubscribe through the link in our emails or by contacting us. Unsubscribing does not stop essential transactional messages about an existing order. You can object to direct marketing at any time.

5. Cookies and Tracking

We have not enabled our own analytics or advertising cookies, and WooCommerce’s optional order attribution tracking is switched off. The website uses cookies for the basket, checkout and account sign-in. Payment-service scripts can load on product, basket and checkout pages, even where a payment button is not visible. Stripe, hCaptcha and Google Pay may set cookies before you choose a payment method or submit an order; their processing is described in their policies. Our Cookie Policy lists these cookies, who sets them, what they are for and how long they last. You can block or delete cookies through your browser settings.

We use the following service providers to run the shop.

Amazon Web Services (AWS): hosts the website and its database, and sends order and account emails through Amazon Simple Email Service. See the AWS Privacy Notice.
Zoho: provides our customer-service mailbox, so messages you send to support@jackedpaddy.ie and our replies are stored with Zoho. See the Zoho Privacy Policy.
Stripe: processes card and wallet payments (including Apple Pay, Google Pay and Link) and uses payment, device and browser information to detect and prevent fraud. If you pay with Apple Pay or Google Pay, Apple or Google also process your payment under their own terms. See the Stripe Privacy Policy.
hCaptcha (Intuition Machines, Inc.): a bot-protection service used by the payment integration that receives device and browser information. See the hCaptcha Privacy Policy.
Google: when the Google Pay integration loads, Google receives device and browser information and may set a cookie, even if you do not choose Google Pay. When you type into the address search at checkout, our server sends the text you type to Google’s address lookup service (Google Maps Platform) to suggest matching Irish addresses; your browser does not contact Google for this address lookup. Our pages also load the website font from Google Fonts, so Google’s font servers receive your IP address and browser information when a page loads. See the Google Privacy Policy.
DPD Ireland: delivers website orders and receives the name, delivery address, telephone number and email address needed for delivery, delivery notifications and tracking.

Where necessary and lawful, data may also be shared with accountants and other professional advisers, regulators and law-enforcement bodies. We do not sell personal data.

Service providers acting as processors handle personal data under data-processing terms for the services they provide. Payment providers may also act as independent controllers, as explained in their own notices.

7. International Transfers

Some providers listed above process data outside the European Economic Area, including in the United States. For transfers covered by a recipient’s EU-US Data Privacy Framework certification, the relevant basis is the European Commission’s adequacy decision of 10 July 2023. Where a transfer is not covered by an adequacy decision, the providers’ applicable data-processing and transfer terms use safeguards such as the European Commission’s standard contractual clauses.

Details and copies of the relevant published arrangements are available in AWS’s Data Privacy Framework information, Stripe’s Data Processing Agreement and its linked Data Transfers Addendum, Google’s transfer-framework notice, and hCaptcha’s privacy and transfer notice. Email support@jackedpaddy.ie for information about the arrangement relevant to your data or to request a copy of the applicable safeguards.

8. Data Retention

We retain data only as long as necessary for the stated purposes. Order and financial records are kept for applicable tax and accounting periods; customer-service and dispute records for the period needed to resolve the matter and meet legal requirements; security information for proportionate investigation and prevention periods; and marketing details until withdrawal or objection, subject to retaining minimal suppression records to respect your choice.

Actual retention periods depend on the record type and legal requirements. Contact us for information about the period applying to your data.

9. Your Rights

Subject to applicable conditions, you can request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent at any time without affecting the lawfulness of earlier processing. We may request proportionate information to verify identity before responding.

Email support@jackedpaddy.ie to exercise your rights. We normally respond within one month; where a lawful extension applies, we will explain it within that period.

10. Complaints

You may contact us with concerns, but you are not required to do so before complaining to the Irish Data Protection Commission. Information is available at www.dataprotection.ie.

11. Security

We use appropriate technical and organisational measures to protect personal data. No internet transmission or electronic storage system can be guaranteed completely secure.

12. Changes

The latest policy will be published on our website with its revision date. Material changes will be communicated where required.