Privacy Policy

Last updated: 10 August 2025

Who we are

Twinwoods 4×4 Ltd (company no. 11812219, VAT GB 318 9764 58). Twinwoods 4×4 is a trading name of Twinwoods 4×4 Ltd.

Address: Unit 7, Three Oaks Farm, Park Lane, Sharnbrook, Bedfordshire MK44 1LS, United Kingdom

Email: [email protected] | Tel/WhatsApp: +44 (0)1234 958897

We are the data controller for personal data collected via our website and sales channels.

Scope

This policy covers how we collect, use and share personal data when you browse our site, make an enquiry or purchase, create an account, or interact with us worldwide.

What we collect

  • Identity and contact details such as name, addresses, email and phone
  • Order, delivery and returns details, communications and support history
  • Payment confirmations from our PCI-DSS compliant providers; we do not store full card numbers
  • Technical data such as IP address, device and browser information, approximate location, server logs and cookies
  • Fraud and security signals such as mismatched addresses or unusual behaviour
  • Marketing preferences where you choose to receive messages

How we use data and legal bases

  • To process your order, deliver goods, handle returns and provide support (contract)
  • To take and confirm payments via secure providers (contract and legitimate interests)
  • To send service messages such as order updates and security notices (contract/legitimate interests)
  • To protect our services from fraud and abuse and to keep the site secure (legitimate interests/legal obligation)
  • To run analytics and improve the site and our products (legitimate interests and, where required, consent)
  • To send marketing where you have opted in or where soft opt-in applies; you can opt out at any time (consent/soft opt-in)
  • To meet tax and accounting obligations (legal obligation)

Who we share data with

We share the minimum necessary with trusted providers for the purposes above, for example:

  • Payment processors such as TakePayments/Barclaycard
  • Couriers and fulfilment partners such as DHL for delivery, tracking and customs handling
  • Website hosting, email, backup and security providers
  • Analytics, advertising and anti-fraud tools such as Google Analytics and reCAPTCHA
  • Review and content widgets such as Trustpilot and YouTube embeds
  • Professional advisers such as accountants and legal advisers

We do not sell personal data.

International transfers

Some providers process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the ICO’s IDTA/UK Addendum to the EU Standard Contractual Clauses. Delivery outside the UK may require sharing data with carriers and customs agencies in the destination country.

How long we keep data

  • Orders and invoices are typically kept for 6 years for tax and audit
  • Customer accounts and support records are kept while the account is active or as needed to resolve issues
  • Marketing data is kept until you unsubscribe or the list is refreshed
  • Server logs are typically kept up to 12 months unless needed longer for security
  • Cookie preferences are usually kept for about 180 days

Your rights (UK/EEA/Swiss)

You can request access, correction, deletion, restriction or portability of your data, and you can object to processing based on legitimate interests. Where we rely on consent (for example marketing or non-essential cookies), you can withdraw it at any time.

Contact: [email protected]. We normally respond within one month.

You can also complain to the UK Information Commissioner’s Office: ico.org.uk.

Cookies

We use necessary cookies to run the site and optional cookies for analytics and advertising. You can manage consent at any time via the cookie settings link on our site. If you reject optional cookies, some features may not work as expected.

  • Google Analytics and Tag Manager for analytics and tag loading
  • Google reCAPTCHA for bot and spam protection
  • Google Ads conversion tracking to measure ad performance
  • Trustpilot widget to display reviews
  • YouTube embeds, using privacy-enhanced mode where possible

Security

We use SSL/TLS encryption and industry-standard technical and organisational measures. Payments are processed by PCI-DSS compliant providers. We do not request card details by email or chat and we do not store full card numbers.

Regional notices

EU/EEA and Switzerland

If you are in the EU/EEA or Switzerland, your rights mirror the UK section above. Where required, we use appropriate transfer safeguards for processing outside your region. If we appoint an EU representative, we will publish the details here.

United States

Some US state laws give additional rights. We provide this notice for residents of California and other similar states.

Categories collected: identifiers and contact details; commercial information such as purchases; internet and device activity; approximate location; inferences are not routinely created. Sources: you, your devices, cookies and analytics tools, and service providers. Purposes: as described in the How we use data section. Disclosures: to service providers and partners as listed above.

Sale/share of personal information: we do not sell personal information. Where analytics and advertising cookies are used, some states may treat this as “sharing” for cross-context behavioural advertising. You can opt out by using our cookie settings and turning off analytics/advertising cookies.

Your US rights may include access, deletion, correction, portability and the right to opt out of targeted advertising. To exercise rights, email [email protected]. We may ask you to verify your request. We will not discriminate against you for exercising your rights.

Canada

Under PIPEDA you have rights to access and correct your personal information and to complain to the Office of the Privacy Commissioner of Canada. Contact us first at [email protected]. OPC: priv.gc.ca.

Contact for privacy matters

Data protection lead: The Directors, Twinwoods 4×4 Ltd — [email protected], Unit 7, Three Oaks Farm, Park Lane, Sharnbrook, Bedfordshire MK44 1LS, United Kingdom.

Changes to this notice

We may update this notice to reflect changes to our practices or legal requirements. We will post updates here and change the date at the top.