Privacy policy

Last updated: 21 October 2026

1. Who we are

Momsukali is operated by Sephora Kaïmba in Mallow, County Cork, Ireland. We sell handmade mikate, mini waffles and drinks through Momsukali.ie.

Momsukali is responsible for the personal information we use to manage customer enquiries, orders and customer relationships.

For privacy questions or requests, contact contact@momsukali.ie. Our business contact details are available on our Contact information page.

Our website and checkout are powered by Shopify.

2. Information we collect

Depending on how you use our website, we collect:

Contact information: your name, email address, telephone number and the addresses you provide.
Order information: products, quantities, flavours, serving preferences, preferred dates, collection or delivery choices, order history and payment status.
Account information: the information needed to create and manage your customer account through Shopify.
Enquiry information: messages sent through our contact forms, Shopify Inbox or email. For business and event enquiries, this can include your organisation, event date, approximate guest numbers and delivery area.
Technical information: information such as your IP address, browser, device and interactions with the website, collected through Shopify and the technologies used by our store.
Marketing preferences: whether you have subscribed to communications and any subsequent changes to those preferences.

Please avoid sending unnecessary sensitive information, including detailed medical information, through our forms or chat.

3. How we use your information

We use personal information to:

Answer questions and prepare responses to event enquiries.
Process orders and payments.
Confirm availability, preferred dates and collection or delivery arrangements.
Prepare products according to the choices agreed with you.
Manage customer accounts, cancellations, complaints and refunds.
Send service messages about your enquiries or orders.
Maintain business and accounting records.
Protect the website and investigate suspected fraud or misuse.
Send marketing communications where you have subscribed or another lawful permission applies.

Creating an account or placing an order does not automatically subscribe you to our newsletter.

4. Our legal bases

Under applicable data protection law, we rely on:

Contract and steps requested before a contract: to respond to an order or quotation request, process purchases and arrange fulfilment.
Legal obligations: to maintain required records and meet applicable legal requirements.
Legitimate interests: to manage customer support, protect our business and maintain a secure and functioning website, where those interests do not override your rights.
Consent: where required for marketing communications, non-essential tracking or other optional processing.

Where processing relies on consent, you may withdraw it. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Payments

Payments are processed through the payment services available at checkout.

The payment provider processes the card or other payment details needed to complete the transaction. Momsukali receives the order and transaction information needed to manage your purchase, such as payment status, transaction references and any limited payment details made available by the provider.

Please do not send card numbers, security codes or banking credentials by email, contact form or chat.

6. Who receives your information

We share information where necessary with:

Shopify, which provides our ecommerce platform, checkout, customer accounts and associated store services.
Payment providers, to process payments and refunds.
Service providers used to operate the business, such as email and customer communication services.
People involved in preparing or delivering your order, limited to the information needed for their work.
Professional advisers or public authorities, where necessary to meet legal obligations or handle a legal matter.

Some providers, including Shopify, also process certain information for their own purposes under their privacy policies.

You can read the Shopify Consumer Privacy Policy and access the Shopify Privacy Portal.

7. Cookies and similar technologies

Our website uses cookies and similar technologies to support functions such as the shopping cart, customer login, security and remembering relevant choices.

Additional analytics or advertising technologies may be used depending on the tools enabled on our store. Where consent is legally required, these technologies must only be used with your consent.

You can manage cookies through your browser and any privacy preference controls provided on the website. Blocking necessary cookies may prevent parts of the store from working correctly.

This policy does not replace any consent required for non-essential cookies or tracking.

8. Marketing communications

If you subscribe to marketing emails, we use your contact information to send those communications.

You can unsubscribe using the link in a marketing email or by contacting us.

Unsubscribing from marketing does not stop messages needed to manage an enquiry, order, payment, refund or account.

9. How long we keep information

We retain personal information for as long as necessary for the purpose for which it was collected:

Order and payment records are retained for applicable accounting, tax and legal requirements.
Enquiries and customer correspondence are retained as needed to handle the request, follow-up, complaints or related disputes.
Account information is retained as needed to provide the account and meet any continuing legal obligations.
Marketing information is retained while needed to manage your subscription and demonstrate your preferences.
Where you unsubscribe, limited information may be retained to ensure your preference is respected.

Information may need to be retained for longer where a legal obligation or ongoing dispute requires it.

10. International processing

Shopify and other service providers may process information outside Ireland or the European Economic Area.

Where required, international transfers must be supported by an appropriate legal mechanism, such as an adequacy decision or approved contractual safeguards.

Further information about Shopify’s international processing is available in its privacy policy.

11. Your rights

Subject to applicable conditions and exceptions, you may request:

Access to your personal information.
Correction of inaccurate information.
Deletion of information.
Restriction of processing.
Transfer of your information where the right to portability applies.
An objection to processing based on legitimate interests.
Withdrawal of consent where consent is the legal basis.

You may object to the use of your information for direct marketing.

To exercise your rights, email contact@momsukali.ie We may request proportionate information to verify your identity. We will respond within the time limits required by applicable law.

Some records may need to be retained despite a deletion request, for example to meet accounting obligations.

12. Security

We take reasonable steps to protect personal information and limit access to people who need it for their work.

No website, communication system or storage method can guarantee absolute security. Please keep account access codes confidential and contact us if you suspect unauthorised use of your account.

13. Complaints

If you have a concern about how we handle your information, please contact contact@momsukali.ie.

You also have the right to complain to the Irish Data Protection Commission, or another competent supervisory authority.

Information about making a complaint is available at dataprotection.ie.

14. Changes to this policy

We may update this policy when our services, tools or processing practices change.

The current version will be published on this page with its updated date. Where legally required, we will provide additional notice.