Privacy policy

Applicable to riordesign.eu and riordesign.co
Last updated: April 2026

Data controller

A Minimalist Home Ltd, trading as Rior Design
Registered office: Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland
Company number: 663697 – Companies Registration Office, Ireland
VAT number: IE3669486RH
Contact: info@riordesign.com

As an Irish-registered company, our lead supervisory authority under the GDPR is the Irish Data Protection Commission (DPC) — www.dataprotection.ie.

Customers residing in other jurisdictions may also contact their local data protection or consumer privacy authority:

  • UK: Information Commissioner's Office (ICO) — ico.org.uk
  • Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
  • Singapore: Personal Data Protection Commission (PDPC) — www.pdpc.gov.sg
  • US (California): California Privacy Protection Agency — cppa.ca.gov

1. General

Unless otherwise stated in this policy, providing your personal data is not a legal or contractual obligation. You are not required to provide your data. Failure to do so will generally have no consequences, except as indicated in specific sections below where data is necessary for order processing. "Personal data" means any information relating to an identified or identifiable natural person.

2. Server log files

You can visit our website without providing personal information. Each time our website is accessed, usage data is transmitted by your browser to our hosting provider and recorded in log files, including the page accessed, date and time, IP address, data volume transferred, and internet service provider. This processing is based on our legitimate interest in ensuring the smooth operation of our website (Article 6(1)(f) GDPR / equivalent applicable law). Data may be transferred to Canada, which benefits from an adequacy decision by the European Commission.

3. Contact

3.1 Contact by email

When you contact us by email, we collect your personal data (name, email address, message content) only to the extent you provide it, for the purpose of handling and responding to your enquiry. If your enquiry relates to a contract, processing is based on Article 6(1)(b) GDPR. In other cases, it is based on our legitimate interest in handling your enquiry (Article 6(1)(f) GDPR). Your email address is used solely to respond to your enquiry and is deleted afterwards in accordance with applicable retention periods.

3.2 Contact form

When you use our contact form, the same data collection and legal bases apply as described in section 3.1 above.

3.3 WhatsApp Business

If you contact us via WhatsApp, we use WhatsApp Business provided by WhatsApp Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). We collect your mobile phone number, name if provided, and any information you share. Data may be transferred to Meta servers in the USA under standard contractual clauses. Processing is based on Article 6(1)(b) GDPR (contractual enquiries) or our legitimate interest (Article 6(1)(f) GDPR). For more information: https://www.whatsapp.com/legal/privacy-policy

4. Customer account and orders

4.1 Customer account

When you create a customer account, we collect your personal data to the extent indicated during registration, for the purpose of improving your shopping experience and simplifying order processing. Processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time; your account will then be deleted.

4.2 Order processing

When you place an order, we collect and process your personal data only to the extent necessary for order fulfilment and processing. Providing this data is necessary to conclude the contract. Processing is based on Article 6(1)(b) GDPR. Data may be shared with carriers and logistics providers, payment processors, order processing service providers, and IT service providers. Data may be transferred to Canada, which benefits from an adequacy decision.

5. Marketing

5.1 Reviews and comments

When you submit a review or comment, we collect your name, email address and comment content only to the extent you provide them. Processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time, after which your data will be deleted.

5.2 Email newsletter

We use your email address for newsletter marketing only with your explicit consent (Article 6(1)(a) GDPR). You may unsubscribe at any time via the link in any newsletter or by contacting us. Your email will then be removed from our mailing list. Data is shared with an email marketing service provider under a data processing agreement; no other third-party sharing takes place.

5.3 Klaviyo

We use Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA) for newsletter sending and analysis under a data processing agreement. We share your email address and name (if provided) with Klaviyo. Newsletters may contain tracking pixels or links to analyse open rates and clicks. Pseudonymised usage profiles may be created for statistical purposes only. Data is transferred to Klaviyo servers in the USA; Klaviyo is certified under the Trans-Atlantic Data Privacy Framework (TADPF). Processing for newsletter sending is based on your consent (Article 6(1)(a) GDPR); tracking analytics is based on our legitimate interest (Article 6(1)(f) GDPR). For more information: https://www.klaviyo.com/legal/privacy-notice

5.4 SMS marketing

We use your mobile phone number for SMS marketing only with your explicit consent given via an unchecked opt-in checkbox at checkout or a dedicated sign-up form. Processing is based on your consent (Article 6(1)(a) GDPR / equivalent applicable law). You may withdraw consent at any time by replying STOP to any message. Your number will then be removed from our list. We do not share your SMS opt-in data or consent with third parties, except messaging service providers required to operate the programme under a data processing agreement.

