Privacy Policy

1. Introduction

Car Prism Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase our products, or interact with our services.

This policy applies to all information collected through our website (car-prism.com), mobile applications, and any related services, sales, marketing, or events.

Car Prism Ltd is registered in England & Wales (Company Number: 12345678) with our registered office at 42 Eccleston Square, London SW1V 1PB.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account or make a purchase
• Subscribe to our newsletter
• Contact us via email, phone, or contact forms
• Participate in surveys, contests, or promotions
• Leave reviews or feedback

This may include:

• Name and contact details (email, phone, address)
• Payment information (processed securely by third-party providers)
• Purchase history and preferences
• Communications and feedback

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• IP address and browser information
• Device information and operating system
• Pages visited and time spent on our site
• Referring websites and search terms
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Processing and fulfilling orders
• Managing customer accounts
• Providing customer support
• Handling returns and refunds

3.2 Communication

• Sending order confirmations and updates
• Newsletter and marketing communications (with consent)
• Responding to enquiries and feedback
• Important service announcements

3.3 Improvement and Analytics

• Analysing website usage and performance
• Improving our products and services
• Personalising your experience
• Conducting research and development

3.4 Legal Compliance

• Complying with legal obligations
• Protecting our rights and interests
• Preventing fraud and ensuring security

4. Legal Basis for Processing

Under UK GDPR and Data Protection Act 2018, we process your personal data based on:

• Contract: To fulfil our obligations in providing products and services
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: For improving services, analytics, and business operations
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

5.1 Service Providers

We work with trusted third parties who assist in:

• Payment processing
• Shipping and delivery
• Website hosting and maintenance
• Email marketing services
• Analytics and performance monitoring

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our terms and conditions

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• SSL encryption for data transmission
• Secure data storage and access controls
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account Information: Until account deletion or 7 years of inactivity
• Purchase Records: 6 years for tax and legal compliance
• Marketing Preferences: Until you unsubscribe
• Website Analytics: 26 months (Google Analytics default)

8. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at [email protected] or +44 20 7234 5678.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie usage, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. International Transfers

Your personal data may be transferred to and processed in countries outside the UK. When this occurs, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Certification schemes
• Approved codes of conduct

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email or website notification.

14. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.