Privacy Policy

Last updated: [date]

This policy explains how Skreppa Distribution Limited, trading as JRC Components (registered in Ireland, CRO no. 667476) ("JRC Components", "we", "us"), collects and uses your personal information when you visit or make a purchase from jrc-components.com.

We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR). You can contact us about anything in this policy at info@jrc-components.com, or by post at JRC Components, Main St, Ballineen, Co. Cork, P47 XK61, Republic of Ireland.

1. What information we collect

Information you give us. When you place an order, create an account, contact us, apply for a trade account, or sign up to our newsletter, we collect the information you provide: your name, billing and delivery address, email address, phone number, and details of your order or enquiry. We do not see or store your full card details — these go directly to our payment providers (see section 4).

Information collected automatically. When you browse our store, we and our service providers automatically receive certain technical information: your IP address, browser and device type, operating system, the pages you visit, and how you arrived at our site. Some of this is collected via cookies and similar technologies (see section 7).

2. How we use your information, and on what legal basis

We use your information:

• To fulfil your order — processing payment, arranging delivery, sending order and shipping confirmations, and handling returns, refunds and warranty claims. Legal basis: performance of a contract.
• To provide customer support — answering your questions and resolving problems with orders or products. Legal basis: performance of a contract and our legitimate interest in serving our customers.
• To send marketing emails — news about products, restocks and offers, only where you have signed up or otherwise opted in. Legal basis: consent, which you can withdraw at any time using the unsubscribe link in any email or by contacting us.
• To invite reviews — after a purchase we may send you an invitation to review the product you bought, via Judge.me. Legal basis: our legitimate interest in gathering genuine customer feedback. You can opt out at any time.
• To improve our store and advertising — understanding how visitors use our site and measuring the effectiveness of our advertising, using analytics and advertising tools (see section 7). Legal basis: consent (for cookies and tracking pixels).
• To meet our legal obligations — keeping transaction records for tax and accounting purposes, and responding to lawful requests from authorities. Legal basis: legal obligation.
• To prevent fraud and abuse — screening transactions for fraud and enforcing our Terms of Service. Legal basis: our legitimate interest in protecting our business and customers.

We do not sell your personal information.

3. Who we share your information with

We share personal information only where needed to run our business:

• Shopify Inc., which hosts our online store and stores customer and order data on our behalf. You can read Shopify's privacy policy at https://www.shopify.com/legal/privacy.
• Payment providers — Shopify Payments and PayPal — which process your payment. Your card or PayPal details are handled by these providers under their own privacy policies and PCI-DSS security standards; we do not store your card details.
• Delivery carriers — including DHL, Deutsche Post, An Post, FedEx and the postal service in your destination country — which receive your name, delivery address and contact details in order to deliver your parcel.
• Brevo, our email marketing platform, which sends our newsletter to subscribers on our behalf.
• Judge.me, our reviews platform, which sends post-purchase review invitations on our behalf.
• Analytics and advertising providers — Google (Google Analytics, Google Ads) and Meta (Facebook/Instagram) — as described in section 7, where you have consented to the relevant cookies.
• Professional advisers and authorities — accountants, legal advisers, and public authorities where we are required by law to disclose information.

If our business is acquired or merged with another company, customer information may be transferred to the new owners so that we may continue to serve you; this policy would continue to apply.

4. Payment security

If you pay by card, your payment is processed by our payment providers over encrypted (SSL/TLS) connections in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Transaction data is retained only as long as necessary to complete the transaction and meet our legal record-keeping obligations.

5. International transfers

Some of our service providers (including Shopify, Google, Meta and PayPal) are located in, or store data in, countries outside the European Economic Area, including the United States. Where personal data is transferred outside the EEA, we rely on safeguards recognised under the GDPR, such as the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses, as implemented by the relevant provider.

6. How long we keep your information

We keep order and transaction records for as long as required for tax and accounting purposes under Irish law (currently six years after the end of the relevant tax year). We keep customer service correspondence for as long as reasonably needed to handle any follow-up, warranty or dispute. Newsletter data is kept until you unsubscribe or ask us to delete it. Where information is no longer needed, we delete or anonymise it.

7. Cookies and tracking

Our site uses cookies and similar technologies:

• Essential cookies (set by Shopify) that make the store work — keeping you logged in, remembering your cart, and securing checkout. These do not require consent.
• Analytics cookies (Google Analytics) that help us understand how visitors use the site.
• Advertising cookies and pixels (Meta pixel, Google Ads) that help us measure and improve our advertising.

Analytics and advertising cookies are only set with your consent, which you can give or refuse via the cookie banner when you first visit the site, and change at any time via the cookie settings link on our site. You can also control cookies through your browser settings.

8. Your rights

Under the GDPR you have the right to: access the personal information we hold about you; have inaccurate information corrected; have your information erased; restrict or object to our processing of it; receive your information in a portable format; and withdraw any consent you have given, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@jrc-components.com. We will respond within one month.

If you are unhappy with how we have handled your information, you also have the right to lodge a complaint with the Irish supervisory authority: the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (www.dataprotection.ie) — or with the supervisory authority in your own EU country.

9. Age

Our store is not directed at children. By using this site, you represent that you are at least the age of majority in your place of residence.

10. Changes to this policy

We may update this policy from time to time. Changes take effect when posted on this page, and material changes will be flagged here. Please review this page periodically.

Questions and contact

To access, correct or delete your personal information, register a complaint, or ask anything about this policy, contact us at info@jrc-components.com.