‌Effective Date: October 1, 2026‌

1. Introduction

Welcome to the privacy policy of COMPLETE VEHICLE ACCESSORIES LTD. This policy is designed to help you better understand how we collect, use, protect, share, and otherwise process your personal data when you visit our website at www.completevehicleaccs.com, browse our vehicle accessory product catalog, place an order, use our customer support services, or otherwise interact with us as a customer or site visitor.

COMPLETE VEHICLE ACCESSORIES LTD is a retailer dedicated to providing high-quality vehicle accessories that make every road trip far easier, ranging from car care products, interior and exterior upgrades, travel storage solutions, to safety gear for all types of passenger and commercial vehicles. Our registered business address is 20A Wheatfield Way, Hinckley Fields Industrial Estate, Hinckley, Leicestershire, LE10 1YG, United Kingdom. You may reach our data protection and customer support team at any time via our official contact email [email protected], or by phone at +44 1455 632756‌ for any privacy-related enquiries.

This Privacy Policy applies exclusively to our website, the services we provide directly through our e-commerce platform, and all in-person, phone, and online customer interactions related to your orders with us. It does not apply to websites or services that we do not control, including third-party payment gateways, linked partner websites, or social media platforms that you may access through external links on our site. We encourage you to read this entire policy carefully to gain full clarity on our data practices, and the rights you hold over your personal information under applicable data protection laws. This policy is incorporated into, and forms an integral part of, our Website Terms of Use that govern your use of our e-commerce platform.

2. Applicable Legal Frameworks

Our data processing practices are fully aligned with all applicable privacy regulations in effect as of the effective date of this policy. As a business operating out of the United Kingdom and serving customers across the UK, EU, and other global regions, we adhere strictly to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) as updated through the Data (Use and Access) Act 2025, whose key reform provisions came into force on 5 February 2026.

We acknowledge that the Information Commissioner’s Office (ICO) has strengthened enforcement of UK data protection rules in 2026, with enhanced requirements for transparency, user consent, and accountability for all businesses operating with a digital presence. We have structured our entire data management system to meet these updated requirements, including the new “recognised legitimate interests” framework introduced in 2026 regulatory reforms, as well as the updated PECR rules for electronic marketing and cookie management that apply to all website operators serving UK visitors. For customers located in the European Economic Area, we also comply with the EU General Data Protection Regulation (EU GDPR) and follow the evolving privacy compliance standards outlined in the EU Digital Omnibus initiative, to ensure all our international customers receive consistent, robust privacy protection no matter where they are based.

3. What Personal Data We Collect and How We Collect It

We only collect the minimum amount of personal information necessary to deliver our e-commerce services to you, in full adherence to the data minimisation principle enshrined in UK and EU privacy laws. We collect your information directly from you in the following scenarios:

  • ‌Account and Order Information‌: When you create a customer account on our website, place an order for vehicle accessories, or complete a guest checkout process, we collect your full name, billing and delivery address, contact phone number, email address, and order details including the specific products you purchase, order value, and delivery preferences. This information is required for us to process your payment, dispatch your order, and ensure your purchased items reach you at the correct location.
  • ‌Payment Information‌: When you complete a transaction on our website, we do not store your full credit card, debit card, or payment account details on our own servers. We share only the minimum necessary payment information with our PCI DSS compliant third-party payment processors to facilitate secure transaction completion, in line with global payment security standards.
  • ‌Customer Support Enquiries‌: When you contact us via email, phone, or our online customer support form to ask product questions, request after-sales support, report a product issue, or seek help with your order, we collect the contact details you provide, as well as the content of your messages to us, so we can resolve your enquiry efficiently and follow up with you on any outstanding issues.
  • ‌Marketing and Subscription Preferences‌: When you voluntarily sign up for our newsletter to receive updates on new vehicle accessory launches, exclusive discount offers, road trip tips, and seasonal promotions, we collect your email address and any optional preference information you share with us about the types of products you are interested in.
  • ‌Website Usage Data and Cookie Information‌: When you browse our website, we collect standard technical information including your device IP address, browser type, operating system, pages you visit on our site, time spent on each page, click-through behaviour, and general geolocation data (at the city or region level, not precise GPS location). For non-essential cookies, we strictly follow the 2026 UK GDPR cookie requirements: we will never set non-essential cookies on your device before you provide explicit prior consent, and we ensure that the option to reject all non-essential cookies is just as easy to access and execute with a single click as the option to accept cookies. We use this website usage data only to analyse site performance, improve our product recommendations, and fix technical issues to make your shopping experience smoother.
  • ‌Voluntarily Provided Information‌: We may also collect additional information you choose to share with us voluntarily, such as product reviews you submit, custom fitting requests for vehicle specific accessories, or feedback you provide via our customer surveys.

