Policy
Privacy policy.
What we collect, why, who helps us handle it, and how to get it changed or deleted.
Last updated 19 October 2026
Who we are
This site is run by Jod-Z Limited (CRO 727737), Robswall, Malahide, Co. Dublin, K36 VX00. We are the controller of the personal data described here. Contact us about anything in this policy at hello@jod-z.com.
What we collect and why
| When | What | Why, and our legal basis |
|---|---|---|
| You place an order | Name, email, phone, delivery and billing address, order details. Payment details go straight to our payment providers; we never see full card numbers. | To take payment, deliver and handle returns (contract). To keep accounts for tax (legal obligation). |
| You join our email list | Email, optional first name, where you signed up and when you agreed. | To send new colours, restocks and offers (consent, withdraw any time). |
| You apply to be an ambassador | Name, email, social handle, age group; for under-16s, a parent or guardian’s name and email. | To review the application and run the programme (contract). For under-16s we only proceed with a parent or guardian’s consent. |
| You apply for a trade account | Business and contact details, VAT number. | To assess and run the trade account (contract, legitimate interest). |
| You contact us | Name, email, order number, message. | To answer you (legitimate interest). |
| You browse the site | Pages viewed, approximate country, device type, and the campaign that brought you. No cookies; the visitor ID is an anonymous hash that changes every day. | To understand what helps shoppers (legitimate interest). |
| You accept analytics or advertising cookies | Google Analytics and Meta Pixel identifiers and browsing events. | To measure the site and our ads (consent, change any time in Cookie settings). |
Children
Many of our customers are young riders, so we take care with their data. Orders are placed by an adult. To join our email list you must be 16 or over, or a parent or guardian must sign you up. Ambassador applicants under 16 need a parent or guardian to agree by email before we review or use the application; without that agreement we delete it within 30 days.
Who helps us
We share data only with providers who need it to run the shop, under contracts that require them to protect it:
- Shopify: checkout, payments, orders and customer accounts.
- Klarna and PayPal: if you choose them at checkout.
- Our delivery courier: delivery.
- Klaviyo: our email list.
- Resend: account and confirmation emails.
- Vercel and our database host: running this website.
- Cloudflare: spam protection on our forms.
- Sentry: error reports, without your name or email.
- Meta and Google: only if you accept those cookies.
Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, they rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Orders and invoices: 6 years after the end of the financial year, as Irish tax law requires.
- Email list: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days.
- Ambassador and trade records: while you take part, then 2 years.
- Messages: 2 years.
- Site analytics events: 25 months.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent you can withdraw it at any time: unsubscribe links are in every marketing email, and Cookie settings is in the footer of every page. Email hello@jod-z.com and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie.
Cookies
See our cookie policy for the full list.
Changes
If we change this policy in a way that matters, we will say so on this page and, where appropriate, by email.
