Privacy policy

Last updated: 1 August 2026  ·  GDPR Compliant  ·  Irish Data Protection Act 2018

Gospel and Threads (“we”, “us”, “our”) is a Christian apparel brand based in Ireland. We are the Data Controller responsible for your personal data.

Business name:  Gospel and Threads

Address:  5 Tyrrells Brook Close, Tyrrell’s Brook, Edenderry, Co. Offaly, R45 DW68

Email:  hello@gospelandthreads.com

Website:  gospelandthreads.com

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website or purchase from us. It is written in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Irish Data Protection Act 2018.

We collect the following personal data when you use our website or make a purchase:

–     Identity data: your name

–     Contact data: email address, postal address, phone number

–     Transaction data: products purchased, payment method used (we do not store full card details)

–     Technical data: IP address, browser type, time zone, operating system, device type

–     Usage data: how you found us, pages visited, time spent on our site

–     Marketing data: your marketing preferences and consent status

Under the GDPR, we must have a lawful basis for processing your data:

Purpose	Legal Basis
Processing and fulfilling your order	Contract (Art. 6(1)(b))
Sending order confirmation and shipping updates	Contract (Art. 6(1)(b))
Fraud prevention and security	Legitimate interest (Art. 6(1)(f))
Improving our website and experience	Legitimate interest (Art. 6(1)(f))
Sending marketing emails (opt-in only)	Consent (Art. 6(1)(a))
Complying with tax and accounting obligations	Legal obligation (Art. 6(1)(c))

We share your data only where necessary with the following trusted third parties, all of whom act as data processors on our behalf:

–     Shopify Inc. — our ecommerce platform; stores and processes order and payment data.

–     Printful Inc. (US-based) — print-on-demand fulfilment; your name and address are shared to fulfil orders.

–     Gelato — print-on-demand fulfilment; your name and address are shared to fulfil orders.

–     Payment processors (Stripe, PayPal, Shopify Payments) — secure payment processing. We do not store your full card details.

–     Google Analytics — anonymised and aggregated website analytics.

–     Meta (Facebook/Instagram) — only if you have consented to marketing cookies.

We do not sell your personal data to any third party, ever.

Printful Inc. is based in the United States. Transfers of your data to the US are carried out under the EU–US Data Privacy Framework, recognised by the European Commission as providing adequate data protection. Where the Framework does not apply, we rely on Standard Contractual Clauses (SCCs) under Article 46 GDPR.

Data Type	Retention Period
Order and transaction records	7 years (Irish tax law)
Customer account data	Until deletion request or 3 years of inactivity
Marketing preferences	Until you withdraw consent
Website analytics (anonymised)	26 months

–     Right of access — request a copy of the data we hold about you

–     Right to rectification — ask us to correct inaccurate data

–     Right to erasure (“right to be forgotten”) — ask us to delete your data (subject to legal obligations)

–     Right to restriction — ask us to pause processing your data

–     Right to data portability — receive your data in a machine-readable format

–     Right to object — object to processing based on legitimate interests or direct marketing

–     Right not to be subject to automated decision-making — we do not make automated decisions that affect you

To exercise any right, contact us at hello@gospelandthreads.com. We will respond within 30 days, free of charge.

Our website uses cookies. Please see our Cookie Policy for full details. You can manage your preferences at any time via the Cookie Settings link in our website footer.

You have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland’s supervisory authority:

Website: www.dataprotection.ie  ·  Phone: +353 (0)1 765 0100 / 1800 437 737 (freephone)  ·  Email: info@dataprotection.ie

We would appreciate the opportunity to resolve your concern first — please contact us before approaching the DPC.

We may update this policy from time to time and will update the “Last updated” date accordingly. For significant changes, we will notify you by email where we hold your contact details.