PRIVACY POLICY
Last updated: May 10, 2025
Pro Tuning (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to data collected through our website and when you engage with our services.
1. Data We Collect
Account information
When you create an account we collect your full name, email address, and optionally your phone number. Your password is stored exclusively as a cryptographic hash — we never store your password in plain text and we cannot retrieve it.
Order and checkout information
When you place an order or book a service we collect contact details, delivery or location address, and vehicle information including make, model, year, engine specification, existing modifications, and preferred service date. This information is necessary to provide the service.
Technical data
We may automatically collect basic technical information such as your IP address, browser type, and pages visited for security and analytics purposes. We do not build advertising profiles from this data.
Communications
If you contact us by email or through our contact form, we retain a copy of the correspondence to manage and respond to your enquiry.
2. How We Use Your Data
- Service delivery: To schedule and complete the work you have booked, contact you regarding your appointment, and dispatch any parts you have ordered.
- Account management: To maintain your account, authenticate your identity, and provide access to your order history.
- Communications: To send confirmation emails, appointment reminders, and service updates. We will not send marketing emails without your explicit consent.
- Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and resolve disputes.
- Security: To detect and prevent fraud, abuse, and unauthorised access to our systems.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance — to fulfil a service or order you have requested.
- Legitimate interests — to operate, secure, and improve our website and services.
- Legal obligation — where required by applicable law.
- Consent — where you have explicitly opted in, such as marketing communications.
4. Data Storage and Security
Your data is stored securely on servers located in our operating region. We use industry-standard security measures including HTTPS encryption, hashed password storage, and httpOnly session cookies to protect your information.
Session authentication is managed via a cryptographically signed JSON Web Token (JWT) stored in a secure, httpOnly cookie that is inaccessible to JavaScript running in your browser. Your cart data is stored locally in your browser’s localStorage and is never transmitted to our servers unless you explicitly check out.
No system can guarantee absolute security. In the event of a data breach that affects your personal data, we will notify you and relevant authorities as required by law.
5. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share data in the following limited circumstances:
- Service providers who assist us in operating our website and delivering services (e.g. hosting, email delivery), bound by confidentiality agreements.
- Authorities when required to comply with a legal obligation, court order, or to protect our rights.
- A successor entity in the event of a business sale or merger, subject to the same privacy obligations.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Account data is deleted upon request unless we are required by law to retain it. Order records may be retained for up to 7 years for legal and accounting purposes.
7. Cookies
We use cookies and similar browser storage technologies. For full details, please read our Cookie Policy.
8. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data, subject to our legal obligations.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, contact us through our contact form. We will respond within 30 days.
9. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will indicate the most recent revision. Continued use of our website after an update constitutes acceptance of the revised policy.
11. Contact Us
For any privacy-related questions or to exercise your rights, please contact us through the contact form on our homepage.