Privacy Policy

1. Introduction

JCC Customs & Commercials Ltd. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website jcccustomsandcommercials.com or use our services.

Please read this Privacy Policy carefully. By using our website or services, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our website or services.

2. Company Information

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

3. Information We Collect

We collect information that you provide directly to us, including:

3.1 Personal Information

• Name: Your full name as provided in contact forms
• Email Address: Your email address for communication purposes
• Phone Number: Your telephone number for contact purposes
• Postal Address: Your address if provided for service delivery

3.2 Vehicle Information

• Vehicle make, model, year, and type
• Vehicle registration details (if provided)
• Service requirements and specifications
• Images of your vehicle (if uploaded via contact form)

3.3 Service Information

• Service type requested (repairs, resprays, rust treatment, etc.)
• Service-specific questions and answers
• Messages and enquiries
• Project requirements and timelines

3.4 Automatically Collected Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies (see Section 7)

4. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Services: To process your enquiries, provide quotations, and deliver our vehicle repair and modification services
• To Communicate: To contact you via phone, email, SMS, text message, or WhatsApp regarding your enquiry, service updates, or to respond to your questions
• To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes
• To Protect Our Rights: To protect our rights, property, and safety, and that of our customers and others
• For Business Administration: To manage our business operations, including customer records and accounts

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal bases:

• Consent: When you submit a contact form, you provide explicit consent for us to process your data and contact you via phone, email, SMS, text message, or WhatsApp
• Contractual Necessity: To perform our contract with you for the provision of services
• Legitimate Interests: To prevent fraud and ensure website security
• Legal Obligation: To comply with applicable laws and regulations

7. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Legal Requirements: When required by law or to respond to legal process, including requests from public and government authorities
• Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business
• Protection of Rights: To protect our rights, privacy, safety, or property, and/or that of our customers or others

8. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your data is stored on secure servers and is protected by industry-standard security measures. We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Improve website functionality and performance
• Provide security features (e.g., Cloudflare Turnstile for form protection)

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

10. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure: You have the right to request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data
• Right to Data Portability: You have the right to request transfer of your data to another service provider
• Right to Object: You have the right to object to processing of your personal data
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within one month.

11. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and respond to your enquiries
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our rights

Generally, we retain contact form submissions and customer records for a period of 7 years from the date of last contact, in accordance with UK business record-keeping requirements. After this period, data will be securely deleted or anonymized.

12. International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. We ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

12a. Third-Party Data Processors

We use the following third-party service providers to help us operate our website and deliver our services. These providers may process your data on our behalf:

• Supabase Inc. (Database hosting) - US-based, certified under the EU-US Data Privacy Framework. Processes: contact form submissions, customer data. Privacy Policy
• Vercel Inc. (Website hosting) - US-based, GDPR compliant with Standard Contractual Clauses. Processes: website access logs, IP addresses. Privacy Policy
• Cloudflare Inc. (CDN and security) - US-based, GDPR compliant with Binding Corporate Rules. Processes: website traffic data, IP addresses for security. Privacy Policy

All our third-party processors are bound by data processing agreements that require them to protect your data in accordance with UK GDPR requirements.

13. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our website or services after any changes constitutes your acceptance of the updated Privacy Policy.