How DNA4X4 collects, uses, shares and protects personal information
when you use our website, place an order or bring a vehicle to our workshop.
We explain what information we collect and why we need it.
Information is used for genuine business, contractual and legal purposes.
You have rights over your personal information and how it is used.
This policy applies when you visit our website, contact us, create an
account, request a quotation, place an order, enter a competition or
use our workshop services.
Delta November Alpha Ltd trading as DNA4X4 is the
controller responsible for the personal information described in
this policy.
We use personal information to supply products and workshop
services, process payments, arrange deliveries, manage customer
accounts, provide support and operate our business.
We do not sell personal information. We only provide it to another
organisation where there is a legitimate reason, such as processing
a payment, delivering an order, fulfilling an order directly from a
supplier or complying with the law.
If you provide information about another person—for example, a
different delivery recipient—you must have permission to give that
information to us.
The information involved depends on whether you browse the website,
place an order, contact us or use our workshop.
We normally receive information directly from you. We may also receive
it from somebody ordering on your behalf, our website, payment
providers, delivery companies, fulfilment suppliers, social-media
platforms and fraud-prevention services.
UK data-protection law requires us to have a valid reason for every
use of personal information.
Used for quotations, orders, payments, delivery, customer accounts,
returns, warranties and workshop bookings or work.
Used for accounting, tax, product-safety, consumer, regulatory,
fraud-prevention and data-protection obligations.
Used for security, customer service, improving our services,
protecting legal rights and maintaining workshop condition records.
Used where required for optional cookies, promotional communications
or using identifiable customer images for promotion.
When a vehicle enters our workshop, we may photograph it and make
detailed notes about its existing condition, mileage, visible damage,
accessories and other relevant features.
These records help us to:
Workshop condition photographs are not automatically marketing
photographs. If we want to use an identifiable customer vehicle in
promotional material, we will explain the proposed use and obtain
permission or establish another appropriate lawful basis first.
We share only the information reasonably required for the relevant
service and do not authorise providers to use it for unrelated marketing.
Online payments are currently provided through WooPayments, which is
operated through Automattic in partnership with Stripe.
Information shared may include:
Card details entered into secured payment fields are handled by the
payment provider. DNA4X4 does not intentionally store complete card
numbers or card-security codes in its WordPress or WooCommerce order
records.
Payment providers may use automated fraud-screening tools. A payment
may be declined or referred for review where a transaction appears
unusual.
We use ParcelHero to arrange some deliveries. ParcelHero may select
or provide access to carriers such as UPS, FedEx and other available
delivery services.
Certain EVC products are sent using Royal Mail. Other products may
be dispatched directly by one of our suppliers.
For delivery we may provide:
Direct-dispatch suppliers receive only the customer and order
information reasonably necessary to prepare, send and support the
relevant order.
To source products, arrange direct dispatch, resolve delivery
questions and manage warranties.
Including ParcelHero, Royal Mail and the carrier selected for a
particular consignment.
We use Google Workspace for business email, documents and internal
communications.
Including website hosting, WooCommerce, security, backup, support
and cookie-management services.
When you interact with our Facebook activity, promotions,
advertisements, messages or competitions.
Accountants, insurers, legal advisers, regulators, courts, police
or public authorities where reasonably necessary or legally required.
Payment, cloud, social-media, delivery or supplier services may process
information outside the United Kingdom. Where UK law requires it, we
use an adequacy decision, approved contractual safeguards or another
permitted transfer mechanism.
Our service messages and optional promotional activity are treated
differently.
Our website may use cookies or similar technologies to operate the
shop, retain basket contents, manage customer sessions, remember
choices, maintain security and understand website performance.
Where consent is legally required, the relevant technology will be
used in accordance with your choice. You can review or change your
selection using the cookie or privacy settings control displayed on
our website.
We do not currently operate routine promotional email or SMS
campaigns. Order confirmations, delivery updates, workshop messages,
customer-support replies and important warranty or safety information
are service communications rather than marketing.
DNA4X4 carries out promotional activity on Facebook and may
occasionally run competitions. If you interact with a social-media
promotion, Meta may also process your information under its own
privacy terms.
Competition information is used to administer the competition,
confirm eligibility, contact entrants or winners, deliver prizes and
meet legal requirements. Any publication of winner information will
be explained in the relevant competition terms.
The website may retain basket or checkout information to preserve
your shopping session. If abandoned-basket reminders or other direct
marketing are introduced, we will provide appropriate information,
use a valid lawful basis and offer a clear way to opt out.
You may object to direct marketing at any time. If we later introduce
promotional email or text messages, every message will include an
appropriate unsubscribe or opt-out method.
We keep personal information only for as long as reasonably necessary
for the purpose for which it was collected.
Normally six years from the end of the relevant company financial
year, or longer where required by law or an active dispute.
Normally six years after the work is completed, or longer while a
warranty, complaint, insurance matter or legal claim remains active.
Normally up to 24 months after the last meaningful contact, unless
the enquiry becomes an order, complaint or legal matter.
While the account remains active and afterwards for a reasonable
period. Transaction records may be retained separately where required.
Non-winning entries are normally retained for no more than 12 months
after the competition closes. Winner and accounting records may be
retained for longer.
For as long as reasonably required to respect and demonstrate your
preference not to receive marketing.
According to the relevant cookie duration, security need and website
configuration. Longer retention may apply to suspected fraud or an
active security incident.
When information is no longer required, we take reasonable steps to
delete it, anonymise it or securely dispose of it. Backup copies may
remain for a limited period until overwritten through normal backup cycles.
Your rights depend on the information involved and our lawful basis.
Some rights are not absolute.
Ask for a copy of personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete information where there is no continuing reason to retain it.
Ask us to restrict how information is used in certain circumstances.
Object to legitimate-interest processing and direct marketing.
Receive certain information electronically or ask for it to be transferred.
Withdraw consent without affecting processing that took place beforehand.
Raise a concern about qualifying decisions made solely through automated processing.
We may ask for information needed to confirm your identity and
understand your request. We normally respond within one month.
Where the law permits extra time for a complex request, we will
explain why and keep you informed.
We use proportionate technical and organisational measures designed
to protect personal information against accidental loss, misuse,
unauthorised access, alteration or disclosure.
Our online shop and workshop services are not directed at children.
Orders must be placed by somebody legally able to enter the relevant
contract.
Other websites and social platforms have their own privacy practices.
Please review their notices when leaving the DNA4X4 website.
We want the opportunity to investigate and resolve any concern about
personal information.
Please explain what happened, which information or service is
affected and what you would like us to do.
We aim to acknowledge a data-protection complaint within 30 days,
investigate it, keep you appropriately informed and provide an
outcome without undue delay.
If you remain dissatisfied, you can complain to the UK Information
Commissioner’s Office.
Telephone:
0303 123 1113
Contact us with your request or concern and include enough detail
for us to identify the relevant order, account, vehicle or interaction.
We may update this policy when our services, providers or legal
obligations change. The review date at the top shows when this version
was last checked.
