Privacy policy

Last updated 25 September 2026.

This policy explains how Outdoor Sports Company Ireland, a division of Caruso Consulting Co Ltd ("we", "us" or "our"), collects, uses, shares and protects your personal data when you visit outdoorsports.irish, send us an enquiry or buy from us. We are the controller of that data. We handle it under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018.

Questions about this policy or your data? Email theteam@customersupport.care.

What personal data we collect

When you order: your name, email address, phone number, delivery and billing addresses, the items you buy, the amount paid, the delivery option and any discount code used.
When you pay: your card or PayPal details go straight to Stripe or PayPal. We never see or store your full card number. We receive a payment confirmation and reference.
When you contact us: what you put in the contact or wholesale form, or in an email, such as your name, email, phone number, club, school or organisation, and your message.
When you use the chat: the messages you type into the chat window on our site.
When you track a parcel: the tracking number you enter on our Track Your Parcel page.
When you browse: technical data such as your IP address, browser and device type, the pages you view and the site that sent you. Some of this comes through cookies, as set out in our cookie policy.

Your basket is saved in your own browser's storage so it is still there when you come back. It stays on your device and is not sent to us until you check out.

Why we use it, and our legal basis

To take, pack, deliver and support your order, including order and shipping emails. Legal basis: performing our contract with you.
To answer your enquiries, including club, school and bulk quotes. Legal basis: our legitimate interest in replying to you, or steps you ask for before a contract.
To keep tax and accounting records. Legal basis: legal obligation.
To prevent fraud and keep the site and checkout secure. Legal basis: our legitimate interests.
To measure how the site is used and how our ads perform, using analytics and advertising cookies. Legal basis: your consent where the law requires it (including in Ireland and the rest of the EEA), which you can withdraw at any time.
To send marketing emails, only if you have agreed to them. Legal basis: consent. Every marketing email lets you unsubscribe.

Who processes your data for us

We use a small number of service providers to run the store. Each one only gets the data it needs for its job:

Stripe: card payments.
PayPal: PayPal payments.
Resend: sends order confirmation emails and delivers the messages you send through our contact and wholesale forms.
Supabase: stores our order records (your order details, contact details and delivery address).
Vercel: hosts the website and its checkout functions, and keeps short-term server logs such as IP addresses.
Google Analytics: measures visits and how the site is used. It runs with Google Consent Mode, so in Ireland and the rest of the EEA, the United Kingdom and Switzerland it only sets cookies after you accept.
Google Ads: the Google Ads tag measures whether our ads lead to orders. It follows the same consent choice as Google Analytics.
IntellextAI: runs the chat widget on our site and processes the messages you type into it.
17TRACK: shows parcel tracking results when you enter a tracking number on our tracking page.
Delivery couriers: receive your name, delivery address and phone number so they can deliver your order.

We also load web fonts from Google Fonts, which means your browser shares your IP address with Google when a page loads.

We do not sell your personal data. We may also disclose data where the law requires it.

Embedded content from other websites

Some parts of our site come from other services, such as the chat widget and the parcel tracking box. Embedded content behaves in the same way as if you had visited that service's own website. Those services may collect data about you, use cookies and track how you interact with the embedded content, under their own privacy policies.

Transfers outside Ireland and the EEA

Our company is based outside the EEA, and some of our service providers process data in countries outside the EEA. Where personal data leaves the EEA, the transfer relies on a safeguard allowed under the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses.

How long we keep your data

We keep order records for as long as tax and accounting rules require. We keep enquiries and support emails for as long as we need them to deal with your request and any follow-up. Analytics data is kept under the retention settings of Google Analytics. When we no longer need data, we delete it or make it anonymous.

Your rights

Under the GDPR you have the right to:

get a copy of the personal data we hold about you, including an exported file of data you gave us;
have inaccurate data corrected;
have your data erased, apart from data we must keep for administrative, legal or security purposes;
restrict or object to some uses of your data, including direct marketing;
take your data to another provider in a portable format;
withdraw your consent at any time, where we rely on consent.

To use any of these rights, email theteam@customersupport.care. We will reply without undue delay and within one month, which is the time the GDPR allows.

If you are unhappy with how we have handled your data, please contact us first and we will try to put it right. You also have the right to complain to the Data Protection Commission, Ireland's data protection regulator, at dataprotection.ie, or to the supervisory authority in the EU country where you live or work.

Security

The site and checkout use encrypted (HTTPS) connections, and payments are handled by Stripe and PayPal on their own secure pages. Access to order records is limited to the people who need it. No system on the internet is completely secure, but we take reasonable care to protect your data.

Children

We sell equipment for young players, but we do not knowingly collect personal data from children under 16. Orders should be placed by a parent, guardian, teacher or club officer. If you think a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a new "last updated" date.

Contact us

Outdoor Sports Company Ireland, a division of Caruso Consulting Co Ltd
Company registration: 0765554000332
Administration Ireland: 23 Fassaugh Avenue, Dublin D07 K4H1, Ireland
Corporate address:
Email: theteam@customersupport.care