Privacy Policy

Last updated: 6 May 2026

STR Performance Ltd ("we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and what your rights are. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Data Controller: STR Performance Ltd
Company No. SC799599 (registered in Scotland)
VAT No. GB 461 5413 09
Contact: info@str-performance.com

If you have any questions about how we use your personal data, email the address above.

2. What personal data we collect

We collect only what we need to run the business:

Data	When we collect it	Why
Name, email, phone (if provided), delivery address, billing address	When you place an order, request a quote, or book a service	To process the order/booking and contact you about it
Vehicle registration, make, model, VIN, mileage	When you book workshop work or buy fitment-specific parts	To make sure the part or service is correct for your vehicle; to share with the DVSA-approved testing station when arranging an MOT on your behalf
Payment information	At checkout	Card payments are taken via Stripe. We never see or store your full card number — Stripe handles this.
IP address, browser type, pages visited	Automatically when you use the Site	Site security, analytics, fraud prevention

We don't ask for and don't collect special-category data (health, biometric, etc.).

3. Why we use it (lawful basis)

Purpose	Lawful basis
Processing orders, bookings and payments	Contract (UK GDPR Art. 6(1)(b))
Keeping records required by law (e.g. VAT, MOT)	Legal obligation (Art. 6(1)(c))
Sending order updates and service-related emails	Contract (Art. 6(1)(b))
Marketing emails (only if you opt in)	Consent (Art. 6(1)(a)) — you can withdraw any time
Site security, fraud prevention, analytics	Legitimate interests (Art. 6(1)(f))

4. Who we share it with

We share data only where necessary, and only with reputable third parties bound by their own data-protection obligations:

• Stripe — to take card payments (stripe.com/privacy)
• Cloudflare — our hosting / CDN / DNS provider (cloudflare.com/privacypolicy)
• DVSA-approved MOT testing stations — when we arrange an MOT on your behalf, we share your name, contact and vehicle details with the testing station; the test result is then recorded on the DVSA database by them
• Couriers (e.g. DPD, Royal Mail, ParcelForce) — to deliver orders
• HMRC — for tax / VAT obligations
• Our accountant and IT providers — under written confidentiality terms

We do not sell or rent your personal data to anyone.

Some of these providers process data outside the UK (e.g. in the EU or US). Where they do, transfers are protected by UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum.

5. How long we keep it

• Order, invoice and accounting records: 6 years from the end of the financial year (HMRC requirement).
• Workshop job sheets, MOT booking records and vehicle records: 6 years.
• Marketing-list email addresses: until you unsubscribe.
• Website analytics / logs: up to 13 months.

After these periods we delete or anonymise the data.

6. Your rights

Under UK GDPR you have the right to:

• Access — ask for a copy of the personal data we hold on you.
• Rectification — ask us to correct anything inaccurate.
• Erasure — ask us to delete your data (subject to our legal record-keeping obligations).
• Restriction — ask us to stop processing in certain circumstances.
• Portability — receive your data in a portable format.
• Objection — object to processing based on legitimate interests, including marketing.
• Withdraw consent — at any time, where consent is the lawful basis.

To exercise any of these, email info@str-performance.com. We respond within one month.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. We'd appreciate the chance to put things right first.

7. Cookies

The Site uses only essential cookies for the basic operation of the site. We do not use third-party tracking or advertising cookies. If we add analytics in future, a cookie banner will let you accept or reject non-essential cookies.

8. Changes to this policy

We may update this policy from time to time. The current version will always be at www.str-performance.com. Material changes will be flagged on the Site.