Personal data means any information relating to an identified or identifiable individual. It does not include information where the identity has been removed (anonymous data).

We collect and process personal data when you interact with us, whether online, in store, or through our customer support channels. This includes data collected directly from you, when you access or use our website, and data received from third parties, see the section “How do we collect your personal data?” below for further details.

The categories of data we collect includes:

• Personal and contact details.

  
  

  This may include:

  • Your name

  • Date of birth

  • Email address

  • Delivery address

  • Postcode

  • Telephone number

  • Other contact, transaction, or registration details

    
    
    

• Account information.

  
  

  When you create or maintain a Harvey Norman account, online or in-store, we may collect:

  • Personal data and contact details.

  • Information required to manage your account including, login details, order history, delivery preferences, communication settings, and records of Customer Service interactions.

    
    
    

• Transaction and purchase information, online or in-store.

  
  

  When you make a purchase online or in store (including Click & Collect, home delivery, and car delivery), we may collect the following information:

  • Purchase and transaction details, such as products purchased, prices paid, order references, and selected delivery or collection store.

  • Payment information, including payment method and anonymised payment data.

  • Customer and account details, such as name, contact details, billing and delivery addresses, and user ID.

  • Technical information, including IP address and device or session identifiers.

  • Click & Collect delivery details, including vehicle registration number where delivery to your car is selected, are collected solely to facilitate order fulfilment and are retained only for as long as necessary for this purpose.

    
    
    

• Data collected through your use of our website.

  
  

  When you browse the website, the data we collect includes:

  • Website usage data, including pages viewed, interactions with website features, and the time and duration of visits.

  • Location data provided by you, or accessed with your consent through your device or browser, is used solely to enable store locator functionality and to show the nearest store with relevant stock availability. This processing is for specific functional purposes only and is separate from consent for marketing or analytics cookies. You may alternatively enter your address manually.

  • Technical data, including IP address, browser type, device type, and operating system.

  • Cookie and similar tracking data used to operate the website, remember preferences, and analyse website performance. See our Cookie Policy .

    
    
    

• Data you provide during interactions with us.

  
  

  When you interact with us, such as through Customer Services, product reviews, surveys, or marketing communications, you may provide personal data directly to us. This includes data provided when you:

  • Contact our Customer Service teams by phone, email, live chat, or online enquiry forms.

  • Submit product reviews or ratings on our website.

  • Participate in surveys, competitions, or promotions.

  • Subscribe to or interact with marketing communications, such as emails or newsletters.

  • Request information about our products, services, orders, or stores

  • Provide feedback, make complaints, or raise service‑related queries.

  
  

  The personal data collected during these interactions may include, for example:

  • Your name and contact details (such as email address and telephone number).

  • Account or user ID, where you have an online or in-store account

  • Order reference numbers and details relating to purchases or returns.

  • The content of your communications, including messages, reviews, feedback, or survey responses.

  • Marketing preferences, such as whether you opt in or out of certain communications.

  • Interaction history, including records of correspondence with our Customer Service teams.

    
    
    

• Financial, employment, and identity data.

  
  

  Where relevant, we may collect personal data relating to your financial circumstances, employment, or identity. This may include:

  • Employment information, such as your employment status, employer name, or occupation.

  • Financial information, including details about your financial position relevant to the product or service requested.

  • Identity information, taken from official identification documents such as a passport or driving licence, where verification of identity is required.

  • This information may be collected and processed when assessing applications for insurance or loan products offered through selected third-party providers and partners. It is used solely for the purpose of evaluating your application and meeting legal or regulatory requirements.

    
    
    

• Communication interaction information.

  
  

  This may include:

  • Telephone contact information, such as phone numbers used when contacting us and records of calls to our Customer Service Teams.

  • Email interaction information, including records of interactions with our Online Services through links contained in emails sent by us.

    
    
    

The categories of personal data described in this Privacy Notice are not exhaustive. Depending on how you interact with us, we may collect additional personal data where necessary.

