Food & Drink · Roscommon

GDPR Compliance for Fishmongers in Roscommon

GDPR applies to every fishmonger in Ireland, whether you’re based in Roscommon Town or anywhere across Roscommon. With approximately 3,600 SMEs in the county, the DPC has made it clear that enforcement applies to businesses of all sizes. Let’s walk through what compliance looks like for your business.

Join 2,000+ Irish businesses already protected

Do fishmongers in Roscommon need to comply with GDPR?

Yes. Every fishmonger in Roscommon that processes personal data of EU residents must comply with GDPR. This includes collecting customer names, email addresses, payment details, or any information that can identify a person. Non-compliance can result in fines of up to €20 million or 4% of annual global turnover. The Data Protection Commission (DPC) in Ireland is actively enforcing these rules.

RISK ASSESSMENT

Key GDPR Risks for Fishmongers

Keeping informal customer contact lists in notebooks or spreadsheets without any security measures

Collecting wholesale client business and personal contact data without a privacy notice

Storing customer allergy data (e.g., shellfish allergies) without treating it as special category data

Using customer phone numbers collected for orders to send unsolicited promotional messages

Failing to secure online ordering system databases against breaches

DATA INVENTORY

Personal Data Your Fishmonger Processes

Customer names and phone numbers
Delivery addresses
Email addresses
Shellfish and seafood allergy information
Payment details
Wholesale client business and contact details
Order history and preferences

FREE ASSESSMENT

Find out your GDPR score in 2 minutes

See exactly where your Fishmonger in Roscommon stands on GDPR compliance — no signup required.

REQUIRED DOCUMENTS

Required GDPR Policies & Documents

Every Fishmonger in Ireland needs these documents to demonstrate GDPR compliance.

Customer privacy notice for retail and wholesale clients
Data retention policy for customer orders and contact records
Data processing agreement with delivery and e-commerce providers
Cookie policy for any website or online shop
Staff data handling procedures

STEP BY STEP

GDPR Compliance Steps for Fishmongers

01

Create and display a privacy notice that covers both retail customers and wholesale clients, explaining what data you collect and your lawful basis.

02

Treat any allergy information — particularly shellfish allergies — as special category health data requiring explicit consent under Article 9.

03

Secure your customer contact lists, whether digital or paper, so that only authorised staff can access them.

04

Set clear retention periods: delete casual customer order data after fulfilment, and review wholesale client records annually.

05

Ensure your online ordering platform has appropriate security measures and that you have a data processing agreement with the provider.

06

Obtain specific consent before using customer contact details for marketing purposes such as weekly catch updates.

07

Document your data processing activities in a simple record of processing activities, even if you are not formally required to maintain one.

COMMON PITFALLS

Common GDPR Mistakes Fishmongers Make

Keeping a phone list of regular customers pinned to the wall behind the counter where it is visible to other staff and customers.

Not recognising that shellfish allergy notes on customer records constitute health data subject to stricter GDPR rules.

Sending weekly text updates about fresh catches to customers who only provided their number for a one-off delivery.

Failing to have any written agreement with the third-party platform used for online seafood orders.

FAQ

Frequently asked questions

Everything you need to know about GDPR compliance for your business.

Contact us

Don't wait for the DPC to come knocking

Every day your Fishmonger in Roscommon operates without proper GDPR compliance is a risk. The DPC is increasing enforcement across Ireland — get ahead of it today.

Join 2,000+ Irish businesses. No credit card required.