This privacy policy explains how Grassfed.ie ("we", "us", "our") collects and uses personal data. We're based in Ireland and we comply with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
What we collect
Things you give us directly:
- Email and county if you join the customer waitlist
- Business name, contact name, email, phone, county, and any message text if you submit a butcher partnership enquiry
- Name, email, and message text if you use the general contact form
Things collected automatically:
- Anonymised analytics via self-hosted Matomo (page views, referrer, approximate country, device type, browser). IP addresses are anonymised before storage.
- Standard server logs (HTTP user agent, request path, timestamp). Retained 30 days.
We do not use Google Analytics, Facebook Pixel, or any cross-site advertising trackers.
Why we collect it
- Customer waitlist — to email you when ordering opens, and a few times per year about the network. Lawful basis: consent (you submitted the form). You can unsubscribe at any time.
- Butcher partnership enquiries — to follow up on the partnership conversation. Lawful basis: legitimate interest (responding to a business enquiry you initiated).
- General contact — to reply to your message. Lawful basis: legitimate interest.
- Analytics — to understand how the site is used and improve it. Lawful basis: legitimate interest. Data is anonymised and never linked to identifiable individuals.
How long we keep it
- Waitlist email + county: until you unsubscribe, or 24 months from last contact (whichever is sooner).
- Butcher partnership enquiries: 36 months (commercial relationship retention).
- General contact form: 24 months.
- Server logs: 30 days.
Who we share it with
Nobody. We don't sell, rent, or share personal data with third parties. The only places your data goes are: our database/hosting (in Ireland), our email tooling (used to send replies), and our analytics (Matomo, self-hosted, our own infrastructure).
Your rights under GDPR
- Access — ask for a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — get a machine-readable copy of your data
- Objection — object to specific processing (e.g. analytics)
- Withdraw consent — at any time, for the consent-based processing (waitlist)
To exercise any of these, email hello@grassfed.ie. We respond within 30 days.
Complaints
If you're not satisfied with how we've handled your data, you can complain to the Data Protection Commission (Ireland) at dataprotection.ie.
Changes to this policy
We update this policy when our practices change. The "Last updated" date at the top reflects the latest revision. Material changes will be flagged on the homepage.
Contact
Questions about this policy: hello@grassfed.ie.