Privacy Policy

ÓR (“ÓR”, “we”, “us”) operates the ÓR Irish Jewellery Network — a members-only platform that verifies jewellers, publishes live precious-metal pricing, and facilitates the buying and selling of gold and jewellery within Ireland.

For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, ÓR is the data controller for the personal data described in this policy.

We only collect what we need to run the network and keep it trusted:

• Account details— your name and email address when you create an account, plus a securely hashed password (we never store your password in plain text).
• Jeweller verification data— business name, CRO number, county, and years in trade, submitted so we can confirm your trade credentials before granting access.
• Transaction records— details of sales and valuations you record or request through the platform.
• Price-alert preferences— the thresholds you set and, if you opt in to notifications, a push subscription token for your device or browser.
• Technical data— basic log and device information needed to operate the service securely and reliably.

• To create and manage your member account and authenticate your sign-ins.
• To verify your jeweller credentials and maintain the integrity of the network.
• To provide live gold and silver pricing and send the price alerts you request.
• To process and record valuations and sales you initiate.
• To communicate with you about your account, verification status, and the service.
• To protect against fraud and keep the platform secure.

We rely on the following GDPR legal bases:

• Contract— to provide the membership and services you sign up for.
• Consent— for push notifications and price alerts, which you can withdraw at any time.
• Legitimate interests— to keep the network trusted, secure, and free from fraud.
• Legal obligation— where we must retain records to comply with Irish law.

We do not sell your personal data. We share it only with trusted providers who process it on our behalf, under contract:

• Vercel— application hosting and delivery.
• Neon— secure database hosting for your account and records.
• metals.dev— live precious-metal market pricing (no personal data is sent).
• Apple, Google & Mozilla push services— to deliver the notifications you opt in to.
• WhatsApp (Meta)— only if you choose to contact us through WhatsApp.

We keep your personal data only for as long as your account is active or as needed to provide the service, resolve disputes, and meet our legal obligations. When data is no longer required, we securely delete or anonymise it.

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

We protect your data with encryption in transit, hashed passwords, scoped access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable and appropriate measures to safeguard your information.

ÓR is a trade network intended for jewellery professionals and adults. It is not directed at anyone under 18, and we do not knowingly collect their data.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify you through the app.

For any privacy question or to exercise your rights, contact ÓR at:

• Email: privacy@ór.ie
• WhatsApp / phone: 085 115 2902