Privacy Policy & GDPR

PneuVault is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: BPS Ltd
Contact: sales@bps-uk.co.uk

What Information We Collect

We may collect and process the following personal data:

Identity data — name, job title, company name
Contact data — email address, phone number, billing and delivery address
Transaction data — details of products purchased and payment history
Technical data — IP address, browser type, device information, and cookies
Usage data — how you interact with our website
Communications data — emails, enquiries, and part requests submitted to us

How We Use Your Information

We use your personal data for the following purposes:

To process and fulfil your orders — including delivery, invoicing, and after-sales support
To respond to enquiries — including part requests and technical queries
To manage our customer relationship — account management and order history
To improve our website — analysing usage to enhance user experience
To comply with legal obligations — including tax, accounting, and regulatory requirements
To send relevant communications — only where you have given consent or we have a legitimate interest

Legal Basis for Processing

We process your personal data under the following lawful bases:

Contract — processing is necessary to fulfil your order or respond to a pre-contractual request
Legal obligation — where we are required to process data to comply with the law
Legitimate interests — where processing is in our legitimate business interests and does not override your rights
Consent — where you have explicitly opted in, such as for marketing communications

How We Share Your Information

We do not sell your personal data. We may share it with trusted third parties only where necessary, including:

Delivery and logistics providers (to fulfil your order)
Payment processors (to handle transactions securely)
IT and platform providers (such as Shopify, who host our store)
Legal or regulatory authorities (where required by law)

All third parties are required to handle your data securely and in accordance with UK GDPR.

Cookies

Our website uses cookies to improve your browsing experience and analyse site traffic. You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order and transaction records are typically retained for 7 years in line with HMRC requirements.

Your Rights

Under UK GDPR, you have the following rights:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your data where there is no lawful reason to retain it
Right to restrict processing — request that we limit how we use your data
Right to data portability — request your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at sales@bps-uk.co.uk. We will respond within 30 days in line with our legal obligations.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: July 2026