Privacy policy
At OCS Automotive Engineering, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and disclose your personal information in compliance with the UK GDPR and Data Protection Act 2018. By using our website and online shop, you consent to the collection and use of your information as described herein.
1. Information We Collect
We may collect and process the following types of personal information:
- Personal Information: Name, address, email address, phone number.
- Payment Information: Credit or debit card details (processed securely through third-party providers; we do not store full payment details).
- Order History: Details of your past purchases and interactions with us.
- Website Usage Data: IP address, device information, browser type, and cookies
If you have any questions or concerns regarding this privacy policy, please reach out to our support team for assistance.
2. How We Use Your Information
Your personal information will only be used for lawful purposes, including:
- Processing Orders: To process your orders, arrange shipping, and handle payment.
- Customer Support: To respond to your inquiries, handle returns, and provide assistance.
- Marketing Communications: To send newsletters, promotional offers, and product updates, only if you have given explicit consent to receive such communications.
- Website Optimisation: To analyse usage patterns and improve our website and services.
- Legal Compliance: To comply with legal and regulatory requirements, including fraud prevention and financial reporting.
3. Legal Basis for Processing
Under the UK GDPR, we process your personal data based on one or more of the following lawful bases:
- Contractual Necessity: To fulfil our contractual obligations (e.g., processing your order).
- Consent: When you have explicitly consented (e.g., for marketing emails).
- Legitimate Interests: For activities such as fraud prevention, improving services, or maintaining website security.
- Legal Obligation: To comply with applicable laws and regulations.
4. Sharing Your Information
We may share your personal information with the following third parties:
- Payment Processors: To securely process your payments.
- Shipping Providers: To deliver your orders.
- Service Providers: Companies that support our operations, such as IT service providers or marketing consultants.
We ensure that all third-party processors adhere to strict data protection standards and only process your information for the purposes specified in this policy.
We will never sell, rent, or disclose your personal information to third parties for their marketing purposes.
5. Data Security
We take the security of your personal information seriously and implement the following measures:
- Use of SSL encryption to protect data during transmission.
- Regular system monitoring and security audits.
- Limiting access to personal information to authorized personnel only.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission or storage is 100% secure.
6. Your Rights
Under the UK GDPR, you have the following rights regarding your personal information:
- Access: You can request a copy of the personal information we hold about you.
- Correction: You can request corrections to inaccurate or incomplete information.
- Erasure (Right to be Forgotten): You can request the deletion of your data in certain circumstances.
- Restriction: You can request limitations on how we process your data.
- Data Portability: You can request that your data be transferred to another service provider in a machine-readable format.
- Objection: You can object to certain types of processing, such as marketing.
To exercise your rights, please contact us at the details below. We will respond within one month, as required by law.
7. Data Retention
We retain your personal information only for as long as necessary for the purposes outlined in this policy or to comply with legal, tax, or regulatory obligations. Specific retention periods include:
- Order Data: Retained for 6 years for tax and audit purposes.
- Marketing Data: Retained until you opt out or withdraw consent.
- Website Analytics Data: Retained for up to 2 years.
8. Cookies and Tracking Technologies
We use cookies to enhance your browsing experience and analyze website traffic. For more details on the types of cookies we use and how to manage them, please see our Cookie Policy.
9. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our operations or legal requirements. Significant changes will be communicated to you via email or website notifications.
10. Contact Us
If you have any questions, concerns, or wish to exercise your rights, you can contact us at:
- Email: Sales@ocservice.co.uk
- Phone: 01962 855969
- Mailing Address: Unit D, Prospect Commercial Park, Prospect Rd, New Alresford
S024 9QF
If you are not satisfied with our response, you may lodge a complaint with the UK’s Information Commissioner’s Office (ICO) via their website: https://ico.org.uk.