This policy explains how Encirco Limited ("Encirco", "we", "us") collects and uses personal data when you use encirco.com, request a quote, open a trade account or work with us. We are the data controller and are registered with the Information Commissioner's Office (ICO) under reference ZB529727.
1. Data we collect
- Contact and business details – name, company, email, phone, address, VAT details.
- Quote and order information – job briefs, artwork, vehicle details, file links (e.g. WeTransfer) and correspondence.
- Account data – login email, encrypted password and portal activity.
- Billing data – invoices and payment records (we do not store full card details).
- Technical data – essential session storage needed to keep you signed in. See our Cookie Policy.
2. Why we use it and our lawful basis
- Contract – to prepare quotes, produce and deliver orders, and run your trade account.
- Legitimate interests – to reply to enquiries, improve our service, prevent fraud and keep business-to-business contacts informed about relevant services (you can opt out at any time).
- Legal obligation – to keep tax, accounting and company records.
- Consent – where we ask for it, for example any optional marketing. You can withdraw consent at any time.
3. Your artwork and AI
Artwork, designs, CAD files and vehicle templates you send us are used only to produce your job. We do not sell them, share them with other customers, or use them to train artificial intelligence models, and we do not upload them to AI tools that retain or learn from your content. If we use AI-assisted tools in design work we will tell you, and a human designer reviews all output.
4. Who we share data with
We use trusted processors bound by contract to protect your data, including our website hosting and database provider, our transactional email provider, file transfer services you choose to use, couriers delivering your order, our accountants, and payment providers. Our online PPF kit store (stekppfkits.com) operates on Shopify under its own privacy notice. We never sell personal data.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to keep it protected.
6. How long we keep it
- Enquiries that don't become orders – up to 24 months.
- Customer, order and invoice records – 6 years after the end of the financial year, as required by HMRC.
- Production artwork – kept for repeat orders while your account is active, or deleted on request.
- Closed accounts – login data deleted within 90 days.
7. Your rights
Under UK GDPR you can ask to access, correct, delete, restrict or transfer your data, and object to processing based on legitimate interests or direct marketing. Email hello@encirco.com and we will respond within one month. You can also complain to the ICO at ico.org.uk or on 0303 123 1113.
8. Security
We use encrypted connections, access controls and reputable providers to protect your data. No system is completely secure, so please let us know straight away if you think your account has been compromised.
9. Changes
We may update this policy; the date at the top shows the latest version.
Contact
Encirco Limited, registered in England & Wales, company number 14328844. Registered office: Unit 8 Parkway House Developments, Wakefield Road, Ossett, WF5 9JD. VAT number GB425126227. ICO registration ZB529727.
Email hello@encirco.com · Phone 0113 5211 025