1. Who We Are
WRX Supply Co. ("we", "us", "our") operates the website wrxsupply.ie. We are the data controller responsible for your personal data. For any data-related queries, contact us at info@wrxsupply.ie.
2. Data We Collect
We may collect the following types of personal data:
- Identity Data: Name, username, job title, company name.
- Contact Data: Email address, phone number, billing and delivery address.
- Financial Data: Payment card details (processed securely via our payment provider — we do not store full card numbers).
- Transaction Data: Details of products you have purchased from us, order history, and payment history.
- Technical Data: IP address, browser type and version, device information, time zone, operating system.
- Usage Data: Pages visited, products viewed, search queries, and how you interact with our website.
- Marketing Data: Your preferences for receiving marketing communications from us.
3. How We Collect Your Data
We collect data through:
- Direct interactions: When you create an account, place an order, subscribe to our newsletter, contact us, or fill in forms.
- Automated technologies: As you navigate our website, we may automatically collect Technical and Usage Data using cookies and similar technologies.
- Third parties: We may receive data from analytics providers (such as Google Analytics), payment providers, and delivery partners.
4. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Managing your account and Trade Account application
- Communicating with you about orders, deliveries, and customer service
- Sending marketing communications (only with your consent)
- Improving our website, products, and services
- Preventing fraud and ensuring website security
- Complying with legal obligations
5. Legal Basis for Processing
Under GDPR, we rely on the following legal bases:
- Contract: Processing necessary to perform our contract with you (e.g. fulfilling orders).
- Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g. marketing emails).
- Legitimate Interest: Processing necessary for our legitimate business interests, provided these do not override your rights.
- Legal Obligation: Processing necessary to comply with our legal obligations (e.g. tax records).
6. Cookies
Our website uses cookies to improve your experience. For full details, please see our Cookie Policy.
7. Data Sharing
We may share your data with:
- Payment Providers: To process secure payments (e.g. Stripe).
- Delivery Partners: To fulfil and deliver your orders.
- Analytics Providers: To help us analyse website usage (data is anonymised/aggregated where possible).
- Professional Advisors: Lawyers, auditors, and insurers where necessary.
- Law Enforcement: Where required by law or to protect our rights.
We will never sell your personal data to third parties.
8. Data Retention
We retain personal data only as long as necessary for the purposes it was collected. Order data is retained for a minimum of 6 years for tax and legal compliance. Marketing data is retained until you unsubscribe.
9. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Restriction: Request restriction of processing in certain circumstances.
- Portability: Request transfer of your data to another service.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at info@wrxsupply.ie. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. International Transfers
Your data is primarily stored within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g. to service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
12. Children
Our website is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the "Last updated" date revised accordingly.
14. Contact & Complaints
If you have any questions or concerns about this policy, contact us at info@wrxsupply.ie.
If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie.
