Privacy Policy

1. Who we are

This website is operated by BRANE-TEC LIMITED (trading as Bram Racing), a company registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data we collect about you.

• Trading name: Bram Racing
• Registered name: BRANE-TEC LIMITED
• Address: Hunt Street, Castleford, West Yorkshire, WF10 1NS, United Kingdom
• Email: enquiries@bramracing.co.uk
• Phone: 01977 703888

2. What personal data we collect

We only collect personal data that you give to us, or that is automatically generated through use of our website:

• Contact enquiries. Name, email address, phone number, and any information you include in the message field when you submit the contact form.
• Dyno enquiries. Name, contact details, vehicle details (make, model, registration), and any notes you provide when you submit the dyno enquiry form.
• Vehicle registration lookups. If you use our vehicle reg lookup feature, we send the registration to the DVLA Vehicle Enquiry API to retrieve publicly available vehicle information (make, model, fuel type). We do not store the registration after the lookup completes.
• Customer accounts (when available). Email address and sign-in tokens used to authenticate you via magic link. No passwords are stored.
• Order data (when the shop is active). Billing and delivery address, order history, and payment confirmation. Card details are never stored on our systems — they are handled directly by Stripe.
• Technical data. Anonymised usage analytics (pages viewed, device type, approximate location derived from IP, referrer) collected by Vercel Analytics and Umami. This data does not identify you personally.

3. Why we use your data

We process your personal data for the following purposes and on the following lawful bases:

• To respond to your enquiry. Legitimate interest — to provide the quote, information, or service you have asked for.
• To fulfil a contract. When you book a service or place an order, we use your data to perform the work and send order confirmations.
• To authenticate you. Legitimate interest — to verify account sign-in via magic link.
• To improve our website. Legitimate interest — to understand which pages are useful and to detect errors. Analytics data is aggregated and anonymised.
• Legal obligations. We keep basic transaction records where required by UK tax and accounting law (typically 6 years).

We do not use your data for marketing, advertising profiling, or automated decision-making.

4. Third-party processors

We share personal data with a limited number of trusted service providers who process it on our behalf. Each is bound by contract to protect your data and may only use it for the purposes we specify.

5. Cookies

This website does not set advertising or tracking cookies. Vercel Analytics and Umami both operate cookielessly — they do not store identifiers on your device. Functional cookies may be set when you sign in to a customer account (session cookies) or add items to your cart (so your cart persists between page loads). These cookies are strictly necessary to provide the features you've asked for and do not require consent under PECR.

6. How long we keep your data

• Contact and dyno enquiries: retained for up to 24 months after the last communication, then deleted unless you become a customer.
• Customer order records: retained for 6 years to comply with UK tax law.
• Analytics data: retained in aggregated, anonymised form indefinitely; raw logs deleted within 90 days.
• Account sign-in tokens: expire automatically after use or within 15 minutes.

7. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”), where applicable.
• Restriction of processing in certain circumstances.
• Portability — receive your data in a portable format.
• Object to processing based on legitimate interests.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email us at enquiries@bramracing.co.uk. We will respond within one month.

8. Security

All data transmitted to and from this website is encrypted in transit using TLS (HTTPS). Our hosting and email providers are contracted to appropriate technical and organisational security standards. No method of transmission or storage is completely secure, but we work to minimise risk.

9. International transfers

Our hosting (Vercel) stores data primarily within the European Union and United Kingdom. Some processors (for example Stripe and Resend) may transfer data to the United States. Where this happens, transfers are covered by UK adequacy regulations, Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated here before they take effect.

11. Contact

If you have questions about this privacy policy or how we handle your data, please get in touch:

Contact us