Privacy notice
What this site stores, where it stores it, and how to erase all of it in one click.
Last updated 20 August 2026
The short version
Nothing you do on this site leaves your browser. There is no server, no database, no analytics
account and no third-party script. Your basket, your orders, your saved items, your withdrawal
declarations and your cookie choice are all held in this browser’s localStorage, on your own
device. We could not read them if we wanted to.
That is not a privacy policy written to sound reassuring — it is a consequence of how this reference storefront is built. A shop with no backend cannot leak a customer database, because it does not have one.
Controller
Ideal Commerce Trading Ltd., 14 Harbour Row, Dublin 2, D02 XY45, Ireland · support@ideal-commerce.example. For a real deployment this section would also name a Data Protection Officer and an EU representative where Articles 37 and 27 GDPR require them.
What is stored, where, and why
| What | Where | Legal basis | Kept until |
|---|---|---|---|
| Basket contents | localStorage, your device | Art. 6(1)(b) — steps prior to a contract | You clear it or complete the order |
| Checkout draft (name, address, e-mail, phone) | localStorage, your device | Art. 6(1)(b) — performance of a contract | The order is placed, then deleted |
| Orders and withdrawal declarations | localStorage, your device | Art. 6(1)(b) and 6(1)(c) — legal record of the contract | You erase them |
| Saved items | localStorage, your device | Art. 6(1)(a) — consent, given by tapping the heart | You unsave, or erase everything |
| Cookie/consent choice | localStorage, your device | Art. 6(1)(c) — we must record that you were asked | 12 months, then we ask again |
No cookies are set by this site at all. localStorage is used instead, and only for the strictly
necessary entries above unless you opt in to more.
What is not stored
No IP address logging by us, no device fingerprint, no advertising identifier, no cross-site tracking, no session recording, no e-mail marketing list, no data sold or shared with anyone. There are no third-party requests of any kind from these pages — no fonts, no tag manager, no chat widget. The static files are served by Cloudflare, which necessarily processes the connection itself; see their sub-processor terms for what a CDN sees.
Analytics and marketing
Both are off until you switch them on, and both are genuinely off — no script is loaded and no identifier is generated while they are off. Rejecting them costs you nothing and changes nothing about the site. You can change your mind at any moment from Cookie settings in the footer, and withdrawing consent is exactly as easy as giving it, as Article 7(3) GDPR requires.
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20) and objection (Art. 21), and the right to lodge a complaint with a supervisory authority — in Ireland, the Data Protection Commission, dataprotection.ie.
Erasure, immediately {#erasure}
Because everything is on your device, erasure is not a request you send and then wait on. It is a button, it is instant, and it is complete.
Clearing your browser’s site data for this domain has the same effect. Either way there is no copy anywhere else, because there is nowhere else.
Portability
Your order confirmations and withdrawal acknowledgements download as self-contained HTML files from your order page. That is your data in a structured, commonly used, machine-readable format, on demand, with no request to make.
A note on why this page is short
A privacy notice should be as long as the processing it describes. This one is short because the processing is small. Where a real shop has payment processors, couriers, warehouse systems, e-mail providers, review platforms and ad networks, each of those is a recipient and each belongs in a table like the one above — named, with a purpose, a legal basis and a retention period. Article 13 GDPR requires that specificity; “we may share your data with trusted partners” does not satisfy it.
Erase everything, now
This removes your basket, checkout draft, orders, withdrawal records, saved items, recently viewed list and consent choice from this browser. It cannot be undone and there is no copy anywhere else.