Privacy Policy
Privacy Policy
Puca Coffee
Last updated: March 2026
1. Who We Are
This website is operated by:
Puca Italian Essence Ltd.
Trading as Puca Coffee
Address:
Kellystown Road
Sandyford
Dublin
Ireland
VAT Number: IE4416111PH
Email: info@pucacoffee.ie
Website: www.pucacoffee.ie
For the purposes of the General Data Protection Regulation (GDPR), Puca Italian Essence Ltd. is the Data Controller of your personal data.
We are committed to protecting your privacy and handling your personal information transparently, securely, and in accordance with GDPR and Irish data protection law.
2. What Personal Data We Collect
We collect personal data depending on how you interact with our website.
Orders (WooCommerce)
When you place an order we collect:
• Name
• Billing address
• Shipping address
• Email address
• Phone number
• Order details
• Payment information (processed securely by payment providers)
We do not store full credit card details.
Contact Forms (Contact Form 7)
When you contact us through our forms we may collect:
• Name
• Email address
• Phone number (if provided)
• Order information (if provided)
• Machine model or serial number (for support)
• Message content
This information is used only to respond to your enquiry.
Customer Support & CRM (Jetpack CRM)
Customer information may be stored in our customer relationship management system for:
• order history
• customer support
• warranty support
• service enquiries
Live Chat (3CX)
If you use live chat on our website we may collect:
• Name (if provided)
• Email address (if provided)
• Chat messages
• Technical information about your device
Chat conversations may be stored for support and quality purposes.
Newsletter (Brevo)
If you subscribe to our newsletter we collect:
• Name
• Email address
• Marketing preferences
We may track interactions such as email opens or clicks to improve communications.
You may unsubscribe at any time by clicking the unsubscribe link in any email.
Technical Information
When visiting our website we may automatically collect:
• IP address
• Browser type
• Device information
• Website usage data
• Cookies
3. How We Use Your Data
We use your personal data for the following purposes:
• Processing orders and payments
• Delivering products
• Providing customer service and support
• Managing product warranties
• Responding to enquiries
• Sending order confirmations and updates
• Sending newsletters where consent is provided
• Improving our website and services
• Fraud prevention and security
• Legal and tax compliance
4. Legal Basis for Processing
Under GDPR we rely on the following legal bases:
Contractual necessity
Processing your data to fulfil your order.
Legal obligations
Compliance with tax, accounting, and consumer protection laws.
Legitimate interests
Improving our services, managing customer relationships, and preventing fraud.
Consent
Sending marketing emails and newsletters.
5. Payment Processing
Payments on this website are processed securely by trusted payment providers including:
• WooPayments
• Square
• Stripe (used by WooPayments)
We do not store full credit or debit card details on our servers.
These payment providers process your data according to their own privacy policies.
6. Email Communications
Emails sent from our website may be processed using:
• WP Mail SMTP
• Our hosting provider’s email systems
We retain email communications where necessary for customer support and business records.
7. Data Sharing
We may share your data with trusted third parties including:
• Payment providers (WooPayments, Square, Stripe)
• Courier and shipping companies delivering orders
• Website hosting providers
• Email marketing providers (Brevo)
• Customer support tools
• IT and website maintenance providers
We do not sell your personal data.
8. International Data Transfers
Some service providers may process data outside the European Economic Area.
Where this occurs, appropriate safeguards such as Standard Contractual Clauses approved by the European Commission are used to ensure GDPR compliance.
9. Data Retention
We retain personal data only as long as necessary.
Typical retention periods include:
Order records: up to 7 years (tax requirements)
Customer enquiries: up to 24 months
Newsletter data: until you unsubscribe
Chat support records: as required for customer service
10. Your Rights Under GDPR
You have the right to:
• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the Irish Data Protection Commission
Requests can be sent to:
11. Security
We implement appropriate security measures including:
• SSL encryption
• Secure hosting
• Secure payment gateways
• Limited access to customer data
• Password protected systems
While we take reasonable precautions, no internet transmission is completely secure.
12. Children
Our products are not directed toward individuals under the age of 16 and we do not knowingly collect personal data from children.
13. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.