1. Scope
This policy applies to our website and services including wheel refurbishment, colour changes, crack repairs, straightening, and related bookings/quotes. It covers personal data of website visitors, prospects, and customers.
2. Data we collect
- Identity: name, company, vehicle make/model/plate (where provided).
- Contact: email, phone, billing/shipping/collection address.
- Service details: photos you upload, finish choices, notes about damage/defects.
- Transaction: services purchased, prices, payments (we receive card payment confirmations from our payment provider but do not store full card numbers).
- Technical: IP address, device/browser, pages viewed, and similar—collected via cookies or similar technologies (see Cookies).
- Communications: enquiries, quotes, reviews, and messages you send us.
3. How we use your data (purposes & lawful bases)
| Purpose | Lawful basis (UK GDPR) | Typical data |
|---|---|---|
| Provide quotes, bookings, collect/deliver wheels, and perform services | Contract; Legitimate interests (to operate our business) | Identity, Contact, Service details |
| Customer support and enquiries | Legitimate interests | Identity, Contact, Communications |
| Taking payments and invoicing | Contract; Legal obligation (tax/accounting) | Transaction |
| Analytics to improve our site/services | Consent (non‑essential cookies) | Technical |
| Marketing communications | Consent (email/SMS); Legitimate interests for existing customers (soft opt‑in) | Identity, Contact |
| Fraud prevention and site security | Legitimate interests; Legal obligation | Technical |
6. International transfers
Where personal data is transferred outside the UK, we use appropriate safeguards such as UK Addendum/IDTA standard contractual clauses, adequacy regulations, or other lawful mechanisms.
7. Retention
We keep data only as long as necessary for the purposes above:
- Quotes and enquiries: typically up to 12 months.
- Customer/order records and invoices: 6 years for tax/accounting.
- Marketing preferences: until you opt out or withdraw consent.
- Analytics data: per cookie policy durations.
8. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and staff awareness. No system is 100% secure; we encourage you to use unique, strong passwords for any accounts.
9. Marketing
We’ll only send marketing by email/SMS with your consent or, for existing customers, under the “soft opt‑in”. You can opt out at any time using the unsubscribe link or by contacting us.
10. Your rights
You have rights under UK GDPR, including to request access, rectification, erasure, restriction, data portability, and to object to processing (including where we rely on legitimate interests) and to withdraw consent at any time. Some rights are subject to conditions and exemptions.
11. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/concerns.
12. Children
Our services are not directed to children and we do not knowingly collect personal data from children.
13. Changes
We may update this policy from time to time. We will post the new version here and update the “Last updated” date.
14. Contact
Data controller: Yorkshire Wheel Specialist Limited
Company number: 16654097
Registered office: Sheffield, England, S6 5BX
Email: joe@yorkshirewheelspecialist.co.uk
Phone: 07455298619