Your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and EU GDPR.
1. What Data We Collect
We collect and process the following personal data:
When you place an order:
– Name and billing/delivery address
– Email address and phone number
– Payment information (processed securely by our payment provider — we do not store card details)
– Order history and product preferences
When you use our contact form:
– Name, email address, and the content of your message
When you sign up to our newsletter:
– Email address and, optionally, your name
2. How We Use Your Data
We use your personal data for the following purposes:
To fulfil your order — processing payment, arranging delivery, sending order confirmations and updates.
To respond to enquiries — replying to messages sent via our contact form.
To send marketing emails — if you have opted in to receive our newsletter or marketing communications.
To improve our website and services — analysing how visitors use our site via anonymised analytics data.
3. Who We Share Your Data With
We share your data only where necessary:
– Payment processors — to securely process your payment
– Delivery and logistics partners — to arrange shipping of your order
– Email marketing platforms — to send newsletters if you have opted in
– Analytics providers — to understand website usage (see Section 6)
– Legal and regulatory authorities — where we are required to do so by law
We do not sell your personal data to third parties.
4. International Transfers
Some of our third-party service providers are based outside the UK and EU. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or transfers to countries with an adequacy decision.
5. How Long We Keep Your Data
We retain your data only as long as necessary:
– Order and transaction data: 7 years (to comply with HMRC and financial record-keeping obligations)
– Contact form enquiries: Up to 2 years from the date of last contact
– Marketing data: Until you unsubscribe or withdraw consent
– Website analytics: As configured in our analytics tool (typically 26 months for Google Analytics)
6. Cookies and Analytics
Our website uses cookies — small text files stored on your device — to make the site work properly and to help us understand how it’s being used.
Strictly necessary cookies: Required for the site to function (e.g. shopping cart, session management). These cannot be disabled.
Analytics cookies: We use Google Analytics to collect anonymised information about how visitors use our site, including pages visited, time on site, and referral source. This helps us improve the site. Analytics cookies are only set with your consent.
Marketing cookies: [If applicable] We may use cookies to show you relevant advertising. These are only set with your consent.
You can manage your cookie preferences via our cookie consent tool on the site, or by adjusting your browser settings. Note that disabling certain cookies may affect your experience.
For more information on Google’s data practices, visit [https://policies.google.com/privacy](https://policies.google.com/privacy).
7. Your Rights
Under UK GDPR and EU GDPR, you have the following rights:
– Right of access — request a copy of the personal data we hold about you
– Right to rectification — request that we correct inaccurate or incomplete data
– Right to erasure — request that we delete your personal data (subject to legal obligations)
– Right to restrict processing — request that we limit how we use your data
– Right to data portability — receive your data in a structured, machine-readable format
– Right to object — object to processing based on legitimate interests or for direct marketing
– Right to withdraw consent — where processing is based on consent, you can withdraw at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at hello@romacwheels.com. We will respond within one month.
Unsubscribing from marketing: Every marketing email includes an unsubscribe link. You can also email us directly to opt out.
8. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with your supervisory authority.
– UK residents: Information Commissioner’s Office (ICO) — [https://ico.org.uk](https://ico.org.uk)
– EU residents: Contact your national data protection authority — [https://edpb.europa.eu/about-edpb/about-edpb/members_en](https://edpb.europa.eu/about-edpb/about-edpb/members_en)
We would always appreciate the opportunity to address your concerns directly before you contact a regulator.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. Where changes are significant, we will notify you by email or a prominent notice on the site.
10. Contact
Email: hello@romacwheels.com
Phone: +44 203 540 5999
