Privacy Policy

Who we are

This policy explains how we handle personal information when you use this website, buy from us or contact us.

What we collect

• Your account: your name, email address and, if you add it, a phone number. Your password is stored only as a one-way hash.
• Your orders: contact details, delivery address, the pieces you order and the order's progress. For card payments we keep only the card brand and the last four digits; full card numbers are never stored on our systems.
• Security: when you sign in we record the time, a coarse description of the device and browser, and the network address used, so you can see and end your sessions. Emailed codes and authenticator-app secrets are stored encrypted or as one-way hashes, never in readable form.
• Messages and requests: what you send through our contact, consultation, trade and bespoke forms, including any image or drawing you upload. Location and camera details are removed from uploaded photographs.
• Newsletter: your email address, if you subscribe.
• WhatsApp order updates: your mobile number and your consent, if you choose to receive them.
• How the site is used: only if you allow analytics cookies (see below).

How we use it

We use this information to take and deliver your orders, to answer you, to keep accounts secure, to keep our records, and (only with your permission) to improve the site and to send you news.

Cookies and analytics

Cookies that the site needs to work are always set. Our own analytics runs only after you allow it, and we use no advertising cookies. The Cookie Policy lists every cookie, and you can change your choice at any time from "Cookie settings" at the foot of every page.

Who we share it with

We share information only with the services that help us run the store:

• an email delivery service, which sends order and account emails on our behalf;
• secure cloud storage for images and documents;
• couriers, who receive the name, phone number and address needed to deliver your order;
• WhatsApp (Meta Platforms), only if you ask for order updates there.

We do not sell personal information.

Your choices and rights

You can update your account details, change your email and marketing preferences, turn WhatsApp updates off and change your cookie choices at any time from your account and from "Cookie settings".

Security

Passwords are hashed, codes and authenticator secrets are encrypted, sign-in attempts are rate-limited, and two-step verification is available on every account and required for studio staff.

Contact and grievances

For any question about this policy or your information, write to studio@carprugs.com.

Changes to this policy

When we change this policy, the date at the side of this page changes with it.