4. How We Use Your Personal Data

We process your personal data only for lawful, fair, and transparent purposes that are directly related to delivering our e-commerce services, and we will never use your personal data for any new incompatible purpose without notifying you in advance and obtaining any required additional consent. Our lawful bases for processing your data include consent, legitimate interest, and performance of contract, as laid out below:

  • ‌Processing for Performance of Contract‌: The majority of your order and account information is processed to fulfil our contractual obligations to you. This includes processing your order for vehicle accessories, arranging shipping and delivery, sending you order confirmation and tracking updates, processing returns and refunds, and providing after-sales warranty support for the products you purchase from us. This processing is strictly necessary to perform the sales contract we enter into with you when you place an order on our website.
  • ‌Processing Based on Legitimate Interest‌: We process certain categories of your data based on our recognised legitimate interests as an e-commerce business, under the 2026 UK data protection reform rules, in a manner that does not override your fundamental privacy rights. These legitimate interests include: maintaining the normal security and functionality of our website, preventing fraudulent transactions and unauthorised account access, improving our product catalogue and website user experience to serve our customers better, responding to your non-transaction related enquiries efficiently, and sending you service-related updates about changes to our order fulfilment processes, website maintenance notifications, or safety alerts for vehicle accessories you have purchased from us. We conduct regular assessments to ensure all our legitimate interest processing is balanced against your privacy rights, and you retain the right to object to this type of processing at any time as outlined later in this policy.
  • ‌Processing Based on Your Explicit Consent‌: We process your data for specific additional purposes only when you provide clear, explicit, opt-in consent. This includes sending you our marketing newsletter and promotional communications, using non-essential analytical cookies to understand visitor behaviour on our site, and sharing your data with third-party partner brands only when you explicitly request that we pass your details on for exclusive collaborative offers. You may withdraw your consent for any of these processing activities at any time, with no negative impact on your ability to place orders or use our core e-commerce shopping services.
  • ‌Compliance with Legal Obligations‌: We may process and retain your personal data when required to do so to comply with our legal obligations under UK tax law, consumer protection regulations, and law enforcement requests that we are legally bound to respond to. We only share your information with relevant competent authorities when we have verified that the request is fully lawful and compliant with all applicable data protection rules.

5. How We Share and Disclose Your Personal Data

We will never sell, rent, or lease your personal data to unaffiliated third parties for their own marketing purposes without your explicit separate written consent. We only share your information with trusted third parties in the strictly limited circumstances listed below:

