Legal
Privacy Policy
This explains what personal information Heava collects, why, who we share it with, and the rights you have. We keep it plain and honest.
Last updated: June 2026
Who we are
Heava designs and sells solid hardwood bedroom furniture, with a showroom at 70 Mounttown Road Lower, Monkstown, Co. Dublin, A96 R6C9. Heava is a trading name of The Spinery Limited, a company registered in Ireland (company number 578187), registered office 70 Lower Mounttown Road, Dún Laoghaire, Co. Dublin — the data controller for the information described here. Heava and The Spinery are sister brands that share the showroom and a single booking system, which is why some of your details are handled through that shared system (see "Who we share it with" below). To contact us about your data, email hey@heava.co .
What we collect
We only collect what we need. In practice that means:
- When you book a showroom visit: your name, email address, phone number, the products you're interested in (if you tell us), and any notes you add.
- When you place an order: your name, delivery and billing address, email, phone number and the items you buy. Your payment is handled securely by Stripe — we never see or store your full card number.
- If you contact us by phone or email: whatever you choose to share.
Website analytics. With your consent, we use Google Analytics (GA4) to understand, in aggregate, how our site is used so we can improve it. We do not currently run advertising cookies; if we start using Google Ads in future we'll only do so with your consent and will update this policy first. These tools set cookies and send data to Google only after you allow them in our cookie banner — if you don't, Google's tags run in a limited, cookieless mode or not at all. You can change or withdraw your choice at any time via "Cookie settings" at the bottom of any page, or see our Cookie Policy for the full list.
Our booking form also uses Cloudflare Turnstile to block spam, which may store a short-lived technical token — it does not track you across sites.
Why we use it, and our legal basis
- To arrange and confirm your visit — because it's necessary to provide the service you asked for, and our legitimate interest in running the showroom.
- To reply to your enquiries — our legitimate interest in responding to you.
- To send you marketing (new designs, occasional offers) — only if you opt in, on the basis of your consent. You can withdraw it any time (see below).
- To fulfil your order — to take payment, arrange delivery and provide after-sales support, because it's necessary to perform our contract with you.
- To measure our website (Google Analytics; Google Ads only if we run it in future) — only with your consent, given through our cookie banner and withdrawable at any time.
Cookies and consent
When you first visit, we ask which cookies you're happy with. Strictly necessary cookies (and our spam check) are always on because the site needs them to work. Everything else stays off until you opt in:
- Analytics — Google Analytics (e.g.
_ga) to see which pages are useful so we can improve them. - Advertising — we don't currently use advertising cookies. If we run Google Ads in
future (e.g.
_gcl_au), it will only be with your consent, and we'll update our Cookie Policy first.
We use Google Consent Mode v2, so Google's tags respect your choice. You can review or change your settings any time using "Cookie settings" at the bottom of any page, and we keep a record of the consent you give. For the full list of cookies and how long each lasts, see our Cookie Policy.
Who we share it with
We don't sell your data. We share it only with the service providers that help us operate, acting on our instructions:
- The Spinery — our sister company. We share the Monkstown showroom and a single booking system, so your booking details are handled through that shared system.
- Stripe — our payment processor; it securely handles your card payment when you check out. We don't receive or store your full card details.
- Google — appointments are stored in Google Calendar and we use Google email; with your consent, Google Analytics processes site-usage data (and Google Ads, only if we run it in future).
- Cloudflare — hosts this website and provides the anti-spam check on our forms.
How long we keep it
We keep your booking and enquiry details for as long as needed to manage your visit and our relationship with you, and then delete them. Order and payment records are kept for as long as tax and accounting law requires (generally six years). If you opt into marketing, we keep your contact details until you unsubscribe.
Your rights
Under data-protection law you can ask us to:
- see the personal data we hold about you (access);
- correct anything that's wrong (rectification);
- delete it (erasure), or restrict or object to how we use it;
- provide a copy to take elsewhere (portability);
- stop marketing to you — you can unsubscribe at any time, or just email us.
To exercise any of these, email hey@heava.co . If you're not happy with how we've handled your data, you can complain to the Irish Data Protection Commission (dataprotection.ie).
Changes to this policy
We may update this policy as our services change. We'll post the new version here with an updated date.