Privacy

The data controller for this website and for everything described below is Liffey Metals Limited, trading as Liffey Metals, a company registered in Ireland (company number 829257), registered office 6 Fern Road, Sandyford Business Park, Dublin 18, Ireland. For anything about your data, email andrew@liffeymetals.com.

Liffey Metals respects your privacy. This website does not sell or share data with anyone. It does not use cookies for advertising.

We use two analytics tools to understand how the site is used: Vercel Analytics, which collects anonymous, aggregated usage statistics, and PostHog, which records page views, clicks, form use and session replays, with everything you type hidden. PostHog sets a first-party cookie so that your visit is counted once rather than on every page, and processes this data within the European Union. If you fill in a form we link your visit to your request under an internal reference number so we can help you with it; your name, email address, phone number and address are held only in our own records, never in PostHog. You can turn analytics off for your browser at any time below.

If you email us at andrew@liffeymetals.com, message us on WhatsApp, or submit an enquiry or application form on this site, we hold the details you provide, including any photos, in our secure records only for the purpose of replying to you and handling your enquiry. We do not sell or share your details with anyone.

When you submit a form we also store your IP address and browser details with the submission, for fraud prevention only, and delete them after 12 months.

Buying from the shop and booking a call

When you buy from our shop, payment is taken by Stripe on its own secure page. Your card number goes to Stripe, never to us; Stripe sends us your name, email address, delivery address and the last four digits of the card so we can post the order and issue the receipt. Stripe processes that data under its own privacy policy. We keep order records, including the delivery address, for six years because tax law requires it.

When you book a call, the name, email address and any note you give us go into our Google Workspace calendar and Google sends you the calendar invitation with the video link. The same details are kept in our own records so we can prepare for the call. Transactional emails (order confirmations, receipts, pack confirmations) are sent through Resend.

Business contacts and outreach

We write to businesses in the precious-metals and jewellery trade (jewellers, goldsmiths, gold buyers, pawnbrokers, antique and second-hand dealers, bullion and coin dealers, refiners and similar) to tell them about our trade buying service. The data controller is Liffey Metals Limited (company number 829257), 6 Fern Road, Sandyford Business Park, Dublin 18, Ireland.

What we hold. Business contact details only: the business name, a business email address and phone number, the website, the trading address, the role of the person we write to and, where it is public, their name. We also keep a short note of what the business does, taken from its own website or listing, so that what we send is relevant.

Where it comes from. Public sources: the business's own website, public business directories and registers such as the Companies Registration Office, and trade listings. We do not buy lists and we do not collect personal email addresses of private individuals for this purpose.

Why, and on what basis. Our legitimate interest in offering a trade buying service to businesses that may want one (GDPR Article 6(1)(f)). We write to corporate addresses in a business capacity, a small number of times, and never about anything other than the trade. In Ireland, business-to-business email of this kind is permitted under Regulation 13 of the ePrivacy Regulations (S.I. 336 of 2011) provided you can opt out at any time; a sole trader or partnership on a personal address is only contacted with consent.

How to object or unsubscribe. Every email carries an unsubscribe link and works with a one-click unsubscribe in mail programs that support it; you can also reply STOP, or emailandrew@liffeymetals.com. An opt-out takes effect immediately and applies to everyone at the same business. We do not use tracking pixels; the links in our emails are counted when they are opened so we know whether what we send is of any use.

Retention. We keep business contact records while there is a live reason to, and review them every two years. When you opt out we keep the email address (and the business) on a suppression list so that the opt-out is honoured permanently; that is the only purpose it is kept for.

Your rights. You can ask what we hold about you, have it corrected or deleted, object to our processing, or ask us to restrict it, by emailing andrew@liffeymetals.com. You can also complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963 (dataprotection.ie). If you are in the United Kingdom, the same applies under UK GDPR and PECR and the Information Commissioner's Office is the supervisory authority.

Identity verification and bank details

Before we buy precious metals from you we are required by anti-money-laundering law (the Criminal Justice (Money Laundering and Terrorist Financing) Acts 2010 to 2021) to verify who you are and, for a business, who owns and controls it. When you open an account we ask for your legal name, date of birth, contact details and home address, a photo of your identity document, a recent proof of address and the bank account you want to be paid into. For a business account we also ask for the company's registration details, its registered and trading addresses, and the identity of its authorised person and any owner of 25% or more.

We use this information only to verify your identity, to meet our legal record-keeping duties, to pay you and to prevent fraud. The legal basis is compliance with a legal obligation and, for the bank details, performance of our contract with you. We check the details you give us against each other and against public registers such as the Companies Registration Office; we do not run credit checks.

Documents are stored in private, access-controlled storage in the European Union and are never published or shared with other customers. Bank account numbers are encrypted and shown to you only in masked form. Only the people at Liffey Metals who review accounts and make payments can open your documents or see your full account number, and every time they do so is logged. We keep verification records for five years after our last transaction with you, as the law requires, then delete them. We may share them with the Garda Síochána, the Revenue Commissioners or a court if the law obliges us to.

When you submit your details you confirm that they are accurate and that you have read this notice; we record the time of that confirmation and the version of this notice you saw. You can review and update your details from your account at any time before a payment is made.

Under the General Data Protection Regulation you may ask us at any time what personal data we hold about you, ask us to correct it, or ask us to delete it. Email andrew@liffeymetals.com and we will deal with your request promptly. Where the law requires us to keep verification records we will tell you so and delete them when that period ends.