Whenever we collect, use, store, or share your personal data, we do so in accordance with the GDPR and all other applicable data protection laws. We ensure that personal data is processed fairly, lawfully, and transparently, and only for specified and legitimate purposes.

If you choose not to provide us with your personal data, we may not be able to provide the information, goods or the service you may require, or to fulfil one or more other purposes of collection of your personal data.

Where personal data is optional, this will be made clear at the point of collection.

Online payments on www.harveynorman.ie are processed securely by Shopify, our e‑commerce platform and payment gateway provider. Payment methods available include PayPal, Shop Pay, Klarna, Humm, Revolut, and Apple Pay. We do not collect or store your credit or debit card details, as all payment information is processed directly by these third‑party payment providers in accordance with their own privacy policies and security standards. Please refer to the relevant provider’s Privacy Notice for further information on how your payment data is handled.

We or our third-party service providers may collect personal data in the following circumstances:

• Directly from you, when you choose to provide it to us.

• When you purchase a product or service in store or online.

• When you create or register an account in store or online.

• When you place an order through our website.

• When you enter a competition, promotion or a survey we or our third party run.

• When you access, browse or interact with our website, including through cookies or similar technologies.

• When you interact with the Customer Service Team.

• When you ask to email you on information on product or service.

• When you sign-up for marketing communications, such as emails about our products or services.

• When you submit a product review or comment.

• When you fill in any forms such as incident or accident from in-store or online.

• When a third-party shares information with us, where you have given them permission to do so.

• When we arrange delivery, servicing or repair of a product on your behalf.

• When you use our initiatives to improve your customer experience such as, store locator or Click&Collect.

• When you engage with our social media platforms.

• Where we operate CCTV systems, we collect and process video footage for safety and security purposes on the basis of our legitimate interests and is retained only for a limited period.

• From other lawful sources, where permitted by applicable data protection laws.

In accordance with the GDPR, Harvey Norman processes personal data only where we have a valid lawful basis to do so. Depending on your interaction with us, for example, when you purchase products in store or online, arrange delivery, contact customer support, or engage with our marketing, we may rely on one or more of the following lawful bases:

• Necessary for compliance with a legal obligation: we are subject to certain legal requirements which may require us to process your data. We may also be obliged by law to disclose your data to a regulatory body or law enforcement agency. This includes retaining transaction and payment records for tax, accounting, and audit purposes, complying with consumer protection and product safety legislation, and meeting our obligations in relation to warranties, recalls, or mandatory safety notices.

• Performance of Contract: We may process your personal data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. This includes using your contact, billing, and payment details to complete purchases made in store or online, arranging delivery, installation, or collection of products, and managing orders, warranties, repairs, replacements, or returns. It also includes processing applications for finance or payment plans with our approved finance complete your transaction or provide certain services.

• Necessary for the purposes of our legitimate interests: either we, or a third party, will need to process your personal data for the purposes of our (or a third party’s) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected. Our legitimate interests include responding to requests and enquiries from you or a third party, fulfilling sales, optimising our website and customer experience, informing you about our products and services and ensuring that our operations are conducted in an appropriate and efficient manner.

• Consent: In certain circumstances, we rely on your consent to process personal data. This applies where you have actively agreed to specific processing activities, such as receiving marketing communications by email or SMS, participating in competitions or promotions, or allowing the use of non essential cookies and similar technologies on our website. Where consent is required, it will be freely given, specific, informed, and unambiguous, and you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

We may disclose your personal data to any of our related entities, which includes our subsidiaries, our ultimate holding company and its subsidiaries.

We may share your personal data with trusted third party service providers where necessary to deliver our products and services, operate our business, or meet our legal obligations. These service providers may include organisations that assist us with research, mail, advertising, delivery, security, professional advisory services, banking, payment processing, or technology services.

Our online store is hosted by Shopify Inc., which provides the e commerce platform that allows us to sell our products and services to you.

Shopify processes personal data on our behalf for purposes such as website hosting, order management, payment processing, and customer account administration. These service providers are permitted to process personal data only as necessary to perform services for us and are contractually required to protect your personal data.

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.

