Your data, looked after.

This policy explains what personal information Pendle Performance collects through this website and in running our business, why we collect it, who we share it with, how long we keep it and the rights you have. It is written in plain English. If anything is unclear, call us and we will explain.

1. Who we are

Pendle Performance Ltd is a vehicle ECU tuning business, registered in England and Wales, company number 06876456. Our registered office and workshop (Pendle HQ) is at West Close Road, Barnoldswick, BB18 5EN.

For the information described in this policy we are the “controller”, which means we decide how and why it is used. You can contact us about anything in this policy through the question form on our Contact page or by post at the address above.

2. What we collect, why, and our lawful basis

UK data protection law (the UK GDPR and the Data Protection Act 2018) says we must have a lawful reason for each use of your information. The reason for each use is given below.

Agent applications (Become an Agent form)

If you apply to become a Pendle Performance agent, we collect what you enter on the form: your first and last name, email address, telephone number, company name, business address, age, motor trade experience and any other information you choose to give us. The website also records the date and time, the page the form was sent from, and your device’s IP address and browser details, which helps us spot fake or automated applications.

Your application is stored securely on our website. When it arrives, a short text message containing your name, business name and phone number is sent to the owner’s mobile so that we can get back to you quickly.

Why and lawful basis: to consider your application and contact you about it, which are steps you have asked us to take before entering into an agent agreement, and our legitimate interest in running and growing our agent network.

Enquiries

Most enquiries come to us by phone. When you call us, message us on social media or write to us, we keep the details you give us (such as your name, phone number, vehicle details and what you need) so that we can answer you.

Lawful basis: our legitimate interest in responding to enquiries, or steps you have asked us to take before booking work with us.

Bookings at Pendle HQ

Appointments are booked through our own online booking system, which runs on Pendle Performance’s own portal, hosted by Krystal in the UK alongside this website. When you book, it keeps the details you enter on the booking form (for example your name, contact details, vehicle details and appointment time) and sends you confirmation of your booking by text and email, followed by reminder texts before your appointment. The £50 booking deposit is paid through PayPal, which handles the payment; we never see or store your card or PayPal login details. We use your booking details to arrange and carry out the work, contact you about your appointment and keep our business and accounting records.

Lawful basis: performing our contract with you, and our legal obligation to keep accounting records.

Registration (number plate) search

When you enter a registration number, we send only that registration to our vehicle data provider, Vehicle Data Global Ltd (we may also use the DVSA’s official MOT history service), to find the vehicle’s make, model, engine and power so that we can show you the right tuning page. We do not ask for your name or any contact details.

We save:

• The vehicle details against the registration, so that the same vehicle never has to be looked up again.
• A record of each search: the registration, the date and time, the vehicle found, the page or choices shown and which choice was tapped. This tells us which vehicles people are interested in.
• A scrambled visitor code, not your IP address. To stop the search being misused, each visitor is limited to a small number of new look-ups a day. To do this we turn your IP address into a one-way code that cannot be turned back into the address. The counter behind the daily limit is deleted after 24 hours; the code is also kept with the search record so that we can see repeated misuse.

Lawful basis: our legitimate interest in providing the search, keeping its costs under control and understanding demand for our services.

Find your nearest agent

On our agents page you can enter a postcode to see the agents closest to you. Your browser sends the postcode directly to postcodes.io (a free service using official UK postcode data) to find its location, and that location is sent to the OSRM route-planning service to work out driving distances and times. We do not receive or store the postcode you enter. The map itself is loaded from OpenStreetMap. If you press “Directions”, Google Maps opens with the route and Google’s own privacy policy applies.

Website security

Our website is protected by Wordfence, a security firewall. To block attacks and suspicious activity it records the IP addresses of visits, failed log-ins and blocked requests, and checks addresses against Wordfence’s threat information.

Lawful basis: our legitimate interest in keeping the website and your information secure.

Website statistics

We use Google Analytics to understand how our website is used, for example which pages are visited and how people find us. Google Analytics uses cookies and collects information such as the pages you view, your device and browser, and your approximate location. It does not tell us who you are.

Lawful basis: our legitimate interest in understanding and improving our website. You can stop Google Analytics collecting information by blocking cookies (see section 7) or by using Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.

