DPDP Compliance

The Digital Personal Data Protection Act, 2023 (DPDP) is India’s comprehensive data protection law, granting individuals rights over their personal data and imposing obligations on entities that process such data. While The Irish Fashion Surprise operates from Ireland, we respect the rights of all users under applicable data protection laws, including the DPDP, where applicable.

Scope and Applicability

This DPDP Compliance page applies to any user located in India who interacts with The Irish Fashion Surprise website. Although we do not actively target Indian users or maintain a physical presence in India, we recognize that personal data may be collected through standard website interactions such as cookies, analytics, and contact form submissions. We commit to upholding the principles of the DPDP to the extent reasonably practicable.

Your Rights Under DPDP

Under the Digital Personal Data Protection Act, you have the following rights:

• Right to access your personal data held by us
• Right to correction or completion of inaccurate or incomplete personal data
• Right to erasure of your personal data
• Right to withdraw consent where processing is based on consent
• Right to grievance redressal if you believe your rights have been violated

How We Comply

We do not maintain a database of personal information, nor do we require user registration. Any personal data collected is limited to:

• IP addresses and browser data via analytics tools
• Information voluntarily submitted through our contact form (name, email, message)

We do not sell, share, or monetize personal data. Data is retained only as long as necessary to fulfill the purpose for which it was collected, and is securely deleted thereafter.

Data We Process

Under DPDP, the personal data we may process includes:

• Email address (if provided via contact form)
• Name (if provided via contact form)
• Device and browsing data (via cookies and analytics)

This data is processed solely for communication, website functionality, and improving user experience.

Legal Basis for Processing

We rely on the following legal bases under DPDP:

• Consent — for contact form submissions
• Legitimate interests — for analytics and website performance

No sensitive personal data is collected or processed.

How to Exercise Your Rights

To exercise your rights under DPDP, please contact us at:

Email: [email protected]

In your message, please include:

1. Your full name
2. Your email address
3. The specific right you wish to exercise
4. Any supporting details to help us locate your data

We will respond to your request without undue delay.

Response Timeframes

We aim to respond to all DPDP requests within 30 days of receipt. If your request is complex or requires additional verification, we may extend this period by a further 30 days and will notify you accordingly.

No Discrimination Policy

We will not deny services, charge different prices, or provide a lower quality of service to any user for exercising their rights under DPDP.

Updates and Changes

This DPDP Compliance page will be reviewed annually and updated as required by law or changes in our data practices. Any material changes will be posted here with an updated effective date.

Contact Information

For questions, requests, or complaints regarding your personal data under DPDP, please contact:

Name: Aisling O'Donnell
Email: [email protected]
Address: St. Patrick's Cathedral, St. Patrick's Close, Dublin 8, D08 H6X3, Ireland

We are committed to protecting your data and respecting your rights under all applicable laws, including the Digital Personal Data Protection Act, 2023.