Privacy notice

Who we are

JJ Auto ("we", "us") sells 3D printed automotive accessories at jjauto.co.uk. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) we are the data controller for the information described here.

What we collect

We only collect what we need to sell to you and fulfil your order:

• Order and contact details: your name, email address, phone number, delivery address, and what you ordered (including any personalised plate text you supply).
• Payment information: handled entirely by Stripe, our payment processor. We never see or store your full card number. We receive only confirmation of payment and the last few digits for reference.
• Messages you send us: the content of emails and enquiries.
• Basic technical data: our host may log standard information such as IP address and browser type for security and to keep the site running.

Why we use it, and our legal basis

• To fulfil your order (processing payment, making your item, delivering it, and providing support). Legal basis: performance of our contract with you.
• To meet legal obligations such as keeping tax and accounting records. Legal basis: legal obligation.
• To answer your enquiries. Legal basis: our legitimate interest in responding to you.

We do not send marketing emails unless you ask us to, and we will never sell your personal information to anyone.

Who we share it with

We share data only with the services needed to run the shop:

• Stripe processes payments.
• Royal Mail (or another carrier) receives your name and delivery address to deliver your parcel.
• Our email and hosting providers store the order and any correspondence securely on our behalf.

Each of these acts either as its own controller (Stripe, the carrier) or as our processor under a contract that requires them to protect your data. Some may process data outside the UK; where they do, they are required to provide protections recognised under UK data protection law.

How long we keep it

We keep order records for as long as needed to provide warranty and returns support and to meet our legal obligations. UK tax law generally requires business and accounting records to be kept for six years, so order and transaction records are normally retained for that period. Enquiry emails that do not lead to an order are deleted once they are no longer needed.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data, where we are not required to keep it.
• Object to, or ask us to restrict, certain processing.
• Ask us to transfer your data to another provider.

To exercise any of these, email hello@jjauto.co.uk. We will respond within one month.

Cookies

This site uses only the cookies needed to make it work, such as remembering the contents of your basket. We do not use advertising or tracking cookies. Payment pages are hosted by Stripe, which sets its own cookies necessary for secure payment and fraud prevention.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.