Who we are
Mum Bucks (“we”, “us”) sells physical NFC pocket-money cards from this website, mumbucks.ie. The data controller is [SELLER LEGAL NAME] — [a sole trader based in Ireland / a company registered in Ireland, CRO no. [CRO NUMBER]] — at [REGISTERED BUSINESS ADDRESS]. For any privacy question, email hello@mumbucks.ie.
What we collect, and why
We practise data minimisation — we collect only what we need to take your order and post your card:
| What | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address | Confirm your order; contact you about delivery or support | Performance of our contract with you |
| Name and delivery address | Fulfil and post your order | Performance of our contract |
| Order details (card, amount, date) | Process the order; meet tax and accounting duties | Contract; and legal obligation |
| Usage data (pages viewed, referrer, approximate location, device) | Understand and improve how the site is used | Consent (Art. 6(1)(a)) — only if you accept analytics |
If — and only if — you accept analytics cookies, we collect usage data through Google Analytics to see how the site is used (see our Cookie Notice). It’s off by default, uses IP anonymisation, and you can withdraw consent at any time via the Cookie settings link in the footer.
We do not see or store your card or payment details — payment is taken by Stripe on its own secure systems. We don’t knowingly collect data about children through this site: an adult buys the card, and your child then uses it inside the Mum Bucks app, which has its own privacy policy.
Who we share it with
We share the minimum necessary with providers that process data on our behalf under contract:
- Stripe — payments and checkout (an independent controller for payment data under its own terms).
- Google (Firebase Hosting) — serves this website.
- Google (Analytics) — measures site usage, only with your consent (an independent provider under its own terms).
- [An Post / courier] — delivery (name and address only).
- [Resend or other email provider] — sending order and support email.
- GoDaddy — domain and DNS for
mumbucks.ie.
Some providers (e.g. Stripe, Google) operate internationally. Where your data leaves the EEA, it is protected by an EU adequacy decision or Standard Contractual Clauses.
How long we keep it
We keep order and transaction records for 6 years to meet Irish tax and accounting law, then delete or anonymise them. Support emails are kept only as long as needed to resolve your query.
Your rights
Under the GDPR you can ask us to access, correct, delete, port, restrict, or object to our use of your personal data. Email hello@mumbucks.ie and we’ll respond within one month. You can also complain to the Data Protection Commission (Ireland) at dataprotection.ie.
Changes
If we change how we handle your data, we’ll update this page and the “last updated” date above.