I retain personal information only for as long as necessary for the purpose for which it was collected, including applicable legal requirements.

Ordinary enquiries

I delete ordinary enquiries one year after the last correspondence, unless they become part of an order or commission, or continued retention is necessary for an unresolved complaint, dispute or legal requirement.

Order and accounting records

I generally retain records required for Irish tax purposes for six years. A longer period may apply where required by law or an unresolved matter. This does not mean that every detail collected during checkout must be kept for six years.

Commission correspondence

I retain information needed to complete the commission and provide relevant after-sales support. Afterwards, retention depends on whether the information is necessary for accounting obligations, an outstanding issue or legal claims.

Age-confirmation information

I retain this only for as long as necessary to assess purchase eligibility and address any related complaint or dispute. It is not used for marketing. Any longer retention must have a specific legal or documented business justification.

Newsletter information

I retain subscription details while you remain subscribed. After you unsubscribe, I may retain a minimal suppression record to ensure you are not contacted again, and evidence of consent where necessary to demonstrate compliance.

Cookie and analytics information

Retention depends on the active service, its settings and the durations described in the website’s cookie information.

When information is no longer needed, it is deleted or anonymised. Backup copies may remain until overwritten through the relevant provider’s backup cycle. Providers acting as independent controllers may apply their own retention periods.

Your data protection rights

Depending on the circumstances, you have the right to:

• Request access to your personal information.

• Have inaccurate or incomplete information corrected.

• Request deletion of your information.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Receive certain information in a portable format.

• Withdraw consent where processing is based on consent.

You can object to direct marketing at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

These rights are subject to applicable conditions and exceptions. For example, I may need to retain certain records to meet legal obligations.

To exercise your rights, email niko.bladesmith@gmail.com. I may request proportionate information to confirm your identity. I will normally respond within one month. If a lawful extension is necessary, I will explain the reason.

You may also complain to the Irish Data Protection Commission at https://www.dataprotection.ie, or to the relevant supervisory authority in the EU country where you live, work or believe an infringement occurred. You do not need to contact me first.

Security

I use reasonable technical and organisational measures appropriate to the personal information handled, and limit access to those who need it. No online service or method of transmission is completely secure.

Changes to this policy

I will update this policy when my services or data-handling practices change. The date at the top indicates the latest revision. Where required, I will provide additional information or obtain fresh consent before introducing new processing.

Contact

For questions about this policy or your personal information, contact:

Mykola Sharashenidze, trading as Niko Forge

Kilcannon, County Waterford, X91 D270, Ireland

Email: niko.bladesmith@gmail.com