  • ‌Trusted Service Providers Supporting Our E-Commerce Operations‌: We share necessary order-related information with vetted, contract-bound service providers who help us run our business, including national and international courier services that deliver your vehicle accessories to your specified address, PCI-compliant payment processors that securely handle your payment transactions, cloud hosting providers that store our website and order data on secure servers located in the United Kingdom and European Economic Area, and IT support teams that help us maintain website security and fix technical faults. All of our service providers are required to sign strict data processing agreements that mandate they protect your personal data to the same standards required by UK GDPR, and they are prohibited from processing your data for any purposes outside of the specific services they provide to us.
  • ‌Legal and Regulatory Disclosures‌: We may disclose your personal data if we are required to do so by a valid court order, regulatory mandate, or formal lawful request from a UK law enforcement or public authority, in full compliance with all applicable data protection laws. In the event of a sale, merger, or full or partial acquisition of our business assets, any transferred personal data will continue to be protected by the terms of this Privacy Policy, and you will be notified of the change in data controller information in a timely manner.
  • ‌Order Fulfillment for Specialised Vehicle Accessories‌: For custom-made or vehicle-specific products that are manufactured or sourced directly from our approved brand partners, we may share only the limited delivery and order specification information needed for that partner to produce and dispatch your item directly to you. This sharing is always done with appropriate data protection safeguards in place to ensure your information remains secure.

6. International Data Transfers

As a UK-based e-commerce business that serves customers across the world, some of your personal data may occasionally be transferred to locations outside of the United Kingdom and European Economic Area, for example to international courier hubs or trusted product suppliers located in other countries. Whenever we transfer your personal data outside of these regions, we will ensure that appropriate safeguards are in place to protect your data as required by UK GDPR rules. These safeguards include using officially approved standard contractual clauses issued by the UK Information Commissioner’s Office, verifying that the destination country has an adequate level of data protection recognised by the UK government, or putting in place other legally valid and appropriate security measures to keep your personal data fully protected. If you would like to request a full copy of the details of these safeguards, you may contact our data protection team at the email address listed in this policy at any time.

7. Data Retention Periods

We will never keep your personal data for longer than is strictly necessary for the legitimate purposes for which it was originally collected. We apply the following clear, standard retention schedules for all categories of personal data we hold:

  • For order and transaction related data: We retain this information for 7 years after your order is completed, to comply with UK tax law, consumer rights legislation, and product warranty requirements for the vehicle accessories we sell. After this retention period expires, this data is securely anonymised or permanently deleted from all our active systems.
  • For customer account data: If you create a registered customer account on our website, we will retain all your account information for as long as your account remains active. If you choose to delete your customer account at any time, we will securely remove all your personal account details within 10 working days, except for the limited order transaction data we are required to retain to meet our legal tax and compliance obligations.
  • For marketing consent records: We retain records of your marketing subscription preferences for as long as you remain subscribed to our newsletter, and for a maximum of 3 years after you unsubscribe, to comply with our records management requirements for electronic marketing regulations.
  • For website usage and cookie data: We only retain non-essential analytical website usage data for a maximum of 12 months, after which all this data is fully anonymised so that it can no longer be linked back to any individual site visitor.

8. Your Data Protection Rights

Under applicable UK and EU data protection laws, you hold a comprehensive set of legally enforceable rights over your personal data. At COMPLETE VEHICLE ACCESSORIES LTD, we make it easy for you to exercise all of these rights completely free of charge, with no unnecessary administrative barriers. Your rights include:

