Privacy notice

Who we are

JJ Auto sells 3D printed automotive accessories at jjauto.co.uk. JJ Auto is a trading name of JHaddy Ventures Limited, a company registered in England and Wales, company number 17228059. JHaddy Ventures Limited ("we", "us") is the data controller for the information described here, for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

We only collect what we need to sell to you and fulfil your order:

• Order and contact details: your name, email address, phone number, delivery address, and what you ordered (including any personalised plate text you supply).
• Payment information: handled entirely by Stripe, our payment processor. We never see or store your full card number. We receive only confirmation of payment and the last few digits for reference.
• Messages you send us: the content of emails and enquiries.
• Basic technical data: our host may log standard information such as IP address and browser type for security and to keep the site running.

Why we use it, and our legal basis

• To fulfil your order (processing payment, making your item, delivering it, and providing support). Legal basis: performance of our contract with you.
• To meet legal obligations such as keeping tax and accounting records. Legal basis: legal obligation.
• To answer your enquiries. Legal basis: our legitimate interest in responding to you.

We do not send marketing emails unless you ask us to, and we will never sell your personal information to anyone.

Who we share it with

We share data only with the services needed to run the shop:

• Stripe processes payments.
• Royal Mail (or another carrier) receives your name and delivery address to deliver your parcel.
• Netlify hosts this website and runs the code that starts your checkout and passes your order to us. Like any web host it sees your IP address and browser details when you visit.
• Resend delivers the order notification email from our site to our own inbox. That email contains your order, name, contact details and delivery address.
• Microsoft provides our business email (Microsoft 365), where order notifications and your messages to us are stored.
• Printify, only if you buy a t-shirt: they print and post it, so they receive your name, delivery address, email and phone number, and what you ordered.

The fonts on this site are served from our own website, and we use no analytics, advertising or social media trackers, so visiting the site does not send your details to anyone else.

Each of these acts either as its own controller (Stripe, the carrier) or as our processor under a contract that requires them to protect your data. Some may process data outside the UK; where they do, they are required to provide protections recognised under UK data protection law.

How long we keep it

We keep order records for as long as needed to provide warranty and returns support and to meet our legal obligations. UK tax law generally requires business and accounting records to be kept for six years, so order and transaction records are normally retained for that period. Enquiry emails that do not lead to an order are deleted once they are no longer needed.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data, where we are not required to keep it.
• Object to, or ask us to restrict, certain processing.
• Ask us to transfer your data to another provider.

To exercise any of these, email hello@jjauto.co.uk. We will respond within one month.

Cookies

This site uses only the cookies needed to make it work, such as remembering the contents of your basket. We do not use advertising or tracking cookies. Payment pages are hosted by Stripe, which sets its own cookies necessary for secure payment and fraud prevention.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.