Privacy Policy

Last updated: 29.04.2026

This Privacy Policy explains how PocketBuy Limited trading as PocketBuy (“PocketBuy”, “we”, “us”, “our”) collects, uses, stores and protects personal data when you use our website, contact us, interact with our vending or micro-market services, or request support.

Data controller: PocketBuy Limited
Registered address: 28 Woodbine Avenue, Blackrock, County Dublin, Ireland
Email: support@pocket-buy.com
Phone: +353-857-226-509

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Data Protection Act 2018, and applicable Irish ePrivacy rules.

This Policy applies to personal data collected through our website; contact forms, email, phone and other communications; commercial enquiries from potential host locations, suppliers and partners; customer support relating to vending transactions, refunds and machine issues; and transaction, device and service data generated through our connected vending and micro-market operations.

Depending on how you interact with us, we may collect:

A. Contact and enquiry data
Your name, business name, job title, email address, phone number, address, and the contents of any enquiry or correspondence you send to us.

B. Host, supplier and partner data
Business contact details, site details, access requirements, commercial terms, billing details and related communications.

C. Transaction and support data
Transaction reference, machine ID, date/time of purchase, product purchased, amount charged, refund request details, complaint details, and correspondence relating to service issues.

D. Website and device data
IP address, browser type, device type, operating system, referring pages, timestamps, cookie identifiers and similar website usage data.

E. Security and fraud-prevention data
Information reasonably necessary to detect misuse, prevent fraud, secure our systems, investigate incidents, enforce our terms, and protect our staff, customers, locations and partners.

F. Payment data
We do not store full payment card details. Card payments are processed by third-party payment providers. We may receive limited payment-related information such as masked card details, payment status, transaction references and chargeback information.

We collect personal data directly from you when you contact us or complete a form; from your employer or organisation where you act on its behalf; from payment and technology providers involved in processing transactions or operating our services; automatically through cookies and similar technologies on our website; and, in limited cases, from public sources such as company websites, professional directories or social media where relevant to a genuine business enquiry.

We use personal data only where we have a lawful basis to do so. The lawful bases we rely on include contract, steps prior to entering a contract, legal obligation, legitimate interests, and, where required, consent.

We may use your data to respond to enquiries and communicate with you; assess potential host locations, suppliers and service partners; provide, operate, maintain and improve our website, vending and micro-market services; process transactions, refunds and support requests; monitor machine performance, uptime, stock and service issues; maintain records required for accounting, tax, traceability, product recall and regulatory compliance; detect, investigate and prevent fraud, payment abuse, security incidents and misuse; establish, exercise or defend legal claims; and send service communications or, where legally permitted, relevant business updates.

Where we rely on legitimate interests, these interests include operating and growing our business, keeping our services secure, servicing commercial enquiries, maintaining records, and improving service quality.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal will not affect processing already carried out lawfully before withdrawal.

Our website may use cookies and similar technologies for functionality, security, performance measurement and user experience.

Where cookies are strictly necessary to provide a service you have expressly requested, we may use them without consent. For analytics and other non-essential cookies, we will ask for your consent before placing them on your device. You can change your preferences at any time through our cookie settings or browser controls.

A separate Cookie Policy may also apply and should be read together with this Privacy Policy.

We may share personal data, where necessary, with payment processors and payment service providers; website hosting, analytics, IT, cloud and software service providers; machine, telemetry, remote management and support providers; accountants, insurers, professional advisers and auditors; logistics, maintenance and operational support providers; regulatory authorities, law enforcement or courts where required by law; and actual or proposed purchasers, investors or advisers in connection with a corporate transaction, subject to appropriate confidentiality measures.

We do not sell your personal data.

Some of our service providers may process personal data outside the European Economic Area. Where that happens, we will take steps required by data protection law to ensure that appropriate safeguards are in place, such as adequacy decisions or approved contractual safeguards, and we will provide further information on request.

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including to satisfy legal, accounting, tax, regulatory, safety and dispute-resolution obligations.

Retention periods may vary depending on the type of data, but typically include:
• enquiry and business correspondence: for as long as needed to deal with the enquiry and a reasonable follow-up period;
• customer support and refund records: for as long as needed to resolve the issue and manage disputes;
• transaction and accounting records: for the period required under applicable tax, accounting and legal rules;
• website logs and security records: for as long as reasonably necessary for security, diagnosis and system integrity;
• food traceability and recall-related records: for as long as required to comply with food law and safety obligations.

Where we supply food or drink through vending or micro-market services, we may process data necessary to manage traceability, complaints, withdrawals or recalls, and to investigate product issues.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the data and the risks involved.

Subject to applicable law, you may have the right to request access to your personal data; request correction of inaccurate or incomplete data; request deletion of your data; request restriction of processing; object to certain processing, including processing based on legitimate interests; request portability of data you provided to us in certain cases; and withdraw consent where processing is based on consent.

To exercise your rights, contact us at support@pocket-buy.com

You also have the right to lodge a complaint with the Data Protection Commission in Ireland.

Our website and services are not directed to children as a primary audience. We do not knowingly collect personal data directly from children through our website except where strictly necessary to handle a customer support issue or as otherwise permitted by law.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties. You should review their own privacy notices before providing personal data.

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the revised “Last updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.

If you have any questions about this Privacy Policy or how we handle personal data, contact:

PocketBuy Limited
Email: support@pocket-buy.com
Address: 28 Woodbine Avenue, Blackrock, County Dublin, Ireland
Phone: +353-857-226-509