We may also share personal data with law enforcement, regulatory authorities, fraud prevention agencies where required or permitted by law, or to protect our customers, business, systems, and legal rights.

Before sharing any personal data, we conduct appropriate due diligence on our third party service providers inside or outside of EU/EEA and ensure that robust contractual arrangements are in place. These arrangements require third parties to safeguard your personal data and to use it only for the specific purposes for which it was provided.

We may use and disclose your personal data for the following purposes:

• (a) To facilitate and process your orders, including payment, delivery, Click & Collect, and returns.

• (b) To carry out or respond to your requests, enquiries, or instructions.

• (c) To share with our third party service providers where necessary to assist us in providing, maintaining, and improving our services, analysing sales trends, better understanding our customers’ needs, and developing, improving, and marketing our goods and services.

• (d) For regulatory reporting and to comply with our legal and statutory obligations.

• (e) To share with regulatory bodies, law enforcement officials, or relevant authorities for the purposes of fraud prevention, security, and protection of our customers, employees, and business.

• (f) Where you have provided your consent (or where we have another lawful basis for doing so), to include your data in databases maintained by us or our third party service providers for the purpose of direct marketing communications about promotions, products, and services that may interest you.

• (g) To seek your feedback in relation to customer satisfaction, surveys, and our ongoing relationship with you.

• (h) To share with our related entities for internal accounting, reporting, and administrative purposes.

• (i) To monitor, review, and improve the quality, performance, and standard of the services we provide.

• (j) To share with our successors and/or assigns, including any party that may acquire all or part of our business.

• (k) To better understand your preferences, shopping behaviour, and interests to personalise and improve your customer experience.

We will not disclose your personal data except where there is a lawful basis to do so, including the circumstances described above or where required or permitted by law.

Any permitted handling of personal data under any exemptions under the GDPR or any other applicable legislation will take priority over this Privacy Notice to the extent of any inconsistency.

You have certain rights in relation to the personal data we hold about you. Details of these rights and how to exercise them are set out below. We will require evidence of your identity before we are able to act on your request.

• Right of Access: You have the right at any time to ask us for a copy of the personal data about you that we hold, and to confirm the nature of the personal data and how it is used. Where we have good reason, and if the GDPR permits, we can refuse your request for a copy of your personal data, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.

• Right of Rectification: If personal data we hold about you is not accurate, or is out of date or incomplete, and requires amendment or correction, you have a right to have the data rectified, updated or completed. You can let us know by contacting us at the address or email address set out in the “Contact us about Privacy” section below.

• Right of Erasure: You may request that we erase personal data we hold about you where there is no longer a lawful basis for us to retain it. This may apply, for example, where the personal data is no longer required for the purpose for which it was collected, or where processing is based on your consent and that consent has been withdrawn.

• Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as the lawful basis for processing. We will consider your request and will stop processing unless we can demonstrate compelling legitimate grounds that override your rights and interests. You also have the right to object to the use of your personal data for direct marketing purposes at any time.

• Right to Restriction of Processing: In some circumstances, you may request that we restrict the processing of your personal data. This may apply, for example, where you have challenged the accuracy of the personal data and we are verifying the information, or where you have objected to processing and we are considering your request.

• Right of Data Portability: You may request a copy of personal data that you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible, you may also request that we transfer this data directly to another organisation on your behalf. The right to data portability is subject to certain legal and technical limitations, including the technical compatibility of another organisation’s systems.
  
  

  This right applies to personal data that:

  • You have provided to us previously; and

  • Is processed by us using automated means.

  
  

• Right to withdraw consent: Where we rely on your consent as the lawful basis for processing, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

You can exercise any of the above rights by contacting us at the address or e-mail address set out in the “Contact us about Privacy” section below. You can exercise your rights free of charge.

Most of the above rights are subject to limitations and exceptions. We will provide reasons if we are unable to comply with any request for the exercise of your rights.

