Privacy policy

PRIVACY POLICY

Last updated: 12 September 2026

1. WHO WE ARE

Hybrid Workshop UK Ltd operates this website and Shopify store. We are the data controller for the personal information described in this notice, except where another organisation acts as an independent controller for its own services.

Company name: Hybrid Workshop UK Ltd
Company number: 16571294
Registered office: 23 Holme Crescent, North Shields, NE29 7FS, United Kingdom
Email: hybridworkshopuk@gmail.com

This notice explains how we collect and use personal information when you visit our website, request a compatibility check or quotation, create an account, place an order, contact us, arrange a return, or make a warranty claim.

2. PERSONAL INFORMATION WE COLLECT

Depending on how you use the store, we may collect:

• Identity and contact information, including your name, email address, telephone number, billing address and delivery address.
• Account information, including your account login details, preferences and order history.
• Order and transaction information, including products viewed or purchased, cart activity, delivery details, payment status, returns, cancellations and refunds.
• Vehicle and technical information, including the vehicle make, model, year, VIN, battery configuration, diagnostic trouble codes, cell-voltage readings, installation information, photographs and warranty evidence.
• Communications, including enquiries and messages sent through our contact form, email, telephone, WhatsApp or social-media channels.
• Device and usage information, including IP address, browser and device type, cookie identifiers, pages viewed, referring pages and interactions with the website.
• Marketing and privacy preferences, including newsletter choices and cookie-consent settings.

Payment providers process full payment-card or bank details through their secure systems. We normally receive only limited payment information, such as payment method, payment status, transaction reference and fraud-risk indicators. We do not normally receive or store your complete payment-card number.

Please do not send special-category information, such as medical information, unless we specifically request it and explain why it is needed.

3. HOW WE COLLECT INFORMATION

We collect personal information:

• Directly from you when you place an order, create an account, request a quotation or VIN check, contact us, or submit return or warranty information.
• Automatically through Shopify, cookies and similar technologies when you use the website.
• From service providers involved in payments, fraud prevention, delivery, returns, customer support and website operation.
• From third parties where you choose to communicate with us through services such as WhatsApp, Facebook or Trustpilot.

4. HOW AND WHY WE USE PERSONAL INFORMATION

We use personal information only where we have a lawful basis under applicable UK data-protection law.

To provide products and services — contract

We use identity, contact, order, payment-status, vehicle and technical information to:

• Confirm vehicle compatibility and prepare quotations.
• Process payments and fulfil orders.
• Arrange delivery through appropriate freight or dangerous-goods carriers.
• Provide order updates and customer support.
• Handle cancellations, returns, refunds and warranty claims.
• Maintain and administer customer accounts.

This processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract. If you do not provide information needed for an order, compatibility check or delivery, we may be unable to supply the product or service.

To meet legal obligations — legal obligation

We may process and retain information to comply with tax, accounting, consumer-protection, product-safety, customs, transport, sanctions, fraud-prevention and other legal requirements. This can include maintaining transaction records, responding to lawful requests and contacting customers about a product-safety issue or recall.

To operate and protect our business — legitimate interests

Where necessary for our legitimate interests, and where those interests are not overridden by your rights, we may use information to:

• Protect the store, customers and payment process against fraud, abuse and security threats.
• Troubleshoot, maintain and improve the website and customer service.
• Keep appropriate records of enquiries, compatibility advice, orders and disputes.
• Establish, exercise or defend legal claims.
• Understand general store performance using appropriately limited analytics.

Our legitimate interests are running a safe and effective ecommerce business, preventing fraud, improving our services and protecting our legal rights. You may object to processing based on legitimate interests in the circumstances described below.

Marketing and non-essential cookies — consent or another permitted basis

If we offer marketing emails or use non-essential analytics or advertising cookies, we will request consent where required. You may withdraw consent or unsubscribe at any time. Where UK law permits a limited existing-customer marketing exemption, we may rely on it only where its requirements are met and every message provides an opt-out. We will still send service messages that are necessary for an order, account, safety notice, return or warranty matter.

5. COOKIES AND SIMILAR TECHNOLOGIES

Shopify and our service providers use cookies and similar technologies to operate checkout, remember your cart and preferences, keep the store secure and understand how the website is used.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential analytics, advertising or personalisation cookies will be used only in accordance with the choices available through our cookie banner or privacy settings where consent is required.

The cookies in use can change when Shopify settings or installed apps change. Please use the store’s cookie-preference tool for current choices. Disabling necessary cookies may prevent parts of the store or checkout from working correctly.

