Privacy notice
What this site stores, where it stores it, and how to erase all of it in one click.
Last updated 5 October 2026
The short version
Your basket, your orders and your details never leave your browser. There is no server and no
database. Your basket, your orders, your saved items, your withdrawal declarations and your cookie
choice are all held in this browser’s localStorage, on your own device. We could not read them if
we wanted to.
The one thing that does leave it is analytics: how the shop is used, sent to Quomerce — see below.
That is not a privacy policy written to sound reassuring — it is a consequence of how this reference storefront is built. A shop with no backend cannot leak a customer database, because it does not have one.
Controller
Ideal Commerce Trading Ltd., 14 Harbour Row, Dublin 2, D02 XY45, Ireland · support@ideal-commerce.example. For a real deployment this section would also name a Data Protection Officer and an EU representative where Articles 37 and 27 GDPR require them.
What is stored, where, and why
| What | Where | Legal basis | Kept until |
|---|---|---|---|
| Basket contents | localStorage, your device | Art. 6(1)(b) — steps prior to a contract | You clear it or complete the order |
| Checkout draft (name, address, e-mail, phone) | localStorage, your device | Art. 6(1)(b) — performance of a contract | The order is placed, then deleted |
| Orders and withdrawal declarations | localStorage, your device | Art. 6(1)(b) and 6(1)(c) — legal record of the contract | You erase them |
| Saved items | localStorage, your device | Art. 6(1)(a) — consent, given by tapping the heart | You unsave, or erase everything |
| Cookie/consent choice | localStorage, your device | Art. 6(1)(c) — we must record that you were asked | 12 months, then we ask again |
This site sets no cookies of its own. localStorage is used instead, and only for the strictly
necessary entries above. Our analytics sets two cookies, only if you allow analytics.
What is not stored
No IP address logging by us, no device fingerprint, no advertising identifier, no cross-site tracking, no e-mail marketing list, no data sold or shared with anyone. The only third-party requests from these pages are to our analytics service, below — no fonts, no tag manager, no chat widget. The static files are served by Cloudflare, which necessarily processes the connection itself; see their sub-processor terms for what a CDN sees.
Analytics and marketing
Both are off until you switch them on. Rejecting them costs you nothing and changes nothing about the site. You can change your mind at any moment from Cookie settings in the footer, and withdrawing consent is exactly as easy as giving it, as Article 7(3) GDPR requires.
Analytics is provided by Quomerce, our processor, whose script loads on every page. It records the pages you see, your clicks, errors the site hits, and the products, basket, checkout steps and order total of your visit — never your name, address, e-mail or phone, and never anything you type. Quomerce turns your IP address into a country and discards it.
- With analytics off, each page is counted on its own, with an id that lives only in that page’s memory. Nothing is stored on your device, no replay is recorded, and two pages cannot be linked to each other or to you. This is our legitimate interest (Art. 6(1)(f)) in a shop that works.
- With analytics on (Art. 6(1)(a), consent), two cookies link the pages of one visit, and the visit is recorded as a replay with what you type left out and the checkout, order and withdrawal pages masked. Events are kept up to 400 days and replays up to 30. The cookie notice lists exactly what is stored.
Marketing loads nothing at all. There is no advertising partner on this site.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a supervisory authority — in Ireland, the Data Protection Commission, dataprotection.ie.
Erasure, immediately {#erasure}
Because everything is on your device, erasure is not a request you send and then wait on. It is a button, it is instant, and it is complete.
Clearing your browser’s site data for this domain has the same effect. Either way there is no copy
of your basket, your orders or your details anywhere else, because there is nowhere else. It also
withdraws analytics consent, which deletes Quomerce’s cookies; to have the analytics recorded for
your visitor id deleted too, write to us with the value of your _qm_vid cookie.
Portability
Your order confirmations and withdrawal acknowledgements download as self-contained HTML files from your order page. That is your data in a structured, commonly used, machine-readable format, on demand, with no request to make.
A note on why this page is short
A privacy notice should be as long as the processing it describes. This one is short because the processing is small. Where a real shop has payment processors, couriers, warehouse systems, e-mail providers, review platforms and ad networks, each of those is a recipient and each belongs in a table like the one above — named, with a purpose, a legal basis and a retention period. Article 13 GDPR requires that specificity; “we may share your data with trusted partners” does not satisfy it.
Erase everything, now
This removes your basket, checkout draft, orders, withdrawal records, saved items, recently viewed list and consent choice from this browser. It cannot be undone and there is no copy anywhere else.