1. Who we are
phonesbyhugm.ie is run by Mustafa Sadiqi Limited, 50 Kinvara Avenue, Ballyvolane, Cork, T23 Y90W, Ireland (company number 779393). We are the data controller for the personal data described on this page.
For anything about your data, email us at help@phonesbyhugm.ie.
2. What we collect
When you order from us
You can order through our online shop from 1 January 2027. When you order, we collect:
- Your contact details: name, email address and phone number.
- Your delivery address.
- Your order: the products, options and quantities, prices, delivery, and any returns, refunds or faults you tell us about.
- Payment records: the amount, date and whether you have paid. Card payments are handled by our payment provider at checkout; we never see or store your full card number. Please never send card details by email.
- Old electrical items or batteries you ask us to take back for recycling, so we can arrange collection.
When you book a repair
- Your contact details: name, email address and phone number.
- Your device: make, model, the fault, the repair we carry out, and any warranty claim.
- Your passcode, if you choose to give it. We may need it to test that the repair works. We use it only for that, keep it with your repair job and not elsewhere, and delete it when you collect your phone.
We don’t look through the photos, messages or other content on your phone. We recommend backing up your phone before any repair.
If you create an account
Your name, email address, password (stored in encrypted form, so we can’t read it), saved addresses and order history. You can ask us to close your account at any time.
When you email us or ask a question
Your email address and whatever you choose to tell us in your message.
Proof of age
For age-restricted products we may ask to see proof that you are 18 or over. We check it and record only that the check was done; we don’t keep a copy of your ID.
When you join the launch list
- Your email address, so we can tell you when we open.
- Your IP address and the date and time you signed up, so we can stop automated or repeated signups.
Before saving your address we check that its domain is set up to receive email. This is an automatic lookup of the part after the @; nothing is sent to you.
When you visit the site
Our hosting provider’s servers keep short-lived technical logs of requests, which include your IP address, browser type and the pages requested. These are used to keep the site running and secure.
Cookies
Our shop uses a small number of essential cookies to keep your basket, checkout and account login working. They are strictly necessary for the shop to work, so they don’t need your consent, and they are not used to track you. We don’t use analytics, advertising or tracking cookies.
What we don’t collect
We don’t use analytics, advertising or tracking tools. Our fonts and product photos are served from our own server, so browsing the shop does not send your data to other companies.
3. Why we use it, and our legal basis
| Data | What we use it for | Legal basis (GDPR) |
|---|---|---|
| Order details, contact details, delivery address and account | Confirming and delivering your order, taking payment, returns, refunds and faulty goods | To carry out our contract with you, Article 6(1)(b) |
| Repair details, device information and passcode | Carrying out and testing your repair, and handling warranty claims | To carry out our contract with you, Article 6(1)(b) |
| Order, payment and repair records | Keeping the accounts and tax records the law requires | Legal obligation, Article 6(1)(c) |
| Proof-of-age check | Making sure we don’t sell age-restricted products to under-18s | Legal obligation, Article 6(1)(c) |
| Your questions and messages | Answering you, including before you decide to buy | Steps you ask us to take before a contract, Article 6(1)(b), or our legitimate interest in replying to customers, Article 6(1)(f) |
| Launch list email address | Telling you when phonesbyhugm.ie opens | Your consent, Article 6(1)(a) |
| IP address, signup time and server logs | Blocking spam and abuse, and running and securing the website | Our legitimate interest in operating a secure website, Article 6(1)(f) |
Marketing: we only send you offers or news if you have agreed to receive them, and every such email lets you unsubscribe. Ordering from us does not sign you up.
4. Who we share it with
We do not sell, rent or trade your personal data. We share it only with companies that help us run the business, and only what they need:
- Our hosting and email provider, Hostinger, which stores the website, our shop database and our email under a data processing agreement.
- Delivery companies, which receive your name, delivery address and phone number so they can deliver your order.
- Payment providers, which process your payment at checkout.
- Our accountant and professional advisers, where they need records to do their job.
These companies may only use your data to provide their service to us. If any of your data is processed outside the European Economic Area, we make sure it is protected by safeguards recognised under GDPR, such as the European Commission’s Standard Contractual Clauses.
We may also disclose data if the law requires us to, for example to the Revenue Commissioners or in response to a valid request from a public authority.
5. How long we keep it
- Orders, invoices and payment records: six years after the end of the tax year they relate to, as Irish tax law requires.
- Repair records: two years after the repair, so we can handle any warranty claim. Your passcode is deleted when you collect your phone.
- Your account: until you ask us to close it, or after three years without an order or login. Order records are kept as above.
- Emails and questions that don’t lead to an order or repair: up to two years after we last hear from you.
- Proof of age: we don’t keep a copy, only a note that the check was done, kept with the order.
- Launch list: until you ask to be removed, or at the latest 12 months after we open, unless you have agreed to hear from us again. Your IP address and signup time are deleted with it.
- Server logs: kept for the short period set by our hosting provider, then deleted automatically.
6. Your rights
Under GDPR you have the right to:
- get a copy of the personal data we hold about you;
- have it corrected if it is wrong;
- have it deleted, unless we must keep it by law (for example, tax records);
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw your consent at any time. This does not affect anything we did before you withdrew it.
To use any of these rights, including to leave the launch list or stop marketing emails, email help@phonesbyhugm.ie. We will reply within one month. It is free.
7. Keeping it safe
The site is served only over an encrypted (HTTPS) connection. Our records are stored in password-protected systems that only we can access. Email is not completely secure, so please never send us card details, passwords or copies of ID by email.
8. Children
You must be 18 or over to place an order or book a repair. The site and launch list are not intended for anyone under 16. If you believe a child has given us their details, contact us and we will delete them.
9. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.
10. Changes to this policy
We will update this page when the way we use your data changes. The date at the top shows when it was last changed.