REVIEW DRAFT · 21 September 2026 · Not yet in force
Privacy & cookies
Who is responsible
Ivana Kotikova, trading as ChocoBerries
Business name registration (CRO/RBN): 766961
2 Rose Lane, Ballinacurra
Midleton, Co. Cork
P25 XR29, Ireland
Email: ivka9981@yahoo.ie
Ivana Kotikova, trading as ChocoBerries, is the controller for customer enquiry and order information.
Owner review required: verify supplier contracts, access by the temporary website administrator, international transfers, retention periods and the handling of allergy-related health data before this notice becomes final.
What the website does
For classic and occasion boxes, the order form collects your name, email, phone, preferred date, chocolate choice, personalisation and delivery address when applicable. On choosing Order & pay, these details are stored in Netlify Forms for ChocoBerries and a notification is configured for Ivana’s business email. You then continue to Stripe to pay for the box. A random order reference links the form to the payment session; submitting details alone does not confirm payment. Stripe handles card details and may ask you to confirm order details. Avoid unnecessary sensitive information in messages. See Stripe’s privacy information and Netlify’s privacy information.
The enquiry form prepares text in your browser. It does not automatically send an email, place an order or take payment. If you open your email app and send the message, your name, requested date, chosen products, personalisation and any address you include are sent to ChocoBerries through the email services involved. Avoid unnecessary personal information, particularly about gift recipients or children.
Delivery addresses are entered manually. There is currently no Google Maps lookup or automatic distance calculation in the public order form. Ivana checks addresses within Midleton and the surrounding 20 km area and confirms delivery availability and the fee separately.
Purposes and proposed legal bases
- Responding to your enquiry and arranging an order: steps requested before a contract and performance of that contract.
- Records required by tax or food-safety law: compliance with the applicable legal obligation.
- Proportionate security and complaint handling: legitimate interests in keeping the service secure and resolving disputes, subject to your rights.
Information needed to fulfil an order must be supplied for us to provide that service. Optional personalisation is your choice. The form does not request health information. A separate appropriate process and lawful basis must be established before identifiable allergy or other health details are collected.
Service providers and access
Netlify hosts the site and delivery function. The business email address uses Yahoo. Your chosen email provider also handles messages you send. Google Maps will process delivery lookups when enabled. These services may process technical information such as IP addresses, request times and browser details. Order form submissions, including addresses provided for delivery, are stored in Netlify Forms and are accessible to authorized site administrators.
Before publication, confirm the providers' processing roles, locations and safeguards for any transfers outside the EEA, and how to obtain details. Do not infer that all information stays in Ireland. Confirm and limit the temporary administrator's access.
Retention
Ivana must approve a documented schedule covering unsuccessful enquiries, fulfilled orders, accounting records, traceability and recall records, complaints, server logs and backups. Specify the period or a meaningful criterion for each purpose. No retention period has been invented for this draft.
Your choices and rights
Contact ivka9981@yahoo.ie to request access, correction, erasure, restriction or portability where applicable, or to object to processing based on legitimate interests. Where consent is used, it can be withdrawn without affecting earlier lawful processing. Rights can be subject to legal exceptions. You may complain to Ireland's Data Protection Commission.
Cookies and browser storage
The current application code does not set cookies or use local storage, and contains no embedded advertising or analytics scripts. Enquiry text is held in the open page. This code review does not certify the behaviour of every hosting or email provider. Optional tracking must not be added without reviewing consent and this notice. A cookie banner is not a substitute for checking what actually runs on the site.