Last updated: 26 October 2026

This Privacy Policy explains how Xcellent PC collects and uses your personal data when you visit xcellentpc.com, place an order, chat with us or contact us, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller is Xcellent PC, trading as Xcellent PC, registered in Ireland under company number CRO No. 705516, registered office Park West Industrial Park Dublin 12.

For any privacy question or request, email sales@xcellentpc.com or use our contact form at https://xcellentpc.com/contact/.

2. What data we collect

  1. Order and account data: name, billing and delivery address, email, phone number, order history, and your account login details if you create an account.
  2. Payment data: payments are processed by Stripe, PayPal, Klarna and Humm. We do not see or store your full card number. We receive confirmation of payment, the payment method and limited details needed for refunds and fraud prevention.
  3. Finance applications: if you choose Humm or Klarna, you apply directly with them. They decide on credit under their own privacy policies. We receive only the result needed to process your order.
  4. Communications: messages you send us by email, contact form or website chat, including your email address and the content of the conversation.
  5. Technical data: IP address, browser and device type, pages visited and the time of your visit. Our server and security systems record this automatically.
  6. Cookie and tracking data: collected only as described in section 6, and for non-essential cookies only with your consent.

Public reviews: we display public Google reviews about Xcellent PC on our website (reviewer name, profile photo and review text). They are stored on our own server and shown without connecting your browser to Google or to the review widget provider. If you would like your review removed from our website, contact us at sales@xcellentpc.com.

3. Why we use your data and our legal basis

  1. To process and deliver your order, handle returns, warranty and repairs, and contact you about your order. Legal basis: performance of a contract.
  2. To keep accounting and tax records, including invoices. Legal basis: legal obligation.
  3. To prevent fraud and keep the website secure, for example payment fraud checks by Stripe Radar and blocking harmful traffic. Legal basis: our legitimate interests.
  4. To answer your questions by email, contact form or chat. Answers in the website chat are generated by an AI assistant; you can ask for a person at any time and our team will reply by email.. Legal basis: our legitimate interests, or steps taken at your request before a contract.
  5. To remind you about an unfinished order: if you enter your email at checkout but do not complete the order, we may send you a small number of reminder emails about that basket. Legal basis: our legitimate interests. You can opt out at any time using the link in the email.
  6. To measure and improve our website and advertising (analytics and marketing cookies). Legal basis: your consent.

4. Who we share your data with

We share personal data only where needed for the purposes above, with:

  1. Couriers (mainly DPD) – name, delivery address, phone and email, to deliver your order and send tracking updates.
  2. Payment and finance providers – Stripe, PayPal, Klarna and Humm.
  3. Our suppliers, only where needed to fulfil a custom order or warranty claim (for example to arrange a replacement part).
  4. IT and service providers who process data on our behalf: website hosting (Hostinger), content delivery and caching (QUIC.cloud), email delivery, and our website chat assistant: the chat runs on our own website, and the text of your messages is processed by Anthropic PBC (Claude AI) to generate answers. Under its commercial terms Anthropic acts as our service provider and does not use these messages to train its AI models. If you ask to speak to a person, the conversation is passed to our team by email.
  5. Google (Google Analytics, Google Ads) and Meta (Facebook and Instagram advertising) – see section 6.
  6. Our accountants, legal advisers and public authorities, where required by law.

We do not sell your personal data.

5. Transfers outside the EU

Some providers (for example Google, Meta, Stripe and Anthropic, the provider of our chat AI, based in the USA) may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.

6. Cookies and similar technologies

  1. Essential cookies are needed for the website to work, for example your basket, checkout, login, security, fraud prevention by Stripe, and remembering your cookie choices. These do not need consent.
  2. Statistics cookies (Google Analytics) help us understand how visitors use the website. Set only with your consent.
  3. Marketing cookies (Meta Pixel, Google Ads, and order source tracking) help us measure our advertising and show relevant ads on Facebook, Instagram and Google. Set only with your consent.
  4. When you have not given consent, Google Ads may still receive limited signals without cookies (Google Consent Mode), such as an anonymous notice that an order was completed. These do not identify you and are not used to build a profile of you.
  5. You can accept, reject or change your choices at any time using the cookie banner or the cookie settings icon on our website. Your choice is remembered for up to 180 days.
  6. Our website shows reviews from Google through a third-party widget, which may load content from that provider.
  7. Our website chat does not use cookies. When you start a conversation, it saves a random conversation ID in your browser’s local storage so the chat continues when you move between pages. We also count visits anonymously (pages viewed and an approximate country based on your browser’s time zone) without storing your IP address.

7. How long we keep your data

  1. Order, invoice and accounting records: 6 years after the end of the financial year, as required by Irish tax law.
  2. Customer accounts: until you ask us to delete your account, except data we must keep under point 1.
  3. Emails, chat and warranty correspondence: up to 2 years after the matter is closed, or longer if needed for a warranty or legal claim.
  4. Unfinished-order (abandoned basket) data: up to 30 days.
  5. Server and security logs: a short period, normally no more than 30 days.
  6. Cookie and analytics data: as set out in our cookie banner; Google Analytics data is kept for up to 14 months.

8. Your rights

Under the GDPR you have the right to:

  1. access the personal data we hold about you;
  2. correct inaccurate data;
  3. have your data deleted, where we are not required to keep it;
  4. restrict or object to our use of your data, including objecting to processing based on legitimate interests;
  5. receive your data in a portable format;
  6. withdraw your consent at any time, without affecting earlier processing.

To use any of these rights, email sales@xcellentpc.com. We will reply within one month. You also have the right to complain to the Data Protection Commission in Ireland (www.dataprotection.ie).

9. Security

We use HTTPS encryption, secure payment providers, access controls and regular software updates to protect your data. No system is completely secure, but we take reasonable steps to prevent unauthorised access, loss or misuse.

10. Children

Our website and products are not intended for children under 16. We do not knowingly collect personal data from children under 16.

11. Changes to this policy

We may update this Privacy Policy, for example when we change providers or services. The latest version is always published on this page with its date.