Privacy Policy

1. Who We Are

This website is operated by:

Website: https://racingwithbrad.com
Website Owner / Business Operator: Bradley Batt
Contact: Via the Contact Page on this website

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller responsible for personal data processed through this website.

2. Applicable Law

This Privacy Policy is intended to comply with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018
  • The Privacy and Electronic Communications Regulations (PECR), where applicable

3. Scope of This Policy

This Privacy Policy explains how we collect, use, store, and protect personal data when you:

  • Browse or use our website
  • Purchase products through our online store
  • Create or use an account (if available)
  • Contact us via forms or email
  • Interact with cookies, analytics, or embedded third-party content

4. Personal Data We Collect

4.1 Identity and Contact Data

  • Name
  • Billing and shipping address
  • Email address
  • Telephone number

4.2 Account Data

  • Username
  • Account preferences
  • Order history

4.3 Transaction Data

  • Products purchased
  • Order values
  • Payment status and confirmation

We do not store full payment card details.

4.4 Technical Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Referrer URLs
  • Date and time of access

4.5 Communications Data

  • Messages submitted via Contact Form 7
  • Customer service correspondence
  • Order-related enquiries

5. Lawful Bases for Processing

We process personal data only where permitted under UK GDPR, relying on the following lawful bases:

  • Contractual necessity – to process orders, deliver products, manage payments, and provide customer support
  • Legal obligation – to comply with tax, accounting, and consumer protection laws
  • Legitimate interests – to operate, secure, and improve our website and services, provided those interests are not overridden by your rights and freedoms
  • Consent – where required, such as for non-essential cookies

You may withdraw consent at any time where consent is the lawful basis.

6. E-Commerce and WooCommerce

Our online store uses WooCommerce.

WooCommerce processes personal data necessary to:

  • Accept and fulfil orders
  • Calculate taxes and shipping
  • Issue order confirmations and invoices
  • Manage refunds, returns, and customer support
  • Maintain legally required transaction records

Access to this data is restricted to authorised administrators only.

7. Payments

Payments are processed by third-party payment providers (such as Stripe, PayPal, or similar, depending on configuration).

These providers act as independent data controllers and process your payment information in accordance with their own privacy policies. We do not store complete payment card details on our servers.

8. Contact Forms (Contact Form 7)

We use Contact Form 7 to process enquiries.

When you submit a form, we collect:

  • Your name
  • Email address
  • Message content

This data is transmitted via our web server and email systems and retained only for customer service and follow-up purposes.

Contact Form 7 does not store form submissions in the website database by default.

Spam Protection

Form submissions may be checked by automated spam detection services (such as Akismet). Information submitted may be processed by these services solely for spam prevention.

9. Cookies and Consent

9.1 Cookies

Cookies are small text files stored on your device to enable website functionality and improve user experience.

9.2 Types of Cookies Used

Strictly Necessary Cookies
Required for:

  • Security
  • Login functionality
  • Shopping cart and checkout
    These cookies cannot be disabled.

Functional Cookies
Used to remember preferences and settings.

Analytics and Performance Cookies
Used to understand how visitors interact with the website.

9.3 Cookie Consent

Non-essential cookies are not set unless you actively provide consent via the cookie consent banner. You can change or withdraw consent at any time through the cookie settings or your browser.

10. Jetpack (Automattic)

We use Jetpack, provided by Automattic Inc., for:

  • Website security
  • Performance optimisation
  • Basic site statistics

Jetpack may collect aggregated information such as:

  • Page views
  • Referring websites
  • Approximate geographic location (country level)
  • Device and browser information

Automattic’s Privacy Policy is available at: https://automattic.com/privacy/

11. Embedded Content

Pages may include embedded content (e.g. videos or social media posts). Embedded content behaves as if you visited the third-party website directly and may collect data independently. We do not control third-party data practices.

12. Who We Share Data With

We do not sell or rent personal data.

We may share data with:

  • Website hosting providers
  • Payment processors
  • Email service providers
  • Automattic Inc. (Jetpack)

All service providers process data under contractual confidentiality and data protection obligations.

We may also disclose data where required by law or to protect our legal rights.

13. International Data Transfers

Some service providers may process data outside the UK.

Where international transfers occur, appropriate safeguards are used, including:

  • The UK International Data Transfer Agreement (IDTA), or
  • The UK Addendum to EU Standard Contractual Clauses

14. Data Retention

We retain personal data only for as long as necessary:

  • Transaction and order data: retained to comply with UK tax, accounting, and consumer protection obligations
  • Account data: retained until the account is deleted
  • Contact enquiries: retained for customer service purposes
  • Comments: retained unless removed

15. Your Data Protection Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure (where applicable)
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent

Requests can be made via the Contact Page.

16. Right to Lodge a Complaint

If you believe your personal data has been handled unlawfully, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

We encourage you to contact us first so we can attempt to resolve your concern directly.

17. Children’s Data

This website is not directed at children under the age of 16. It is intended for general consumers interested in automotive-related products and content.

We do not knowingly collect personal data from children. If we become aware that personal data relating to a child has been collected without appropriate consent, we will take steps to delete it.

No age-restricted or harmful products are sold on this website.

18. Data Security

We implement appropriate technical and organisational measures, including:

  • HTTPS encryption
  • Secure hosting
  • Restricted administrative access
  • Regular software updates
  • Security monitoring via Jetpack

No system is completely secure; therefore, absolute security cannot be guaranteed.

19. Data Breach Procedures

In the event of a personal data breach, we will:

  • Investigate and contain the incident
  • Assess risk to individuals
  • Notify the ICO and affected users where legally required

20. Data Protection Officer

We are not required to appoint a Data Protection Officer under UK GDPR due to the nature and scale of our data processing activities.

21. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

22. Contact Information

For privacy-related enquiries:

Website Owner: Bradley Batt
Contact Method: Contact Page