Our website uses cookies to track cart contents including abandoned carts. This information is used to determine when to send SMS cart reminder messages.

For US customers (TCPA notice): By opting in, you consent to receive autodialled or pre-recorded marketing text messages from Rior Design at the number provided. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies. Reply HELP for help, STOP to cancel.

6. Carriers and logistics

6.1 Email address sharing with carriers

We share your email address with the carrier for delivery status notifications, subject to your consent at checkout (Article 6(1)(a) GDPR). You may withdraw consent at any time.

6.2 Shopify — order management

We use Shopify Inc., 151 O'Connor Street, Ottawa, ON K2P 2L8, Canada, for order management under a data processing agreement. Your order data is transmitted to Shopify. Transfers to Canada benefit from an adequacy decision.

7. Payment providers

7.1 PayPal and PayPal Express

We use PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg). When you use PayPal, data required for payment processing is transmitted to PayPal under Article 6(1)(b) GDPR. PayPal may collect device and browsing data when the payment option is loaded. For more information: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

7.2 Klarna

To offer Klarna payment options, we share your personal data (contact details, order information) with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, to allow Klarna to assess your eligibility. Processing is based on Article 6(1)(b) GDPR. Klarna may carry out identity and creditworthiness checks using credit reference agencies where permitted by local law. Processing for credit checks is based on legitimate interest (Article 6(1)(f) GDPR). You may object to this processing directly with Klarna at any time. For more information: https://www.klarna.com/privacy/

8. Cookies

Our website uses cookies — small text files stored by your browser. You have full control over cookies via your browser settings. Disabling cookies may limit some website functionality.

To manage cookies in major browsers:

8.1 Strictly necessary cookies

We use strictly necessary cookies to ensure the website functions correctly, including cart tracking and session management. These are based on our legitimate interest in providing a functioning website.

9. Analytics and advertising

9.1 Google Analytics 4

We use Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to analyse website traffic and visitor behaviour. Data collected may include IP address (anonymised), pages visited, device type, browser, location data, and purchase activity. Data is transferred to Google servers in the USA under standard contractual clauses. Google is not TADPF-certified. Processing is based on your consent where required by applicable law, or on our legitimate interest in website optimisation (Article 6(1)(f) GDPR). Opt-out: https://tools.google.com/dlpage/gaoptout. For more information: https://policies.google.com/privacy

9.2 Google Ads and Conversion Tracking

We use Google Ads and conversion tracking provided by Google Ireland Limited. When you click a Google ad, a conversion cookie is placed on your device. These cookies are limited in validity, contain no personal data, and are not used for personal identification. They generate aggregate conversion statistics only. Data transfers to the USA are based on standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR). Opt-out: https://support.google.com/ads/answer/2662922

9.3 Google AdSense

We use Google AdSense provided by Google Ireland Limited to display interest-based advertisements. Google uses cookies to analyse site usage. Data may be transferred to the USA under standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR). Opt-out: https://support.google.com/ads/answer/7395996

9.4 Google Remarketing and Similar Audiences

We use Google's remarketing and Similar Audiences function provided by Google Ireland Limited to display targeted advertising based on your browsing behaviour. Google uses cookies to create pseudonymised usage profiles. No personal data enabling identification is stored. Data transfers to the USA are based on standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR).

