Customer, website, order and marketing data
Last updated: 7 August 2026
In brief
- J&B Furniture (J & B General Trading Ltd) is the data controller.
- We use your data to process orders, provide service and — with consent — to market to you.
- You can access, correct, delete, restrict, object and withdraw consent — email [email protected].
- You may also complain to the Data Protection Commission in Ireland.
7.1 Who controls your personal data
J&B Furniture is the trading name of J & B General Trading Limited (Company No. 491401). For the personal data processed for J&B Furniture’s retail and website activities, the company acts as data controller unless another party is separately identified as controller.
Contact: J&B Furniture, Unit 4 East Point Retail Park, Ballysimon Road, Limerick, V94 FW24, Ireland. Email: [email protected]. Telephone: +353 61 423 710.
7.2 Personal data we may collect
- identity and contact information, such as name, billing/delivery address, telephone number and email address
- account information and login/account preferences
- order, quotation, invoice, payment-status and transaction information
- delivery/access instructions and correspondence relating to an order
- customer-service, complaint, warranty and after-sales communications, including photographs you provide
- website technical and usage data, such as device/browser information, IP address and cookie identifiers
- marketing preferences and records of consent/opt-out
- fraud-prevention and security information reasonably necessary to protect transactions and accounts
7.3 Why we use personal data and our legal bases
Purpose
Typical data
Typical legal basis
Process quotations, orders, delivery, collection, assembly and returns
Contact, order, delivery, transaction data
Performance of a contract / steps at your request before contract
Customer service, complaints, warranty and legal claims
Order, correspondence, photographs, claim records
Contract; legal obligation; legitimate interests in resolving and defending claims
Accounting, tax, fraud prevention and legal compliance
Transaction, invoice, identity and security data
Legal obligation; legitimate interests where appropriate
Operate customer accounts and website functionality
Account and technical data
Contract; legitimate interests; strictly necessary cookies where applicable
Analytics and non-essential website tracking
Cookie/device/usage identifiers
Consent where required
Email/SMS marketing
Contact details and preferences
Consent or another lawful basis only where permitted by electronic marketing rules; opt-out always available
7.4 Sharing personal data
We may share personal data only where reasonably necessary with service providers and other recipients such as payment processors, finance providers, delivery/assembly providers, manufacturers or suppliers where needed to fulfil an order, website/IT hosting and support providers, email/marketing platforms, professional advisers, insurers, accountants, banks and public authorities where required by law. Each recipient may act as our processor or as an independent controller depending on the service and legal relationship.
7.5 International transfers
If personal data is transferred outside the European Economic Area, we will use a lawful transfer mechanism where required, such as an adequacy decision or appropriate safeguards including approved standard contractual clauses. The actual transfer arrangements should be reviewed whenever we add or change technology providers.
7.6 Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, warranty and dispute requirements. Different records have different retention periods. Transaction and contract records may need to be retained for a number of years; marketing consent is retained only while needed to manage marketing and suppression/opt-out records; inactive account data is reviewed and deleted or anonymised when no longer needed.
A detailed internal retention schedule should be maintained and reviewed periodically rather than relying on one retention period for all data.
7.7 Your data-protection rights
Subject to the conditions and exceptions in data-protection law, you may have rights to access personal data, correct inaccurate data, request deletion, restrict processing, object to certain processing, receive certain data in a portable format, and withdraw consent where consent is the legal basis. Withdrawing consent does not make earlier consent-based processing unlawful.
To exercise a right, contact [email protected]. We may request information reasonably necessary to verify identity. You also have the right to lodge a complaint with the Data Protection Commission in Ireland.
7.8 Marketing
We will send electronic direct marketing only where we have a lawful basis to do so. Each marketing communication will provide an appropriate unsubscribe/opt-out method. Marketing preferences do not affect service messages needed to administer an order, delivery, account, safety notice or legal obligation.
7.9 Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No internet system is completely risk-free, so security measures are reviewed and improved as technology and risk change.
7.10 Children
Our retail services are directed at adults purchasing furniture. We do not knowingly seek to collect children’s personal data for independent marketing or account purposes. If we become aware that personal data has been collected inappropriately, we will take reasonable steps to address it.
7.11 Changes to this policy
We may update this Privacy Policy to reflect changes in our processing, technology or legal obligations. The current version and effective date will be published on our website. Material changes will be highlighted where appropriate.