Our approved agents

Our agents are independent businesses. If an agent tunes your vehicle, that agent holds your details and is responsible for them as their own controller, under their own privacy policy. For anything about work an agent has carried out, please contact the agent directly. The agent details shown on our website are business contact details provided by the agents for publication.

3. Who we share information with

We never sell your information and we do not use it for advertising. We share it only with the organisations that help us run our website and business, and only as much as they need:

• Krystal Hosting Ltd – hosts our website on servers in the UK.
• Vehicle Data Global Ltd (and the DVSA) – receive the registration number you search for.
• PayPal – takes the £50 deposit when you book an appointment at Pendle HQ.
• Clickatell – sends the text alert to our own mobile when an agent application arrives.
• Wordfence (Defiant Inc.) – website security.
• Google – website statistics (Google Analytics), YouTube videos and web fonts.
• Our email and IT providers – to send and receive our business email and keep our records.
• Our accountants, professional advisers, and authorities such as HMRC or the police – where we must by law or to protect our legal rights.
• One of our agents – only if you ask us to put you in touch with them.

Some of these providers (for example PayPal, Clickatell, Wordfence, Google and Meta) are based in, or store information in, the United States or other countries outside the UK. Where information is transferred outside the UK, it is protected by the safeguards UK law requires, such as UK adequacy regulations (including the UK–US “data bridge”) or the UK’s approved contract clauses.

4. Content from other websites

Some pages include content from other services. When that content loads, your browser connects to the service, which receives your IP address and may set its own cookies:

• YouTube videos (Google) on many pages.
• Facebook page feeds on our agents’ pages (Meta).
• Maps from OpenStreetMap on the agents pages.
• PayPal, when you pay the booking deposit on the booking page (the booking box itself comes from our own portal).
• Fonts and website code from Google Fonts, cdnjs (Cloudflare) and jsDelivr.

Our links to Facebook, Instagram and YouTube simply take you to those websites; their own privacy policies then apply.

5. How long we keep information

• Agent applications: 12 months from the date of the application if you do not become an agent. If you do, we keep your details for as long as you are an agent and for 6 years afterwards (the period in which legal claims can be made and business records must be kept).
• Enquiries: up to 12 months, unless they lead to work for you.
• Bookings, job and invoice records: 6 years from the end of the financial year they relate to, as required for tax and accounting.
• Registration searches: search records (including the scrambled visitor code) for up to 2 years. The vehicle details saved against a registration describe the vehicle, not you, and are kept so that the vehicle never has to be looked up twice.
• Daily search limits: deleted after 24 hours.
• Security logs: kept for a short period and deleted automatically.
• Google Analytics: 14 months.
• Text alerts: the website keeps a note of its last 30 alerts only.

6. Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to our use of it where we rely on our legitimate interests;
• ask us to transfer information you gave us to you or to another organisation, where this applies;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, send us a question through our Contact page or write to us at West Close Road, Barnoldswick, BB18 5EN. There is normally no charge. We may need to confirm your identity, and we will reply within one month. We do not make decisions about you by purely automated means that have legal or similarly significant effects.

7. Cookies

Cookies are small files that a website stores on your device. Our own website does not need any cookies to work for visitors; the registration search, agent finder and brochures work without them. The cookies you may see come from:

• Google Analytics (_ga, _ga_…) – website statistics; kept for up to 2 years.
• YouTube (for example YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA) – set by Google when a page with a video loads, to run the video player and measure viewing; kept for the visit or up to about 6 months.
• PayPal – set only if you pay the booking deposit, so the payment works and to prevent fraud. Our booking page itself sets no cookies.
• Facebook – may set cookies when an agent’s Facebook feed loads, particularly if you are logged in to Facebook.
• Website log-in cookies – only for our own staff when they log in to manage the website.

You can block or delete cookies at any time in your browser settings. The website will still work, although videos and the booking calendar may not load.

8. Keeping your information safe

Our website is served over a secure (HTTPS) connection, protected by a security firewall, and only authorised people at Pendle Performance can see the information you send us.

9. How to complain

If you are unhappy with how we have handled your information, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Changes to this policy

We will update this policy when the way we use information changes. The date at the top shows when it was last updated.