Privacy & Cookie Policy
Vehicle Bearings | Last updated: 27 August 2026
This policy explains how Vehicle Bearings (“we”, “us”, “our”) collects, uses and protects your personal data when you visit or order from vehiclebearings.co.uk (the “Site”), in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Vehicle Bearings is the data controller for personal data collected through the Site. You can contact us about any privacy matter at [email protected].
2. What data we collect
Information you give us directly:
- Name, delivery address, billing address, email address, and phone number, when you place an order or create an account.
- Order details and payment confirmation (we do not store full card numbers — payments are processed by our payment provider, who has their own privacy policy).
- Any information you provide when contacting us, e.g. via the contact form (name, email, contact type, and your message).
- Account login details, if you register for an account (managed via WooCommerce).
Information collected automatically:
- Basic website analytics via Umami, a self-hosted, privacy-focused analytics tool that we run ourselves on our own server. Umami does not use cookies and does not collect information that identifies you individually. It records aggregate, non-identifying data such as: page views, referring website, approximate country-level location (derived from IP address, which is not stored in identifiable form), device type, browser, and screen size. Because this data cannot be tied back to you as an individual and does not use tracking cookies, it does not require your consent under UK cookie rules (PECR).
Cookies: The Site currently uses only strictly necessary cookies — for example, cookies set by our shopping cart/checkout system (WooCommerce) to remember the contents of your basket and keep you logged into your account. These are essential to the operation of the Site and are exempt from consent requirements under the Privacy and Electronic Communications Regulations (PECR), which is why you won’t see a cookie consent banner. We do not currently use advertising or third-party tracking cookies. If this changes in the future, we will update this policy and add a consent mechanism where required.
3. Why we use your data, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order, managing payment, delivery and returns | Performance of a contract |
| Responding to enquiries via the contact form | Performance of a contract / legitimate interests |
| Maintaining accounting and tax records | Legal obligation |
| Understanding site traffic and improving the Site (via Umami) | Legitimate interests (data is aggregate and non-identifying) |
| Preventing fraud and misuse of the Site | Legitimate interests |
We do not use your data for marketing emails or third-party advertising, and we do not sell your personal data to anyone.
4. Who we share data with
We share personal data only where necessary to fulfil your order or comply with the law:
- Couriers (DPD, Yodel/InPost, Royal Mail, or your chosen carrier) — to deliver your order.
- Our payment provider — to process payment securely.
- HMRC and our accountant/bookkeeper, where required for tax and accounting purposes.
- Law enforcement or regulators, where we are legally required to disclose data.
We do not share your data with third parties for their own marketing purposes.
5. Where your data is stored
Order and account data is stored within WooCommerce on our website hosting. Analytics data is stored on our own self-hosted Umami server. Where a payment or delivery provider we use stores or processes data outside the UK, they do so under their own privacy policy and applicable safeguards.
6. How long we keep your data
- Order and transaction records are kept for as long as required for accounting and tax purposes (normally 6 years).
- Account data is kept for as long as your account remains active, or until you ask us to delete it (subject to Section 5 above).
- Contact form enquiries are kept only as long as needed to resolve your query, unless a longer period is needed for legal reasons.
- Aggregate analytics data is not linked to your identity and is retained for site improvement purposes.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request erasure of your data, where applicable
- Restrict or object to certain processing
- Request a copy of your data in a portable format
- Withdraw consent, where we rely on consent (we currently do not for any processing described above)
To exercise any of these rights, email [email protected]. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.
8. Children
The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18.
9. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The “last updated” date at the top of this page will always show the latest version.
10. Contact
Vehicle Bearings Email: [email protected]