Privacy Policy

Last Updated: December 30, 2025

1. Overview and Data Controller

This Privacy Policy describes how [Company Name] (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or use our services. For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, we are the “Data Controller” of your personal information. This policy is designed to provide transparency to a global audience, including users in the European Economic Area (EEA), the United Kingdom, and North America.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you. This includes:
– Identity Data: First name, last name, username, or similar identifier.
– Contact Data: Billing address, delivery address, email address, and telephone numbers.
– Financial Data: Payment card details and purchase history (processed via secure third-party processors).
– Technical Data: IP address, login data, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
– Usage Data: Information about how you use our website, products, and services.
– Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties.

3. Methods of Data Collection

We use different methods to collect data from and about you, including:
– Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, or email.
– Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns using cookies, server logs, and similar technologies.
– Third Parties: We may receive personal data about you from various third parties such as analytics providers (like Google), advertising networks, and search information providers.

4. Legal Basis for Processing (EEA and UK)

If you are located in the EEA or UK, we only process your personal data when we have a valid legal basis:
– Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you.
– Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
– Legal Obligation: Where we need to comply with a legal or regulatory obligation.
– Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications.

5. Purpose of Data Use

We use your data to: register you as a new customer, process and deliver your orders, manage our relationship with you, enable you to partake in a prize draw or competition, improve our website and customer service, and deliver relevant website content and advertisements to you.

6. International Data Transfers

We operate globally, which means your personal data may be transferred to and stored in countries outside of your own. For users in the EEA/UK, your data may be transferred to countries that are not deemed to provide an adequate level of protection. In such cases, we ensure a similar degree of protection by implementing specific safeguards, such as the Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Security and Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Rights (GDPR / CCPA / PIPEDA)

Depending on your location, you may have the following rights:
– Access: The right to request copies of your personal data.
– Correction: The right to request that we correct any information you believe is inaccurate.
– Erasure: The right to request that we erase your personal data under certain conditions.
– Portability: The right to request that we transfer the data we have collected to another organization.
– Opt-out: The right to opt-out of the “sale” or “sharing” of your personal information (specifically for California residents).
– Non-Discrimination: We will not discriminate against you for exercising any of these rights.

9. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

10. Contacting the Regulatory Authority

If you are a resident of the EEA or UK, you have the right to make a complaint at any time to the supervisory authority for data protection issues in your country. We would, however, appreciate the chance to deal with your concerns before you approach the authority, so please contact us first.

11. Contact Information

To exercise any of your rights or ask questions about this policy, please contact us at:
E-Mail: info@rco-scm.com