Privacy Policy

1. Introduction

Wheel Storm ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website wheel-storm.com, use our services, or interact with us.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you consent to the data practices described in this policy.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Demographics information (age, preferences, interests)
• Professional information (company, job title)
• Communication preferences
• Payment information (processed securely by third-party payment processors)
• Project details and lighting requirements

3.2 Technical Information

We automatically collect certain technical information:

• IP address and location data
• Browser type and version
• Operating system
• Device information
• Website usage data and analytics
• Cookies and similar tracking technologies

3.3 Communication Data

Information from your communications with us, including:

• Contact form submissions
• Email correspondence
• Phone call records
• Newsletter subscriptions
• Customer service interactions

4. How We Use Your Information

4.1 Legitimate Business Purposes

We use your personal data for the following purposes:

• Service Provision: To provide lighting consultation, quotes, installation, and maintenance services
• Communication: To respond to inquiries, provide customer support, and send service updates
• Marketing: To send newsletters, promotional materials, and relevant product information (with your consent)
• Business Operations: To process payments, manage accounts, and maintain records
• Legal Compliance: To comply with legal obligations and resolve disputes
• Website Improvement: To analyze usage patterns and improve our website and services

4.2 Legal Basis for Processing

We process your personal data based on:

• Consent: Where you have given clear consent for specific purposes
• Contract: To fulfill our contractual obligations to you
• Legitimate Interest: For our legitimate business interests that don't override your rights
• Legal Obligation: To comply with legal requirements

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in:

• Payment processing
• Email marketing services
• Website analytics
• Cloud storage and hosting
• Installation and maintenance services
• Legal and professional services

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or illegal activities
• Protect the safety of our users and the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity, subject to the same privacy protections.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL encryption for data transmission
• Secure servers and databases
• Access controls and authentication
• Regular security audits and updates
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any significant breaches as required by law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Customer Records: 7 years after the last interaction (for accounting and legal purposes)
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months (Google Analytics default)
• Email Communications: 3 years unless deletion is requested
• Legal Documents: As required by UK law

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limited processing of your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision-Making: Rights regarding automated profiling or decision-making

To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Please see our Cookie Policy for detailed information about:

• Types of cookies we use
• How to manage cookie preferences
• Third-party cookies and analytics
• Your choices regarding cookies

10. International Data Transfers

We primarily process data within the UK and EEA. When data is transferred outside these regions, we ensure adequate protection through:

• Adequacy decisions by the UK or EU
• Standard contractual clauses
• Certification schemes
• Codes of conduct

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Sending email notifications for significant changes
• Obtaining fresh consent where required

We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Information and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):