9.5 Meta Pixel (Facebook)

We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). Meta Platforms Ireland and we are joint controllers for data collected via this service under a joint controller agreement: https://www.facebook.com/legal/controller_addendum. The Pixel connects your site visit data to your Facebook account to enable personalised advertising. Data may be transferred to the USA under standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR). Opt-out: https://www.facebook.com/ads/preferences

9.6 Pinterest Tag

We use the Pinterest Tag provided by Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) for targeted advertising and conversion tracking on Pinterest. Data collected may include pages visited, searches, cart contents and completed transactions. Data may be transferred to the USA under standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR). Opt-out via Pinterest privacy settings: https://www.pinterest.com/settings/privacy

9.7 TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited (Dublin, Ireland) and TikTok Information Technologies UK Limited (London, UK) as joint controllers. The Pixel collects data including date and time of visit, browser and device type, screen resolution, and IP address to enable targeted advertising and measure ad effectiveness. Data may be transferred to third countries including the USA under standard contractual clauses. Processing is based on your consent where required, or legitimate interest (Article 6(1)(f) GDPR). For more information: https://www.tiktok.com/legal/page/eea/privacy-policy/en

10. Tools and plugins

10.1 Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited to manage tracking and analytics tags. Google Tag Manager does not itself store cookies or process personal data, but enables triggering of other tags that may do so. More information: https://policies.google.com/privacy

10.2 Google reCAPTCHA

We use Google reCAPTCHA provided by Google Ireland Limited to distinguish human from automated input. Your input and IP address are transmitted to Google. Data may be transferred to the USA under standard contractual clauses. Processing is based on our legitimate interest in protecting the website against abuse and spam (Article 6(1)(f) GDPR).

10.3 YouTube

We use YouTube video embedding provided by Google Ireland Limited. Enhanced privacy mode is activated — YouTube stores no information about visitors until a video is played. Data may be transferred to the USA under standard contractual clauses. Processing is based on our legitimate interest in providing relevant content (Article 6(1)(f) GDPR). More information: https://www.youtube.com/t/privacy

11. Social media

11.1 Social plugins

We use social plugins from Facebook/Instagram (Meta Platforms Ireland Limited) and Pinterest (Pinterest Europe Limited). Visiting our site establishes a connection with these networks. Interacting with plugins while logged into a social network may associate data with your account. Processing is based on your consent where required by applicable law. See the privacy policies of each platform for full details.

11.2 Social media pages and accounts

We maintain pages on Facebook, Instagram and Pinterest. We process data from competitions and direct messages as needed to manage these activities. Our competitions are not affiliated with, sponsored by, or organised by any social media platform. The organiser is Rior Design / A Minimalist Home Ltd.

12. Jurisdiction-specific privacy rights

12.1 California residents (CCPA/CPRA)

California residents have the right to: know what personal information is collected about them; know whether personal information is sold or disclosed and to whom; opt out of the sale of personal information; access their personal information; and not be discriminated against for exercising these rights. We do not sell personal information. To exercise your California privacy rights, contact us at info@riordesign.com.

12.2 UK residents (UK GDPR)

UK residents have the same rights as described in section 13 below, applicable under the UK GDPR and the Data Protection Act 2018. The lead supervisory authority for UK residents is the Information Commissioner's Office (ICO): ico.org.uk.

12.3 Australian residents (Privacy Act 1988)

Australian residents have rights under the Privacy Act 1988 and the Australian Privacy Principles, including the right to access and correct personal information held about them. To exercise these rights, contact info@riordesign.com. Complaints may be lodged with the OAIC: www.oaic.gov.au.

12.4 Singapore residents (PDPA)

Singapore residents have rights under the Personal Data Protection Act 2012, including the right to access and correct personal data and to withdraw consent. To exercise these rights, contact info@riordesign.com. Complaints may be lodged with the PDPC: www.pdpc.gov.sg.

13. General data subject rights

Subject to applicable law, you have the following rights regarding your personal data:

  • Right of access to your personal data;
  • Right to rectification of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten");
  • Right to restriction of processing;
  • Right to data portability;
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing;
  • Right to object to processing based on legitimate interest.

To exercise your rights, send a request with a copy of your identity document to info@riordesign.com or by post to: Rior Design – Customer Service, A Minimalist Home Ltd, Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland. We will respond within one month of receipt.

14. Retention periods

Order-related data is retained for the period required by applicable accounting, tax and legal obligations in the relevant jurisdiction, and deleted thereafter unless you have consented to further processing. Marketing data is retained until you withdraw consent.

15. Cookies and consent

Where required by applicable law (including UK PECR, and equivalent laws in Australia and Singapore), we obtain your consent before placing non-essential cookies. You can manage your cookie preferences via the cookie banner displayed on your first visit to the Site.