6. WHO WE SHARE INFORMATION WITH

We may disclose only the information reasonably necessary to:

• Shopify, which hosts and operates the store and checkout.
• Payment providers and fraud-prevention services used at checkout.
• Freight, courier, dangerous-goods and fulfilment providers that deliver or collect products.
• Manufacturers or technical specialists where needed for compatibility, diagnosis or warranty support.
• IT, hosting, communications, customer-support and data-storage providers.
• Professional advisers, including accountants, insurers, auditors and legal advisers.
• Trustpilot or another review provider where its service or widget is enabled.
• WhatsApp, Facebook or another platform when you choose to interact with us through that platform.
• Government bodies, regulators, courts, law-enforcement agencies or other parties where disclosure is required by law or necessary to protect legal rights.
• A buyer, investor or adviser in connection with a proposed sale, merger or restructuring of our business, subject to appropriate confidentiality protections.

We do not sell personal information for money.

7. SHOPIFY’S ROLE

Our store is hosted by Shopify. Shopify generally processes store data to provide services to us, but it may act as an independent controller for some of its own consumer services, such as Shop or Shop Pay, and for certain security, analytics or enhanced services.

Shopify may process information in countries outside the United Kingdom. More information about Shopify’s processing and privacy rights is available in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify’s privacy portal is available at:
https://privacy.shopify.com/en

8. INTERNATIONAL TRANSFERS

Some service providers may process personal information outside the United Kingdom. Where UK law requires safeguards for a transfer, we will rely on an appropriate mechanism, such as a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses, or another lawful safeguard. You may contact us for further information about the safeguards relevant to your information.

9. HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, warranty, safety and dispute-resolution requirements.

Our normal retention approach is:

• Order, payment-status, invoice, tax and accounting records: normally six years after the relevant transaction or the end of the relevant accounting period, unless a longer period is legally required.
• Compatibility, delivery, return, technical-support and warranty records: for the life of the order or claim and then for a period reasonably needed to deal with safety issues, disputes and legal claims.
• Unsuccessful quotations and general enquiries: normally up to 24 months after the last meaningful contact, unless needed for an ongoing matter.
• Customer-account information: while the account remains active and afterwards where retention is required for transactions, security or legal claims.
• Marketing information: until you unsubscribe or withdraw consent. We may retain minimal suppression-list information so that we continue to respect an opt-out.
• Cookie and technical-log information: according to the lifespan stated in the relevant cookie tool or the provider’s retention settings.

We may retain information for longer where required by law, where a dispute or investigation is ongoing, or where necessary to establish, exercise or defend legal claims. When information is no longer required, we delete it, anonymise it or securely restrict its use.

10. SECURITY

We use reasonable organisational and technical measures designed to protect personal information. However, no internet transmission or storage system is completely secure. Do not send payment-card details or other highly sensitive information through ordinary email, WhatsApp or website enquiry forms.

If you create an account, you are responsible for keeping your password confidential and should tell us promptly if you believe the account has been compromised.

11. YOUR UK DATA-PROTECTION RIGHTS

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask us to erase information.
• Ask us to restrict how information is used.
• Object to processing based on legitimate interests or to direct marketing.
• Receive certain information in a portable format or ask for it to be transferred.
• Withdraw consent at any time where processing is based on consent.
• Complain to the Information Commissioner’s Office.

These rights are not absolute and exemptions may apply. Withdrawing consent does not affect processing that was lawful before withdrawal. We may ask for information needed to confirm your identity before responding. We normally respond within one month, although the law allows additional time for certain complex or multiple requests.

To exercise a right, contact hybridworkshopuk@gmail.com. There is normally no fee, although the law permits a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.

12. AUTOMATED DECISION-MAKING

Shopify, payment providers and fraud-prevention services may generate automated risk indicators to help identify suspicious transactions. We do not intend to make a decision based solely on automated processing that produces legal or similarly significant effects on you without providing the information and safeguards required by law.

13. CHILDREN

Our products and services are intended for adults and professional vehicle technicians. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact us so that we can investigate and delete it where appropriate.

14. THIRD-PARTY WEBSITES AND SERVICES

The website may link to services that we do not control, including social-media, messaging, review and payment services. Those organisations process information under their own privacy notices. Please review their policies before providing information to them.

15. COMPLAINTS

Please contact us first if you have a concern about how we use personal information, so that we can try to resolve it.

You may also complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: https://ico.org.uk/make-a-complaint/data-protection-complaints/
Telephone: 0303 123 1113

If you live outside the United Kingdom, you may also have the right to complain to the data-protection authority where you live.

16. CHANGES TO THIS POLICY

We may update this notice when our practices, service providers or legal obligations change. We will publish the revised version on this website, update the “Last updated” date and provide additional notice where required. A revised policy applies from its published effective date and does not retrospectively make earlier processing lawful.

17. CONTACT US

Questions, requests and complaints about this notice or our use of personal information should be sent to:

Hybrid Workshop UK Ltd
Company number 16571294
23 Holme Crescent
North Shields
NE29 7FS
United Kingdom

Email: hybridworkshopuk@gmail.com