Privacy policy

Last updated 25 September 2026. This policy is reviewed periodically; if anything here is unclear, ask us before you order.

This policy explains how Eye Massager Company, a division of Caruso Consulting Co Ltd ("we"), collects and uses your personal data when you visit eyemassager.irish or buy from us. We are the controller of that data. We follow the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018.

Questions or requests: email theteam@customersupport.care.

What we collect

Order and contact details you give us: your name, email address, phone number, delivery address, the items you order and any notes you add.
Messages you send us through email, the contact form, the feedback form or the chat window.
Payment information, which goes straight to our payment providers. We never see or store your full card number.
Technical information such as your IP address, browser and device type, and the pages you visit, collected through our website services and, where allowed, analytics.

Why we use it, and our legal basis

To take, pack, deliver and support your order, including returns. This is needed to perform our contract with you.
To keep order and payment records for tax and accounting. The law requires this.
To keep the website secure and prevent fraud. This is in our legitimate interests.
To understand how the website is used, through Google Analytics. We rely on your consent, which you can withdraw at any time.
To send marketing emails, only where you have agreed. You can unsubscribe at any time.

Cookies and analytics

Essential browser storage keeps your basket and your cookie choice. Google Analytics runs under Google Consent Mode: in Ireland, analytics and advertising storage stay switched off until you accept, and you can change your choice at any time through Cookie settings in the footer. Our cookie policy has the details.

Who we share it with

We share only what each service needs to do its job: payment providers (Stripe and PayPal), website hosting, our email service, the suppliers and couriers who fulfil and deliver your order, and the providers of our support form, chat window and analytics. We do not sell your personal data. We may disclose information where the law requires it.

Transfers outside the European Economic Area

Our company and some of these providers are based outside the European Economic Area, so your data may be transferred there. Where that happens, the GDPR requires appropriate safeguards to protect it. Contact us if you would like details of the safeguards that apply.

How long we keep it

We keep order records for as long as tax and accounting law requires. We keep messages and support records only as long as we need them to deal with your request and any follow-up. After that we delete or anonymise the data.

Your rights

You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email theteam@customersupport.care. We may need to confirm your identity first, and we will reply within one month.

Complaints

If you are unhappy with how we handle your data, please tell us first so we can try to fix it. You also have the right to complain to the Data Protection Commission, Ireland's data protection authority, at dataprotection.ie.