Privacy Policy

M.C. Xccessories Ltd (referred to as “we”, “us” or “our” in this privacy notice) are committed to protecting and respecting your privacy.

This policy sets out how we collect and process any personal data you may provide to us when you use our website www.xccessories.co.uk (“our site”),

This policy applies where M.C. Xccessories Ltd identify as the data controller and where we are responsible for your personal data as per the General Data Protection Regulation (GDPR) or Data Protection Act 2018.

Making complaints

If you are unhappy with the way we collect or process your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) who are the UK’s supervisory authority for data protection.

Complaints and concerns can be lodged with the ICO via this link: https://ico.org.uk/concerns/ 

We kindly ask that before any complaints are lodged with the ICO, that you contact us first to try and resolve any issues you may have.

Information we may collect from you – and from where

We may collect and process the following data about you:

·   Information you give us. You may give us information about you by corresponding with us by phone, e-mail or otherwise. The information you give us may include your name, address,  e-mail address and phone number.

·         Information we collect about you. We will use this information:

·         to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

·         to improve our site to ensure that content is presented in the most effective manner for you and for your computer;

·         to allow you to participate in interactive features of our service, when you choose to do so;

·         as part of our efforts to keep our site safe and secure;

·         to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.

Disclosure of your information

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your information with selected third parties including:

·         Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.

·         Analytics and search engine providers that assist us in the improvement and optimisation of our site.

·         Bank or finance provider.

We may disclose your personal information to third parties:

·         In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.

·         If M.C. Xccessories Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

·         If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property, or safety of M.C. Xccessories Ltd, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Where we do share your information with third parties, M.C. Xccessories Ltd ensures that the highest levels of data protection are in place in accordance with the law. Third parties with whom we share data are only permitted to process this data for the specified purposes we stipulate with them.

 Where we store your personal data

Where possible, we ensure that your data is stored within the European Economic Area (EEA), however some of our storage locations and service providers may be hosted outside of the EEA. When we do need to transfer your personal data out of the EEA, we ensure one of the following safeguards are in place to provide a similar level of security of your data:

·         Your personal data has been transferred to a country that has been deemed to provide an adequate level of protection for personal data by the European Commission; or

·         The hosting environment we use has specific contracts, codes of conduct or certification mechanisms in-place which have been approved by the European Commission; or

·         Where we transfer data to the United States, we ensure our providers have Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs) in place.

If none of these safeguards are available, we will only transfer your data with your explicit consent – which can be removed at any time by contacting us.

Please email us at info@xccessories.co.uk if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

 Your rights

Under the General Data Protection Regulation/Data Protection Act (2018), you have certain rights regarding your personal data, these include:

·         Request access to your personal data

·         Request correction of your personal data

·         Request erasure of your personal data

·         Object to processing of your personal data

·         Request restriction of processing your personal data

·         Request transfer of your personal data

·         Right to withdraw consent

 You may exercise any of these rights by raising a subject access request with us. You can do this by contacting email.

 We will not charge you for making a request and we will make all reasonable efforts to respond to you within 30 days. Sometimes it may take longer than 30 days to gather all the information we may hold on you, in this situation we will keep you updated at all times. 

Information security

M.C. Xccessories Ltd takes the security of your information extremely seriously. In order to protect your data, we implement a risk-based approach to adopt the strongest organisational and technical controls in order to protect the confidentiality, integrity and availability of your data.

As part of our ongoing commitment to information security and data protection, M.C. Xccessories Ltd have certified to both the IASME governance and Cyber Essentials standards, this process has involved a full assessment of our information systems, cybersecurity and data protection controls.

Changes to our privacy policy

We keep this policy under regular review and we will always keep you notified of any changes to it. This policy was last reviewed on 28th April 2023. Any questions about this policy can be emailed to info@xccessories.co.uk