We will only retain your personal data for as long as is necessary for the purpose or purposes for which we have collected it. The criteria that we use to determine retention periods will be determined by the nature of the data and the purposes for which it is kept. For example, if we receive your information through a competition entry, we will retain your data for as long as is necessary to administer the competition. In certain circumstances, once we have deleted or anonymised your data, we may need to retain parts of it (for example, your email address), in order to comply with our obligations under GDPR or other legislation, or for fraud detection purposes.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of support services.

As our website is hosted on the Shopify platform, your personal data may be stored and processed outside of Ireland, including in countries outside the European Economic Area (EEA). For more information please refer to Shopify Privacy Notice.

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR, such as adequacy decisions or standard contractual clauses approved by the European Commission.

We have implemented appropriate physical, electronic and managerial security procedures to protect personal data from loss, misuse, alteration or destruction. Access to your personal data is limited to those who specifically need it to conduct their responsibilities.

We and our third-party service providers take reasonable steps to destroy or permanently de-identify your personal data where it is no longer required and to protect your personal data from unauthorised access, disclosure, loss, misuse and alteration.

We take reasonable steps to ensure that the data we hold about you is accurate, complete and up-to-date. To assist us in doing this, please provide us with the correct data and inform us if your details change. You may update your membership details at any time by accessing your membership account or by contacting our Customer Services Team. If we deny you access to your personal data, we will provide you with the reason for such denial.

While care is taken to protect your personal data received from you via our website, unfortunately no data transmission over the Internet is guaranteed as 100% secure. Accordingly, we cannot ensure or warrant the security of any information you send to us or receive from us online. This is particularly true for information you send to us via email as we have no way of protecting that information until it reaches us. Once we receive your personal data, we are required to protect it in accordance with the GDPR and all other applicable legislation.

If you provide personal data relating to another individual, you should ensure that you are entitled to do so and that the individual has been informed that their information may be provided to Harvey Norman.

You should also ensure that the individual is informed of this Privacy Notice and how their personal data may be processed.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

If you follow us or interact with us on any of our pages on third party social media platforms, such as Facebook, Instagram, Twitter, Pinterest, Houzz, You Tube or Linkedin, the information that you provide will be subject to the third party’s own privacy policies. Please check these policies before you submit any personal data to these networks.

You have the right at any time to object to the processing of your personal data for direct marketing purposes. We will inform you, at the point of data collection, if we [OR10.1]intend to use your personal data for marketing or to disclose it to third parties for such purposes. You can exercise your right to prevent such processing by not selecting the relevant opt in boxes on our forms.

Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. You can do this by using the unsubscribe link included in any marketing email, SMS, or newsletter, by responding “unsubscribe” where applicable, or by contacting our Customer Services Team using the details provided in the “Contact Us About Privacy” section below.

From time to time it may be necessary for us to review and revise this Privacy Notice. We may update this Privacy Notice from time to time to reflect changes in our business operations, legal obligations, or regulatory requirements. Any updated version will be published on our website.

We use cookies and similar technologies to ensure our website functions properly, to analyse website usage, and to enhance the user experience. Cookies may collect data such as your device, browser type, and interactions with our website. For full details on the cookies we use, their purposes, and how you can manage or withdraw your consent, please refer to our Cookie Policy.

Unless otherwise defined in this Privacy Notice, capitalised terms have the meanings given to them in the Website Terms of Use and Online Sale Terms.

If you are concerned with the way your personal data has been handled, please contact us by email at [email protected]. Alternatively please contact us by mail as set out below. If your personal data has not been handled in an appropriate way, we will take steps to remedy your concerns in a reasonable time.

Data Protection Officer
Harvey Norman Trading (Ireland) Limited
Brent House
Swords Business Park
Swords Co. Dublin
K67 Y2V0

Telephone: + 353 1 8704700

Fax: + 353 1 870 4799

Email: [email protected]

If you are unhappy about our use of your Personal Data, you can contact us at the address or e-mail address above. You are also entitled to lodge a complaint with the Data Protection Commission (DPC) using any of the below contact methods:

Telephone: +353 (01) 765 01 00

Online form: Data Protection Commission

Postal Address: Data Protection Commission
6 Pembroke Row
Dublin 2
D02 X963