  • ‌Right of Access‌: You have the right to request a full copy of all the personal data we hold about you, at no cost to you. We will provide this information to you in a clear, commonly used machine readable format within one month of receiving your verified request.
  • ‌Right to Rectification‌: If you notice that any of the personal data we hold about you (such as your delivery address, contact phone number, or payment details) is inaccurate or out of date, you have the right to request that we correct this information immediately. You can also update most of these details yourself directly in the settings page of your registered customer account.
  • ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we permanently delete all of your personal data from our systems, under circumstances where the data is no longer necessary for the original purposes we collected it for, you have withdrawn your consent for the processing, or you object to our legitimate interest processing and there are no overriding legitimate grounds for us to continue holding your data. We will honour your erasure request fully, subject only to the limited data we are legally required to retain to meet our tax, accounting, and regulatory compliance obligations.
  • ‌Right to Restriction of Processing‌: You have the right to request that we temporarily pause processing of your personal data in circumstances where you contest the accuracy of the data, the processing is unlawful but you do not want us to delete the data, we no longer need the data for our original processing purposes but you require it to establish, exercise, or defend a legal claim, or you have objected to our legitimate interest processing while we carry out the required assessment of your objection.
  • ‌Right to Data Portability‌: For all personal data you have provided to us based on your consent or for the performance of our contract with you, you have the right to request that we transfer this data directly to you or to another data controller you specify, in a structured, widely used, machine readable format.
  • ‌Right to Object‌: You have the full right to object at any time to processing of your personal data that we carry out based on our legitimate interests. If you raise an objection, we will pause the relevant processing immediately and carry out a formal assessment to demonstrate that we have compelling, overriding legitimate grounds for the processing that take priority over your rights and freedoms, or else we will stop the processing of your data for that purpose. You also have an unconditional right to object at any time to us sending you direct marketing communications, and we will immediately remove your contact details from all our marketing distribution lists as soon as we receive your request.
  • ‌Right to Withdraw Consent‌: For any processing activity that you originally provided explicit opt-in consent for, you have the right to withdraw that consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we carried out before you submitted your withdrawal request.
  • ‌Right to Lodge a Complaint‌: If you are not satisfied with how we have handled your personal data or your privacy rights request, you have the right to lodge a formal complaint with the UK Information Commissioner’s Office, the independent data protection supervisory authority in the United Kingdom.

If you would like to exercise any of these rights, you may submit your request to us via email at [email protected], or by post to our registered business address at 20A Wheatfield Way, Hinckley Fields Industrial Estate, Hinckley, Leicestershire, LE10 1YG, United Kingdom. We may ask you to provide simple verification of your identity to ensure we are not disclosing your personal data to any unauthorised third parties, and we will respond to all valid verified requests within one month of receipt, in line with UK GDPR requirements.

9. Data Security

We take the security of your personal data extremely seriously, and we have implemented robust, industry standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security safeguards include end-to-end 256-bit TLS encryption for all data transmitted between your browser and our website servers, role-based access controls that restrict access to your personal data only to the small number of our trained staff members who need it to process your order or respond to your enquiries, regular automated security scans and penetration testing of our website systems, and regular data protection training for all our team members who handle customer personal information. All our data storage servers are located in secure, ISO 27001 certified data centres with 24/7 physical security monitoring.

In the extremely unlikely event that we experience a personal data breach that poses a high risk to your rights and freedoms under data protection law, we will notify you and the relevant supervisory authority without undue delay, in full compliance with all applicable legal notification requirements.

10. Children’s Privacy

Our e-commerce website and services are targeted for use by adults aged 18 years and older. We do not knowingly collect personal data from children under the age of 16. If you are a parent or guardian and you become aware that your child has provided personal data to us without your appropriate consent, please contact us immediately at [email protected], and we will take steps to permanently delete that information from all our systems as soon as possible.

11. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy from time to time to reflect changes in our business operations, new product launches, updates to applicable legal and regulatory requirements, or changes to our website functionality. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and we will publish a prominent notification on the homepage of our website at www.completevehicleaccs.com to alert registered customers and site visitors that the policy has been updated. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your personal data. Your continued use of our website and placement of orders after the effective date of any revised policy will constitute your acknowledgement and acceptance of the updated terms.

12. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy, our data processing practices, or you wish to exercise any of your data protection rights outlined in this document, you may contact our dedicated data protection team directly using the following details:

  • Company Name: COMPLETE VEHICLE ACCESSORIES LTD
  • Registered Address: 20A Wheatfield Way, Hinckley Fields Industrial Estate, Hinckley, Leicestershire, LE10 1YG, United Kingdom
  • Contact Email: [email protected]
  • Contact Phone: +44 1455 632756‌

We aim to respond to all legitimate privacy-related enquiries within 3 working days of receipt.