Last updated: 29 July 2026
This policy explains what we do with your personal data. It is written to comply with the UK GDPR and the Data Protection Act 2018.
Who we are
Supercar Accessories ("we", "us") is the data controller for the information described here. Our contact details are on our Contact page. [Insert your registered company name, company number and registered office address before going live.]
What we collect
- Order information. Name, delivery and billing address, email address, phone number, and the contents of your order.
- Payment information. Handled entirely by our payment providers. We never see or store your full card number.
- Account information. If you create an account, your login details and order history.
- Technical information. IP address, browser and device type, and pages viewed, collected through cookies and similar technologies.
- Marketing preferences. Whether you have consented to receive email from us.
Why we use it, and our lawful basis
- To fulfil your order (performance of a contract). This includes sharing your name and delivery address with the supplier or fulfilment partner who ships your item, and with the carrier.
- To provide customer service (performance of a contract, and our legitimate interests).
- To send marketing email (your consent). You can withdraw consent at any time using the unsubscribe link in any message.
- To detect and prevent fraud (legitimate interests, and legal obligation).
- To keep accounting records (legal obligation, since HMRC requires most records to be kept for six years).
Who we share it with
We share the minimum data necessary with Shopify (our store and checkout platform), our payment providers, our fulfilment partners and their suppliers, our shipping carriers, and our email and analytics providers. Some of these process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or UK Adequacy Regulations.
We do not sell your personal data.
How long we keep it
Order and accounting records are kept for six years from the end of the relevant financial year. Marketing consent records are kept until you withdraw consent, plus two years. Analytics data is kept for up to 26 months.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these, email us using the address on our Contact page. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We use cookies that are strictly necessary for the site to work, plus optional analytics and marketing cookies which we only set if you accept them. You can change your choice at any time through your browser settings or our cookie banner.