Legal Notice
This Legal Notice explains how AutoAxory (“we”, “us”, “our”) collects, uses, stores, shares and protects your personal data when you visit or make a purchase from our website (the “Site”), contact us, create an account, or otherwise interact with us.
1) Company information (Legal Notice)
Company name: AUTOAXORY LTD
Registered address: 17 Cambridge Road, Kingston, London, United Kingdom, KT13NG
Trading address (if different): 17 Cambridge Road, Kingston, London, United Kingdom, KT13NG
Company registration number: 16959090
VAT Number : GB514542707
Telephone: +447344263302
Email: info@autoaxory.co.uk
2) Data controller
For the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018, AutoAxory is the data controller of the personal data processed via the Site, unless stated otherwise.
3) What personal data we collect
Depending on how you use the Site, we may collect the following categories of personal data:
- Identity & contact data: name, billing/shipping address, email address, telephone number.
- Account data: login details (where accounts are available), order history, preferences.
- Transaction data: purchases, payments (note: we do not store full card details; payments are handled by secure payment providers).
- Technical data: IP address, device identifiers, browser type/version, operating system, time zone, referring URLs, and similar device/usage information.
- Usage data: pages viewed, clicks, time spent on pages, interactions with Site features.
- Communications: messages sent via contact forms, support tickets, email, or chat.
- Marketing preferences: opt-in/opt-out status and communication preferences.
- User-generated content: product reviews or comments you submit.
4) How we collect your personal data
- Directly from you when you place an order, complete forms, create an account, post a review, or contact us.
- Automatically via cookies and similar technologies when you browse the Site (see “Cookies” below).
- From service providers involved in providing the Site and processing payments and deliveries.
5) Why we use your personal data (purposes)
We use personal data for the following purposes:
- To operate the Site and provide products and services (including order processing, delivery, returns and customer support).
- To manage your account (if you create one) and maintain the security of the Site.
- To communicate with you about orders, service updates and support requests.
- To personalise your experience and improve Site performance, features and usability.
- To analyse traffic and usage, generate statistics, and support business planning and reporting.
- To send marketing communications where you have consented or where permitted by law, and to manage your preferences.
- To prevent fraud, misuse and security incidents, and to protect our rights and those of our customers.
- To comply with legal and regulatory obligations and respond to lawful requests from public authorities.
6) Lawful bases for processing (UK GDPR)
We process personal data only where we have a lawful basis, including:
- Contract: where processing is necessary to perform a contract with you (e.g., fulfilling orders, providing support).
- Legal obligation: where we must comply with UK law (e.g., accounting/tax record-keeping, responding to lawful requests).
- Legitimate interests: where processing is necessary for our legitimate interests (e.g., improving the Site, preventing fraud, ensuring network security), and your interests and fundamental rights do not override those interests.
- Consent: where you have given consent (e.g., certain marketing communications and non-essential cookies).
7) Marketing communications
We may send you marketing communications by email or other electronic means where you have opted in, or where permitted under the Privacy and Electronic Communications Regulations (PECR). You can opt out at any time by:
- using the unsubscribe link in our emails; or
- emailing us at info@autoaxory.co.uk.
8) Cookies and similar technologies
Cookies are small text files stored on your device. We use cookies and similar technologies to make the Site work, remember preferences, understand how visitors use the Site, and support marketing where permitted.
Essential cookies are required for the Site to function (e.g., shopping cart, checkout, security). Non-essential cookies (e.g., analytics/marketing) are used only where you consent or where permitted by law.
You can control cookies through your browser settings and, where available, through any cookie preference tool on the Site. Please note that disabling certain cookies may affect Site functionality.
9) Server logs and technical data
When you access the Site, our servers may automatically record certain information (e.g., IP address, date/time of access, pages requested, browser/device details). This is used for security, troubleshooting, analytics and to improve the Site. Server log data is typically stored separately from account/order data.
10) Sharing your personal data
We may share personal data with trusted third parties only where necessary, including:
- E-commerce platform and hosting: Shopify and related services used to run the Site and process orders.
- Payments: payment providers (e.g., PayPal and card payment processors) to process transactions securely.
- Security and performance: services such as CDN/security providers (e.g., Cloudflare) to protect the Site and improve performance.
- Shipping and fulfilment: carriers and logistics partners to deliver orders.
- IT and professional services: email providers, analytics providers, accountants, auditors, legal advisers, and insurers.
- Authorities: regulators, courts, law enforcement or other bodies where legally required.
Where third parties process personal data on our behalf, they do so under contractual obligations to keep it secure and use it only as instructed.
11) International transfers
Some of our service providers may process personal data outside the UK. Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations, or approved contractual protections such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses).
12) Data retention
We retain personal data only for as long as necessary for the purposes described in this policy, including to fulfil orders, provide support, comply with legal obligations (e.g., tax and accounting), resolve disputes, and enforce our agreements.
Retention periods: Order records retained for 6 years for tax purposes.
13) Your rights (UK GDPR)
Subject to certain conditions, you have rights over your personal data, including:
- Right of access (to obtain a copy of your personal data).
- Right to rectification (to correct inaccurate or incomplete data).
- Right to erasure (to request deletion in certain circumstances).
- Right to restrict processing (in certain circumstances).
- Right to data portability (in certain circumstances).
- Right to object (including to direct marketing and, in some cases, legitimate interests processing).
- Right to withdraw consent (where processing is based on consent).
To exercise your rights, contact us at info@autoaxory.co.uk. We may need to verify your identity before fulfilling your request.
14) Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
15) Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. However, no internet transmission or electronic storage method is 100% secure.
If we become aware of a personal data breach that is likely to result in a risk to individuals’ rights and freedoms, we will take appropriate steps, which may include notifying affected individuals and/or the ICO where legally required.
16) Children’s data
Our Site is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@autoaxory.co.uk.
17) Links to other websites
The Site may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. Please review their privacy notices before providing personal data.
18) Social media features
The Site may include social media features (for example, Facebook/Instagram, YouTube, X/Twitter buttons or embeds). These features may collect information such as your IP address and which page you are visiting, and may set cookies to function properly. Your interactions with these features are governed by the privacy policy of the provider.
If you prefer that social platforms do not link your visit to your social account, log out of those platforms before visiting our Site.
19) Account access
Access to customer accounts is restricted. Authorised personnel may access account data only when necessary to provide support, maintain the Site, or address technical issues, and only on a need-to-know basis.
You are responsible for maintaining the confidentiality of your login credentials and for securing the device(s) you use to access the Site.
20) Changes to this policy
We may update this policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page.
Last updated: 20 February 2026
21) Contact
If you have questions about this Legal Notice & Privacy Policy or how we handle personal data, contact:
AutoAxory
Address: 17 Cambridge Road, Kingston, London, United Kingdom, KT1 3NG
Telephone: +447344263302
Email: info@autoaxory.co.uk