Who we are
PopiD is an Irish print, ID card and event supplier. In data protection terms we are the data controller for the information described in this policy.
- Unit K1, 17 Rathfarnham Rd, Terenure, Dublin 6W, Co. Dublin, D6W X921
- Company Registration Number 755358
- VAT Registration IE4250598DH
We do not publish an email address on this page. The quickest way to reach us about anything in this policy — including a request to see or delete your data — is our contact form.
What we collect
Information you give us
When you fill in our contact form or request a quote, we collect:
- Your name and, if you give it, your company name
- Your email address and phone number
- The subject and content of your message
- Any artwork file you upload with your enquiry
- How you heard about us, if you tick one of the options
Please only send us what we need to quote for your job. There is no reason to include special category information (health, political opinions and so on) in an enquiry, and we would ask you not to.
Information we collect automatically
- Standard server and security logs from our hosting and network provider — your IP address, browser type, the pages requested and the time of the request.
- Anonymous usage statistics: which pages are viewed, roughly where in the world visitors are, and which site referred you.
Orders placed through our shop pages
Some of our off-the-shelf products are stocked by our sister company, identity.ie. When you choose to check out, we hand you over to a secure checkout hosted by identity.ie on Shopify. Your name, delivery address and payment details are entered there and are handled under identity.ie's own privacy policy — we never see or store your card details.
Why we use it, and our legal basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Reply to your enquiry and prepare a quote | Steps taken at your request before entering a contract |
| Produce and deliver an order you have placed | Performance of a contract |
| Keep records for accounting and tax | Legal obligation |
| Protect the site from spam and abuse | Legitimate interests — keeping our systems secure and usable |
| Understand how the site is used so we can improve it | Legitimate interests, or your consent where cookies require it |
We do not sell your personal data, and we do not add you to a marketing list simply because you asked us for a quote.
Cookies and similar technologies
A cookie is a small file a site stores in your browser. We use as few as we can get away with:
| Cookie | What it's for | Type | Lifetime |
|---|---|---|---|
theme | Remembers whether you switched the site to the light colour theme. | Strictly necessary (functional) | 30 days |
cf_* / Cloudflare Turnstile | Security and anti-spam checks on our forms, plus protection against abusive traffic. | Strictly necessary | Session to 30 minutes |
_ga, _ga_* | Google Analytics — counts visits and shows us which pages are useful. We do not use it to identify you. | Analytics | Up to 2 years |
We use Google Analytics with IP addresses truncated, and we may use Google Ads conversion measurement to see which adverts led to an enquiry. You can block or delete cookies in your browser settings, or install Google's opt-out add-on. Blocking analytics cookies will not stop the site working.
Who we share it with
We share personal data only with service providers who process it on our instructions under a data processing agreement, and with professional advisers or authorities where the law requires it. Our main processors are:
- Cloudflare — website hosting, content delivery, and the anti-spam check on our forms
- Resend — delivers your enquiry to us by email
- Microsoft 365 — the mailbox that receives and stores enquiries
- Google — website analytics and advertising measurement
- Storyblok — the content management system behind our pages (it holds our content, not your enquiries)
- Shopify / identity.ie — checkout and order processing for off-the-shelf products
Transfers outside the EEA
Some of the providers above are based in, or use infrastructure in, the United States. Where personal data leaves the European Economic Area we rely on the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider is certified, or another safeguard permitted under Chapter V of the GDPR.
How long we keep it
- Enquiries that don't turn into an order — up to 24 months, then deleted.
- Customer and order records — 7 years, because Irish tax law requires it.
- Artwork files — kept while we may reasonably need to reprint, then deleted on request.
- Server and security logs — typically 30 days.
- Analytics data — retained in aggregate, generally for no more than 14 months.
How we protect it
The whole site is served over HTTPS. Enquiry forms are protected by a bot check, file uploads are size- and type-limited and inspected before we accept them, and access to the mailbox holding enquiries is restricted to staff who need it. No system is perfect, but if a breach ever affects your rights we will notify you and the Data Protection Commission as required.
Your rights
Under the GDPR you can ask us to:
- Access — give you a copy of the personal data we hold about you
- Rectify — correct anything that's wrong or out of date
- Erase — delete your data where we have no ongoing need for it
- Restrict or object — pause or stop a particular use, including anything based on our legitimate interests
- Port — receive your data in a portable format
- Withdraw consent — where we relied on consent, at any time
Send any of these requests through our contact form and we will respond within one month. There is no charge. We may ask a question or two to confirm it's really you before releasing anything.
If you're unhappy with how we've handled your data you can complain to the Irish supervisory authority, the Data Protection Commission — dataprotection.ie, 6 Pembroke Row, Dublin 2, D02 X963. We'd appreciate the chance to put it right first.
Children
This is a business-to-business site and is not aimed at children. We don't knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us through the contact form and we'll remove it.
Other sites we link to
Our pages link to identity.ie and to other third-party sites. Once you follow a link, this policy no longer applies — have a look at the privacy policy of whichever site you land on.
Changes to this policy
We'll update this page when what we do with data changes, and we'll move the "last updated" date at the top. If a change materially affects you, we'll flag it more prominently than a date change.
How to contact us
For any privacy question, a data request, or a complaint, use our contact form and put "Privacy" in the subject line — that routes it to the right person. You can also write to us at the postal address at the top of this page.