Privacy Policy

Last updated: 13 October 2026

This policy explains how CARVINYLSHOP LTD (“we”, “us”) uses personal data when you visit carvinyl-shop.com, send a quote request, write to us or call us. It is written under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Controller

The controller is CARVINYLSHOP LTD, company number 17313383, registered office 25 Effie Road, London, England, SW6 1EL. Email: carvinylshop@inbox.eu, phone: +44 7480 282153.

2. What data we process

• Quote requests (form, email or phone): your name, email address and/or phone number, your car details (make, model, year), the type of wrap you are interested in and anything you write in your message, such as colour or finish ideas.
• Correspondence: the content of emails and calls about your request.
• Technical data: when the site is delivered, our hosting provider processes your IP address, browser type, the page requested and the time of the request, for security and delivery of the site.

When you press Send in the quote form, the details you entered are sent to our website and stored in a database so that we can reply to you. To protect the form from automated spam, a one-way coded (hashed) form of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. If the form cannot be sent, it offers to prepare an email to carvinylshop@inbox.eu instead, which you send from your own email account or app.

3. Purposes and lawful bases

• To reply to your quote request and to agree an order with you—Article 6(1)(b) UK GDPR (steps taken at your request before entering into a contract).
• To answer other questions, keep our correspondence in order and keep the website secure—Article 6(1)(f) UK GDPR (our legitimate interests in running the business and the site).
• To keep business records where the law requires it—Article 6(1)(c) UK GDPR (legal obligation).

4. How long we keep data

We keep quote requests and correspondence for as long as needed to deal with the request. Requests sent through the quote form are deleted from the website database automatically 12 months after they arrive. If no order follows, we delete the rest of the correspondence within 12 months of our last contact. If an order follows, records are kept for as long as UK company and tax law requires (generally six years from the end of the financial year they relate to). Hosting logs are kept by the provider for a short period for security purposes.

5. Who receives data

• Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the quote form, as our processor and on our behalf.
• Your own email provider and ours deliver the emails you send us.

We do not sell personal data and do not share it for marketing.

6. International transfers

Cloudflare may process technical data and stored quote requests outside the United Kingdom, including in the United States. Such transfers rely on the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”) where the recipient is certified, or otherwise on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

7. No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or tracking tools, and no profiling or automated decision-making. See the Cookie Policy.

8. Your rights

Under the UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability where it applies. To use any of these rights, contact us at carvinylshop@inbox.eu. We reply within one month.

9. Complaints

If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.

10. Changes

We may update this policy when the website or our processing changes. The date at the top shows the latest version.