Privacy Policy

Last updated: May 2026

Information About Us

www.audiupgrades.co.uk and www.audiupgrades.com are websites owned and operated by Audi Upgrades Limited (“We”, “us”, “our”); we are a Company registered in England and Wales under Registration number: 12507435. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Audi Upgrades Limited is the data controller.

About This Policy

Audi Upgrades Limited is committed to safeguarding and preserving the privacy of our customers and website visitors. This privacy policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights in relation to it. We update this policy from time to time, so please review it regularly. The “Last updated” date at the top of this page will tell you when it was last changed.

Information We Collect

In running and maintaining this website and providing our retrofit services, we may collect and process the following categories of personal data about you:

  • Identity and contact data: your name, email address, telephone number, and postal address.
  • Vehicle data: your vehicle identification number (VIN), registration, make, model, and details of the retrofit work being quoted or carried out.
  • Transaction data: details of payments, deposits, invoices, and the services you have purchased from us.
  • Communications data: the content of emails, messages, or other correspondence between you and us.
  • Technical and usage data: information about your visits to this website, including pages viewed, resources accessed, traffic data, approximate location data, and the device and browser you use.

How We Use Your Information and Our Lawful Basis

We only process your personal data where we have a lawful basis to do so under UK GDPR. The lawful bases we rely on are:

  • Contract: to provide quotes, carry out retrofit work, process payments, deliver parts, and fulfil our obligations to you as a customer.
  • Legal obligation: to retain accounting and tax records as required by HMRC, and to comply with other legal or regulatory requirements.
  • Legitimate interests: to maintain records of historical retrofit work so that we can support future warranty claims, diagnostic queries, or further work on the same vehicle; to improve our website and services; and to protect our business against fraud.
  • Consent: where you have specifically agreed, for example by submitting an enquiry form or opting in to a Trustpilot review request.

Use of Cookies

Our website uses cookies. For full details of the cookies we set and the third parties whose embedded content may set cookies when you visit our site, please see our Cookies Policy.

How Long We Keep Your Data

We keep different categories of data for different periods, depending on why we hold it:

  • Accounting and tax records (invoices, payment records) are retained for a minimum of 6 years from the end of the relevant financial year, in line with HMRC requirements.
  • Customer and vehicle retrofit records (your contact details, VIN, details of work carried out, diagnostic data) are retained for the working life of the vehicle. This is because retrofits often need to be supported, diagnosed, or revisited many years after installation, and keeping a complete history allows us to provide that ongoing support to you or to a subsequent owner you authorise.
  • Enquiries that do not result in a booking are retained for up to 2 years, after which they are deleted unless you have asked us to keep them for a future project.

You can ask us to delete your data at any time (see “Your Rights” below), subject to any legal obligation we have to retain it.

Marketing

We do not send marketing emails, newsletters, or promotional communications. All emails we send to customers are transactional in nature — relating directly to your enquiry, quote, booking, installation, or aftercare for a specific job.

Who We Share Your Data With

We do not sell your personal data. We only share it with the following categories of recipient, and only where necessary:

  • Our service providers (data processors) who help us operate our business, including Microsoft (for our business email and document storage via Microsoft 365) and Intuit (for invoicing and payments via QuickBooks). These providers are contractually required to protect your data and only process it on our instructions.
  • Parts suppliers where it is necessary to share order details to procure the correct parts for your vehicle.
  • Professional advisers such as our accountant or legal advisers, where required.
  • Third-party platforms whose content is embedded in our website — specifically TrustPilot, YouTube (Google), Facebook (Meta), and Instagram (Meta). When you visit pages containing their embedded content and you have consented to non-essential cookies, these providers may receive information about your visit directly from your browser, including your IP address and the page being viewed. We do not control how these providers use that information; please refer to the providers’ own privacy policies and to our Cookie Policy for further details.
  • Law enforcement, regulators, or other authorities where we are legally required to disclose information, or where disclosure is necessary to protect our legal rights or to prevent fraud.
  • A buyer in the event we sell or transfer all or part of our business.

International Data Transfers

Some of our service providers (including Microsoft, Intuit, Google, and Meta) may store or process data on servers located outside the United Kingdom. Where this happens, we rely on appropriate safeguards as required by UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses, to ensure your data continues to be protected to UK standards.

Data Security

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or misuse. However, no transmission of information over the internet can be guaranteed to be completely secure. Sending information to us electronically is at your own risk, but once we receive it we apply strict access controls and use reputable, security-compliant service providers to hold it.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to ask us to correct data that is inaccurate or incomplete.
  • Right to erasure — to ask us to delete your data, subject to any legal obligation we have to keep it.
  • Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
  • Right to object — to object to processing based on our legitimate interests.
  • Right to data portability — to receive your data in a structured, commonly used format.
  • Right to withdraw consent — where we rely on your consent to process data, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in the “Contact Us” section below. We will respond within one month. There is no charge for a routine request; we may only charge a reasonable fee, or refuse to act, where a request is manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at www.ico.org.uk or on 0303 123 1113.

Third Party Links

On occasion this website may include links to third-party websites. Where we provide a link, it does not mean that we endorse or approve that website’s privacy practices. You should review their own privacy policy before sharing any personal data with them.

Variations

We may revise this Privacy Policy at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we have made. Material changes will be reflected in the “Last updated” date at the top of this policy.

Contacting Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at info@audiupgrades.co.uk.