Privacy Policy and Cookie Policy

Who we are

This privacy policy explains how J C Plastics Limited (trading as JCP Hardware) collects, uses and protects any information you give us when you use our website, place an order, or otherwise interact with us.

For the purposes of UK data protection law, J C Plastics Limited is the Data Controller for personal data collected through jcphardware.co.uk.

Information you give us

When you place an order, create an account, or contact us, we may collect:

• Name
• Billing and delivery address
• Email address
• Phone number (used for delivery notifications and order queries)
• Order details and purchase history
• Account login details if you create an account
• Any other information you choose to send us (for example, photos of parts for identification)

Information collected automatically

When you visit our site, we automatically collect:

• Technical data such as IP address, browser type, device type and operating system
• Pages visited, time spent, referring site, and interactions with our site
• Cookie data (see the Cookies section below)

Payment card details

We do not store your full credit or debit card details on our systems. Card payments are processed securely by our payment provider, who handle the card data under their own PCI-DSS compliant systems.

We only send occasional marketing emails (sent directly from sales@jcphardware.co.uk) to customers who have actively subscribed. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing us or clicking the link.

• Delivery couriers — Royal Mail, Evri and Parcelforce receive your name, delivery address and phone number so they can deliver your order.
• Payment providers — card details are processed directly by our payment provider; we don't see or store full card numbers.
• Our website platform (BigCommerce) — hosts our online store and processes order data on our behalf.
• Order management system (Linnworks) — helps us pick, pack and despatch your order.
• Email and productivity tools (Google Workspace) — used for email communication and business operations.
• Analytics (Google Analytics) — anonymised usage data helps us understand how the site is used.
• Legal and regulatory bodies — where we are required by law to share information (for example, HMRC, the police under warrant, or the ICO).

We never sell your personal data to third parties, and we don't share it for marketing purposes with any organisation outside JCP Hardware.

International data transfers

Some of our service providers (such as Google) may process data outside the UK. Where this happens, we rely on approved transfer mechanisms such as the UK's International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses to make sure your data remains protected to UK standards.

• Order records and invoices: 6 years from the end of the relevant tax year (HMRC requirement).
• Customer accounts: kept for as long as your account is active. You can close your account at any time by emailing us.
• Marketing subscribers: until you unsubscribe, or after 24 months of no engagement.
• Support enquiries: typically 2 years, to help us resolve any follow-up issues.
• Website analytics: aggregated and anonymised; retained for up to 14 months in Google Analytics.

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten") where we no longer need your data
• Restrict processing in certain circumstances
• Data portability — receive your data in a transferable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where we rely on consent

To exercise any of these rights, email sales@jcphardware.co.uk. We'll respond within one month. These requests are free of charge in almost all cases.

If you're unhappy with how we've handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. Visit ico.org.uk or call 0303 123 1113. We'd appreciate the chance to address your concerns first, so please consider contacting us before approaching the ICO.

What cookies are

Cookies are small text files stored on your device when you visit a website. They help the site work properly, remember your preferences, and tell us how people use our site. This section also covers similar technologies like web beacons, pixels and local storage.

Types of cookies we use

Managing cookies

You can accept or reject non-essential cookies through any cookie banner shown on our site. You can also manage cookies directly through your browser settings — most browsers let you block or delete cookies on a per-site or global basis.

For more information about cookies and how to control them, visit allaboutcookies.org or the ICO's guide to cookies.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Our website uses SSL encryption, and we only share data with service providers who meet appropriate security standards. However, no internet transmission is ever completely secure — you share personal information at your own risk.

Our website and services are not directed at children under 16. We don't knowingly collect personal data from children. If you believe we've inadvertently collected information about a child, please contact us and we'll delete it promptly.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top shows when it was most recently reviewed. Significant changes will be notified to account holders by email.

Contact our team and we'll be happy to help.