Privacy Policy

Effective Date: June 2026

At Thriving Berries Ltd (“we”, “us”, or “our”), your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our services.

Company Details:

  • Company Name: Thriving Berries Ltd
  • Registered Office: Unit 2, 2 Bridge Street, Athlone, Westmeath, Ireland
  • Company Number: 800282
  • Contact Email: hello@thrivingberries.ie

1. Information We Collect

  • Personal Information — when you sign up for a free activity, purchase a subscription, or contact us, we may collect your name, email address, and billing details. Payment card details are processed securely by Stripe — we do not store full card numbers on our servers.
  • Non-Personal Information — we may collect usage data such as IP address, browser type, device information, and pages visited.
  • Children's Data — our products are designed for children aged 2–5 and are always purchased or subscribed to by a parent or guardian. We do not knowingly collect personal data directly from children.
  • Cookies and Tracking — our site uses Cloudflare Turnstile (essential security) and a self-hosted analytics system that tracks page views and button clicks for performance measurement. This analytics system does not use cookies and does not collect personal information. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

  • We use the information we collect to:
  • Deliver the products and services you purchase.
  • Send newsletters, updates, or promotional offers (you may opt out at any time).
  • Improve our website and customer experience.

4. Sharing Your Information

  • We do not sell your personal information. We share data only with the following trusted third-party processors, each of which is GDPR-compliant:
  • EmailOctopus (UK) — email marketing and newsletter delivery.
  • Stripe (US, EU Data Bridge certified) — payment processing and subscription management.
  • Cloudflare (US, EU Data Bridge certified) — website hosting and security (Turnstile bot protection). Analytics data is stored in Cloudflare D1 and is not shared with any third party.
  • Make.com (EU-hosted) — workflow automation for subscription processing.

  • International Data Transfers: Where your data is transferred outside the EU (e.g. to Stripe or Cloudflare in the US), we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses as the legal safeguard. EmailOctopus operates in the UK, which holds an EU adequacy decision. Make.com processes data within the EU.

5. GDPR Rights (EU Users)

  • If you are located in the EU, you have the right to:
  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Restrict or object to processing of your data.
  • Request data portability (a copy of your data in a usable format).
  • To exercise these rights, please contact us at hello@thrivingberries.ie. We will respond within 30 days.
  • Right to Complain: If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Irish Data Protection Commission. You can contact the DPC at www.dataprotection.ie.

6. Data Security

  • We take reasonable measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is completely secure.

7. Retention of Data

  • Subscription data — kept until you cancel your subscription, after which it is retained for 30 days before deletion (excluding transaction records).
  • Transaction and payment records — retained for 6 years as required by Irish tax law (Revenue Commissioners).
  • Email marketing — your email is kept until you unsubscribe or opt out. You can do this with one click from any email we send.

8. Contact Us