Privacy notice
How MECA RB LTD uses your personal data, under the UK GDPR, the Data Protection Act 2018 and, for customers in France, the EU GDPR (RGPD).
Controller
MECA RB LTD, Private company limited by shares, registered in England and Wales, company number 17530360, registered office 12 Station Street, Huddersfield, HD1 1LN, England. ICO registration: registration with the UK Information Commissioner’s Office in progress. Contact: contact@meca-boutique.fr. EU representative (GDPR article 27): being appointed; until then, contact us directly at the email address above.
What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, email, phone, delivery and billing address, order details | Process, deliver and support your order | Contract | 6 years (UK tax law); 10 years for French accounting records |
| Payment data | Taking payment (handled by Stripe, we never see the full card number) | Contract | As above |
| Registration, VIN, OE number, message | Fitment check and contact requests | Steps before a contract / legitimate interest | 3 years after the last contact |
| Consent choice, basket, market and language (stored on your device) | Make the site work | Legitimate interest (strictly necessary) | Up to 13 months |
We do not sell your data and we do not use it for automated decisions. No marketing email is sent without your consent.
Who receives it
- Stripe Payments Europe, Ltd. and Stripe, Inc. (payment, fraud prevention)
- Our carrier(s) (delivery)
- Our host: OVH SAS (website and order database)
- Our customs agent, for shipments to France
Data moves between the UK and the EU under adequacy decisions. Transfers to the United States (Stripe) rely on the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
You can ask for access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. French customers can also give instructions about their data after death. Email contact@meca-boutique.fr; we answer within one month. You may complain to the UK Information Commissioner’s Office (ico.org.uk) or, in France, to the CNIL (cnil.fr).
Security
The site is served over HTTPS only. Access to order data is limited to staff who need it.