Privacy notice

Clique & Collect respects your privacy and processes personal data in accordance with the GDPR and the Irish Data Protection Act 2018. We are the data controller for the information described here. You can reach us at shopping@cliqueandcollect.ie.

What we collect

Your name, email address, phone number, postal address and Eircode, your Auchan order references, your signature, and payment metadata — we never see or store your card number, which is handled entirely by Stripe.

We also collect a photograph of your ID document, because the procuration we present in France has to be accompanied by one. We don't ask you for your date of birth separately, but the document itself will usually show it along with other details printed on it.

Why we need it, and on what basis

• To perform our contract with you. Your name, contact details, address, order references, ID and signature are all needed to collect your order in France on your behalf and hand it to you in Ireland.
• To meet a legal obligation. Records of what you paid us are kept for the period Revenue requires.
• With your consent. Sailing announcements and mailing-list emails, only if you asked for them. You can withdraw that at any time using the unsubscribe link in any of those emails.

How long we keep it

Different things are kept for different lengths of time, because they are kept for different reasons.

• The photograph of your ID — 90 days after your crate is collected. It exists so we can present it with your authorisation at the Auchan counter. Once your shopping is in your hands it has no further use, so it is deleted automatically, both from your booking and from your saved details. If you book again after that, you upload one photo again.
• The signed authorisation, and your booking and payment records — six years. The authorisation is the record of a collection made on your behalf, and Revenue requires business records to be kept for six years.
• Mailing list — until you unsubscribe.

You can delete everything sooner, yourself, at any time (see below).

Your rights

You have the right to access, correct, delete, restrict, object to, or export your data. If you have an account, you can delete all of it yourself at any time from your account page — that removes the uploaded files as well as the database records, not just the links to them. You can also email shopping@cliqueandcollect.ie and we'll respond within one month.

If you are not satisfied with how we have handled your data, you can complain to the Data Protection Commission at dataprotection.ie. You do not need to contact us first.

Who else sees it

We use a small number of service providers, each for one job: Stripe (payments), Resend (email), Vercel (website hosting) and Supabase (database and file storage). Your procuration and ID copy are shown to Auchan at the collection counter, which is the only reason they exist.

Your phone number is used by us to reach you about your own booking — we don't pass it to anyone else.

Some of these providers process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's standard contractual clauses.

We never sell your data, and we don't share it with anyone for advertising.

How it is kept

Data is encrypted in transit. ID photographs and order confirmations are stored in private buckets that are not publicly browsable, and are reachable only through a signed link. Access is limited to the people running the service.

Changes to this notice

We may update this notice as the service develops. The date at the top of the page tells you when it last changed.