Privacy Policy
Last updated: 1 April 2026
This Privacy Policy describes how XRC Empire (“we”, “us”, “our”) handles information when you use our website, place an order, or otherwise interact with our services. By using our site, you agree to this policy. If you do not agree, please do not use the services.
Who we are
XRC Empire operates this online storefront. For privacy-related questions, contact us at contact@xrcempire.com.
Information we collect
- Account and order data: name, email address, delivery and billing addresses, phone number where provided, order contents, and payment-related references (we do not store full card numbers on our servers).
- Technical data: IP address, browser type, device information, and similar data automatically collected when you visit the site.
- Analytics: we may use analytics tools (for example PostHog) to understand how the site is used. Those services may set cookies or similar technologies and process usage data in accordance with their own policies.
How we use information
- To process, fulfil, and support your orders.
- To communicate with you about your purchase, delivery, or support requests.
- To operate, secure, and improve our website and services.
- To comply with legal obligations and defend our legitimate interests where permitted by law.
Legal bases (UK)
Where UK data protection law applies, we rely on appropriate bases such as: performance of a contract (processing necessary to fulfil your order), legitimate interests (for example fraud prevention, site security, and analytics where balanced against your rights), and consent where required (for example certain non-essential cookies or marketing, if offered).
Sharing and processors
We may share data with service providers who help us run the business, including:
- Payment processors (for example Stripe) to take and reconcile payments.
- Hosting, database, and backend providers used to store orders and catalogue data.
- Email delivery providers to send transactional messages.
- Analytics providers as described above.
These parties process data only on our instructions and where they have a lawful basis to do so. We do not sell your personal information.
International transfers
Some providers may process data outside the UK. Where that happens, we aim to ensure appropriate safeguards (such as standard contractual clauses or adequacy decisions) are in place as required by applicable law.
Retention
We keep information for as long as needed to fulfil orders, meet legal, tax, and accounting requirements, and resolve disputes. Retention periods may vary depending on the type of data and our obligations.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority (in the UK, the ICO). To exercise your rights, contact us at the email above.
Cookies
We and our partners may use cookies and similar technologies for essential site operation, preferences, and analytics. You can control cookies through your browser settings; blocking some cookies may affect how the site works.
Children
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take steps to delete it.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.