Privacy policy
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from theheadplan.com (the “Site”).
Personal Information We Collect
When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we collect information about individual web pages or products you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information”.
We collect Device Information using technologies such as:
-
“Cookies” (data files placed on your device or computer, often including a unique identifier).
-
“Log files” (track actions occurring on the Site, collecting IP address, browser type, ISP, referring/exit pages, and timestamps).
-
“Web beacons”, “tags”, and “pixels” (electronic files used to record information about browsing the Site).
When you make a purchase or attempt to do so, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers or other payment details), email address, and phone number. This is “Order Information”.
When we talk about “Personal Information” in this Privacy Policy, we mean both Device Information and Order Information.
How Do We Use Your Personal Information?
We use Order Information to:
-
Fulfil orders placed through the Site (including processing payment, arranging shipping, providing invoices/order confirmations).
-
Communicate with you.
-
Screen orders for potential risk or fraud.
-
When in line with preferences you have shared, provide you with information or advertising relating to our products or services.
We use Device Information to:
-
Help screen for potential risk and fraud (especially IP address).
-
Improve and optimise our Site (e.g., generating analytics about customer browsing and to assess marketing campaign performance).
Lawful Bases for Processing
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following lawful bases:
-
Your consent.
-
The performance of the contract between you and us.
-
Compliance with our legal obligations.
-
Our legitimate interests, which do not override your fundamental rights and freedoms.
Sharing Your Personal Information
We share your Personal Information with third parties to help us use your information as described above. For example:
-
Shopify, to power our online store (Shopify Privacy Policy).
-
Google Analytics, to help us understand customer use of the Site (Google Privacy Policy).
Opt out here: Google Analytics Opt-out.
We may also share your information:
-
To comply with laws and regulations.
-
To respond to subpoenas, search warrants, or lawful requests for information.
-
To protect our rights.
Behavioural Advertising
As described above, we may use your Personal Information to provide you with targeted advertisements or marketing communications.
You can learn more about targeted advertising and opt-out at:
Do Not Track
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
International Transfers
Your information may be transferred outside your country, including to Canada and the United States. Shopify (our processor) and our partners use safeguards such as Standard Contractual Clauses for such transfers.
Your Rights
If you are a resident of the EEA, UK, or Switzerland, you have the right to:
-
Access the personal information we hold about you.
-
Request correction, update, or deletion of your information.
-
Object to or restrict our processing of your data.
-
Request portability of your data.
-
Withdraw consent at any time (where processing is based on consent).
-
Lodge a complaint with your local data protection authority.
To exercise your rights, please contact us using the information below.
Automated Decision-Making
We may use automated decision-making (e.g., fraud prevention screening). You have the right to contest any such decisions.
Children’s Data
We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us for deletion.
Data Retention
When you place an order, we maintain your Order Information for our records unless and until you ask us to delete this information.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal/regulatory reasons.
Contact Us
For more information about our privacy practices, or to make a request or complaint, please contact us at:
Email: hello@theheadplan.com
Post: [Re: Privacy Compliance Officer]
The Head Plan, 12B Albert College Park, Glasnevin, Dublin, D09E5W8, Ireland


