Privacy Policy

All sales on Motorsport-Merchandise.com are currently processed by our online store provider, Shopify.com. Our privacy policy sets out what personal buyer information we receive from shopify.com, how we use it and under what circumstances, if any, we will share it with other parties. We abide by and are compliant with the Data Protection Act 1998 (herein referred to as “The DPA”) and the General Data Protection Regulation (herein referred to as “The GDPR”) which comes into effect on 25th May 2018. We are committed to keeping buyers’ personal information secure and confidential.

Lawful Basis for Processing Personal Data
For the purposes of The GDPR, we are the Data Processor when selling on shopify.com and process all personal data lawfully, fairly and in a transparent manner. Under Article 6 of The GDPR, the lawful basis on which we process personal data received from shopify.com is that of “Contract” - whereby processing is necessary in order to fulfill buyer orders and enquiries. We retain information provided by shopify.com, such as transaction information for internal financial accounting purposes. It is a legal requirement to retain this information for a period of 7 years, following which full order information will be fully deleted. This will affect all order regardless of location of the buyer or recipient.

Data We Receive: Personally Identifiable Information
We receive personally identifiable information from shopify.com only when it is voluntarily submitted by buyers when placing an on-line order. The data we receive includes: name, billing address, delivery name, delivery address, e-mail address (in encrypted format), telephone number, date of order, items ordered, value of items ordered, chosen method of delivery. We do not sell or rent personally identifiable information to any third party for any purpose. Beginning 18 months after order creation date, the following types of personal data will be removed from all orders:

Buyer and recipient name

Physical address
Phone number and
Email address

How we use buyers’ personal information
We may use any personal buyer information provided by shopify.com to:

         processand dispatch buyers’ order/s
         carry out regulatory checks to meet our legal obligations
         prevent and detect crime
         develop and improve our products
         undertake anonymised statistical analysis (we won’t be able to identify individuals from this data)

We treat all information we hold about buyers as private and confidential. We will not reveal any personal details or details concerning buyers’ orders to anyone not connected with us, unless:

         abuyer asks us to reveal the information, or we have a buyer’s permission to do so
         weare required or permitted to do so by law
         itis required by law enforcement, fraud prevention or credit reference agencies

We may share buyer personal information with our suppliers, service providers and other contractors only to fulfil orders buyers place with us on shopify.com

Data Subject Access Requests
Under The GDPR buyers are entitled to obtain from us (the Data Processor for the purposes of The GDPR when selling on shopify.com) a copy of the data held concerning them and to have any inaccuracies in the data rectified. We are obliged to provide this data to within 1 calendar month of the request and free of charge. However we have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive.