Privacy Policy

Last updated: 28 August 2026

This Privacy Policy explains how CreativeOBD Ltd collects, uses, shares and protects personal information when you visit our website, buy from us, create an account, contact us, subscribe to marketing or otherwise interact with us.

This policy is intended to provide the information required under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

CreativeOBD Ltd is the controller responsible for the personal information described in this policy.

CreativeOBD Ltd
Company number: 13988582
Unit 5, Meridian House
37 Road One
Winsford Industrial Estate
Winsford
Cheshire
CW7 3QG
United Kingdom

Email: support@creativeobd.co.uk
Website: https://www.creativeobd.co.uk
Contact page: https://www.creativeobd.co.uk/pages/contact

In this policy, “CreativeOBD”, “we”, “us” and “our” mean CreativeOBD Ltd.

2. Personal information we collect

Depending on how you interact with us, we may collect the following categories of personal information.

Identity and contact information

• Your name, business name and job title.

• Billing, delivery and business addresses.

• Email address and telephone number.

• Account username or other account identifiers.

Order and transaction information

• Products ordered, order numbers, prices, discounts and transaction dates.

• Delivery method, tracking information, returns, refunds, warranty matters and order history.

• VAT, customs or tax information where required.

• Payment status, payment method and limited payment information supplied by our payment providers. We do not normally receive or store your full payment-card number.

Communications and technical-enquiry information

• Emails, contact-form submissions, telephone notes and other correspondence.

• Product-support, compatibility and warranty enquiries.

• ECU, TCU, connector, vehicle, tool or component information that you choose to provide.

• Photographs, labels, serial numbers, part numbers, vehicle identifiers or other files submitted to help us identify a product or connection.

• Feedback, reviews and responses to surveys where applicable.

Please avoid including personal information in technical photographs or documents unless it is necessary for us to handle your enquiry.

Account and preference information

• Customer-account details and saved addresses.

• Language, currency, region and communication preferences.

• Marketing subscriptions, consent records and unsubscribe or suppression records.

• Cookie and privacy choices.

Website, device and security information

• Internet Protocol (IP) address, browser, operating system and device type.

• Pages viewed, links used, referral source, dates, times and approximate location derived from an IP address.

• Shopping-basket activity, checkout activity and website interactions.

• Cookie identifiers and similar technical information, subject to your choices where consent is required.

• Security, fraud-prevention and diagnostic information.

Information we do not intentionally request

We do not normally need special-category information, such as health, biometric, religious or political information, and we ask you not to provide it unless it is genuinely necessary and we have explained how it will be handled.

3. How we collect personal information

We collect personal information:

• Directly from you when you place an order, create an account, contact us, request support, make a return or subscribe to marketing.

• Automatically from your browser or device when you use our website, including through cookies and similar technologies.

• From Shopify and the payment, delivery, account, security and other services used to operate our store.

• From payment providers, banks, couriers, customs agents, product suppliers or manufacturers where necessary to complete an order or resolve a payment, delivery, support or warranty matter.

• From a business or organisation that you represent, such as where a colleague places an order or asks us to contact you.

• From publicly available business sources where appropriate, for example to verify business contact or company information.

If another person provides your information to us, they should make sure that they are permitted to do so and that you are given access to this policy where appropriate.

4. How and why we use personal information

UK data protection law requires us to have a lawful basis for each use of personal information. The bases we rely on are:

• Contract: processing is necessary to enter into or perform a contract with you.

• Legal obligation: processing is necessary to comply with the law.

• Legitimate interests: processing is necessary for our legitimate business interests or those of another person, provided that those interests are not overridden by your rights.

• Consent: you have given a clear choice and may withdraw it at any time.

We use personal information as follows:

Purpose	Typical information	Lawful basis
Responding to product, compatibility, price and pre-order enquiries	Identity, contact, business and technical-enquiry information	Contract steps at your request; legitimate interests in responding to enquiries and operating our business
Processing orders and providing products or services	Identity, contact, order, transaction and account information	Contract
Taking and reconciling payments	Identity, order, transaction and limited payment information	Contract; legal obligation
Delivering orders and handling customs requirements	Identity, contact, order, delivery and customs information	Contract; legal obligation
Managing customer accounts	Identity, contact, account, order and preference information	Contract; legitimate interests in providing account facilities
Providing support and handling returns, repairs, complaints and warranty matters	Identity, contact, order, communications and technical-enquiry information	Contract; legal obligation; legitimate interests in customer service and protecting legal rights
Maintaining tax, accounting and company records	Identity, contact, order, invoice and transaction information	Legal obligation
Preventing fraud, misuse and security incidents	Identity, transaction, device, security and website information	Legitimate interests in protecting customers, our website and our business; legal obligation where applicable
Operating and improving the website and our products	Website, device, order, communications and feedback information	Legitimate interests in improving our services; consent where required for cookies or similar technologies
Sending essential order, account, delivery, safety and service communications	Identity, contact, account and order information	Contract; legal obligation; legitimate interests in providing important service information
Sending newsletters, product updates and promotional marketing	Identity, contact, purchase history and marketing preferences	Consent; or legitimate interests where electronic-marketing rules permit the customer “soft opt-in” or business-to-business marketing
Establishing, exercising or defending legal claims	Relevant identity, order, transaction, communications and security information	Legitimate interests; legal obligation
Managing a reorganisation, sale or transfer of the business	Relevant customer, supplier and transaction information	Legitimate interests in managing our business, subject to appropriate safeguards

Where we rely on legitimate interests, those interests include operating and improving CreativeOBD, responding to customers, keeping our systems and transactions secure, preventing fraud, maintaining appropriate business records, understanding product demand and protecting our legal rights. We consider the necessity and potential effect of the processing before relying on this basis.

Where information is required to enter into or perform a contract, failure to provide it may mean that we cannot process an order, take payment, deliver goods or respond fully to a request.

5. Marketing communications

We may send product news, technical updates and offers where you have consented or where the law otherwise permits us to do so.

For individual customers, this may include the PECR “soft opt-in” where:

• We obtained your contact details during a sale or genuine sales enquiry.

• We market our own similar products or services.

• We gave you a clear opportunity to opt out when collecting the details.

• We provide an easy way to opt out in every message.

Different electronic-marketing rules may apply to corporate subscribers, but we will still provide a clear means of opting out and process personal information in accordance with UK data protection law.

You may unsubscribe through the link in a marketing email or contact support@creativeobd.co.uk. Stopping marketing does not prevent us from sending essential messages about an order, account, safety issue, product recall or support request.

If you unsubscribe, we may retain minimal information on a suppression list so that we can respect your choice.

6. Cookies and similar technologies

Our website uses cookies and similar storage or access technologies. These may include:

• Strictly necessary technologies: required for security, network communication, basket, checkout, payments, account access, language or privacy choices. These do not require consent where a legal exception applies.

• Functional technologies: remember optional choices and enhance website features.

• Analytics technologies: help us understand website use and improve performance.

• Advertising technologies: measure campaigns or support relevant advertising where used.

Where consent is required, optional technologies will not be used until you make a choice. You can accept, reject or change your choices through the Cookie preferences link in the website footer. Withdrawing consent does not affect processing that took place before withdrawal.

Cookie names, providers, purposes and expiry periods may change as the website and its services change. The current choices and available information are shown through the cookie-preference tool. Browser controls may also delete or block cookies, although blocking strictly necessary technologies may prevent parts of the store from working correctly.

7. Shopify and other recipients

Our online store is hosted on Shopify. Shopify processes personal information to provide store hosting, checkout, account, security and related ecommerce services. Shopify may process information in accordance with its own responsibilities and privacy information. You can read the Shopify Consumer Privacy Policy.

We do not sell personal information. We share it only where necessary for the purposes described in this policy, including with:

• Shopify and providers that host, maintain, secure or support our website and business systems.

• Payment processors, banks and fraud-prevention providers.

• Couriers, postal operators, freight providers, customs agents and authorities.

• Product suppliers, manufacturers and technical-support partners where necessary to fulfil an order or resolve a product, compatibility or warranty issue.

• Email, customer-service and marketing providers, subject to your choices and applicable law.

• Analytics or advertising providers where the required consent has been obtained.

• Accountants, auditors, insurers, legal advisers and other professional advisers.

• HM Revenue & Customs, regulators, courts, law-enforcement bodies and other authorities where disclosure is required or permitted by law.

• A prospective buyer, seller or adviser in connection with a genuine business sale, restructuring or transfer, subject to confidentiality and data-protection safeguards.

Providers acting on our behalf are permitted to use personal information only as required to supply their services and must protect it appropriately. Some recipients, such as payment providers or public authorities, may act as separate controllers and provide their own privacy information.

8. International transfers

Some service providers process personal information outside the United Kingdom. For example, personal information connected with our Shopify store may initially be processed by Shopify International Limited in Ireland and may also be processed by Shopify group companies and service providers in locations including Canada and the United States.

Where personal information is transferred to a country that is not covered by UK adequacy regulations, we use or require appropriate safeguards where applicable. These may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission Standard Contractual Clauses, approved standard contractual clauses, or another lawful transfer mechanism. We may also rely on an applicable adequacy decision.

You may contact support@creativeobd.co.uk for more information about the safeguards relevant to your information.

9. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, warranty, security and dispute-resolution requirements.

Our usual retention periods are:

Information	Usual retention period
Orders, invoices, payments, VAT and accounting records	At least six years from the end of the relevant company financial year, or longer where legally required
Customer-account information	While the account remains active, followed by deletion or anonymisation when no longer required; transaction records linked to the account may be retained for the legal periods above
Customer-service, compatibility and general enquiry records not linked to an order	Normally up to three years after the last meaningful contact
Returns, complaints, warranty and legal-claim records	Normally six years after the matter is closed, or longer where necessary for an active claim or legal obligation
Marketing-contact information	Until you unsubscribe, withdraw consent or we decide the information is no longer current; minimal suppression information may be retained for as long as needed to respect an opt-out
Website security and diagnostic logs	Normally up to 12 months, unless required for an investigation, security incident or legal claim
Cookie and similar-technology information	According to the expiry period shown through the cookie-preference tool or the relevant provider, and no longer than necessary for its stated purpose

We may retain information for longer if required by law, a regulator, legal proceedings or a reasonably anticipated dispute. Where possible, information that is no longer needed in identifiable form will be deleted or anonymised.

10. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, account and platform security, staff procedures and the use of service providers selected to handle information securely.

No internet or storage system can be guaranteed to be completely secure. You are responsible for keeping any customer-account credentials confidential and should contact us if you believe an account or communication has been compromised.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

• Be informed about how your personal information is used.

• Request access to the personal information we hold about you.

• Ask us to correct inaccurate or incomplete information.

• Ask us to erase information where there is no lawful reason to continue using it.

• Ask us to restrict how information is used in certain circumstances.

• Object to processing based on legitimate interests, including an absolute right to object to direct marketing.

• Receive certain information in a structured, commonly used and machine-readable format and ask for it to be transferred where the right to data portability applies.

• Withdraw consent at any time where processing relies on consent.

• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where the law permits it and appropriate safeguards apply.

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a right, email support@creativeobd.co.uk. Please describe your request clearly. We may ask for information reasonably necessary to confirm your identity and protect personal information from unauthorised disclosure. We normally respond within one month, although the law permits an extension for particularly complex or numerous requests.

You will not normally have to pay a fee. A reasonable fee may be charged, or a request refused, where the law permits this because a request is manifestly unfounded or excessive.

12. Automated processing

Our ecommerce, payment and security providers may use automated systems to identify possible fraud, security risks or payment problems. We do not ordinarily make decisions based solely on automated processing that have legal or similarly significant effects on you. An order may be referred for manual review. Payment providers may make separate decisions under their own terms and privacy policies.

13. Children

Our website and products are intended for adults and professional or business use. We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, contact support@creativeobd.co.uk so that we can investigate and take appropriate action.

14. External links

Our website may link to websites or services operated by other organisations. Those organisations are responsible for their own privacy practices. We recommend reviewing their privacy information before providing personal information.

15. Complaints

Please contact us first if you have a concern about how we use personal information so that we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

If you are located outside the United Kingdom, you may also have the right to complain to the data-protection authority responsible for your location.

16. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be published on this page with a revised “Last updated” date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people where required.

17. Contact us

For privacy questions, rights requests or complaints, contact:

CreativeOBD Ltd
Unit 5, Meridian House
37 Road One
Winsford Industrial Estate
Winsford
Cheshire
CW7 3QG
United Kingdom

Email: support@creativeobd.co.uk
Contact page: https://www.creativeobd.co.uk/pages/contact