Last updated: 29 September 2026

This Privacy Policy explains how Twinwoods 4×4 Ltd collects, uses, shares and protects personal information when you use our website, contact us or purchase from us.

Who we are

Twinwoods 4×4 Ltd
Company number: 11812219
VAT number: GB 318 9764 58

Twinwoods 4×4 is a trading name of Twinwoods 4×4 Ltd.

Unit 7, Three Oaks Farm,
Park Lane,
Sharnbrook,
Bedfordshire MK44 1LS,
United Kingdom

Email: [email protected]
Telephone / WhatsApp: +44 (0)1234 958897

Twinwoods 4×4 Ltd is the data controller for personal information collected through our website and our direct sales and customer-service channels.

What this policy covers

This policy applies when you browse our website, create an account, place or discuss an order, arrange delivery or collection, make a return or warranty enquiry, contact us by email, telephone or WhatsApp, or otherwise interact with Twinwoods 4×4.

Information we collect

Depending on how you interact with us, we may collect:

  • Identity and contact information, such as your name, billing and delivery addresses, email address and telephone number.
  • Order and transaction information, including products purchased, prices, delivery method, collection arrangements, returns, refunds and warranty information.
  • Checkout and transaction evidence, such as the version of our Terms and Conditions applying when an order was placed, checkout acknowledgements and other records associated with the transaction.
  • Payment information supplied to or received from our payment providers. We receive payment status and transaction information, but we do not store full payment-card numbers.
  • Communications, including emails, messages, enquiries and customer-service history. Telephone calls may be recorded where you are told that recording is taking place.
  • Technical and security information, such as IP address, browser and device information, server and security logs, cookies and similar technologies.
  • Fraud and payment-risk information, such as unusual transaction activity, payment-provider risk signals or inconsistencies between order and payment information.
  • Marketing preferences, including whether you have asked to receive or stop receiving marketing communications.

How we use your information

We use personal information for the following purposes:

  • Processing and fulfilling orders, including taking payment, arranging delivery or collection, handling returns and providing customer support.
    Lawful basis: performance of a contract or steps taken at your request before entering into a contract.
  • Order and transaction administration, including keeping records of the order, applicable terms, checkout information, refunds, complaints, chargebacks and disputes.
    Lawful basis: contract, legal obligation and our legitimate interests in maintaining accurate transaction records and resolving disputes.
  • Payment and fraud prevention, including processing payments and identifying suspicious or fraudulent transactions.
    Lawful basis: contract and our legitimate interests in protecting our business and customers from fraud and payment abuse.
  • Customer communications, such as order confirmations, delivery information, responses to enquiries and important service messages.
    Lawful basis: contract and legitimate interests.
  • Website operation and security, including protecting accounts, detecting abuse, maintaining logs, troubleshooting and keeping the website operational.
    Lawful basis: legitimate interests and, where applicable, legal obligation.
  • Analytics and website improvement, where permitted, to understand how our website is used and improve its performance, content and usability.
    Lawful basis: consent where required and legitimate interests where permitted by law.
  • Marketing, where you have consented or where the existing-customer soft opt-in under PECR applies. You can unsubscribe at any time.
    Lawful basis under data-protection law: consent or, where appropriate, legitimate interests. Electronic marketing is also subject to PECR.
  • Accounting, taxation and legal compliance.
    Lawful basis: legal obligation.

Payments

Payments are processed by secure third-party payment providers. Depending on the payment method you choose, these may include Stripe, Square and payment or wallet services made available through them, such as Apple Pay, Google Pay, Link or Klarna.

Payment providers may receive information needed to process and secure the transaction, such as your name, billing details, contact details, order value and device or fraud-prevention information.

We do not store full payment-card numbers on our website. Payment providers process payment information under their own security and privacy arrangements.

Who we share information with

We only share personal information where reasonably necessary for the purposes described in this policy. Recipients may include:

  • Payment providers, including Stripe, Square and associated payment-method providers.
  • Delivery and logistics providers, including DPD and DHL, together with their delivery partners where necessary.
  • Customs authorities, carriers and customs agents where information is required for an international shipment.
  • Website, hosting and security providers, including services used to host, protect, back up and operate our website.
  • Analytics and website-service providers, including Google services used for analytics, tag management and spam or bot prevention where enabled.
  • Third-party content and review services, such as Trustpilot and YouTube, where their content is displayed or used.
  • Professional advisers, such as accountants, legal advisers, insurers or other professional services where reasonably required.
  • Public authorities where disclosure is required by law or reasonably necessary to protect our legal rights.

We do not sell personal information.

International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, we use an appropriate lawful mechanism, such as UK adequacy regulations or approved contractual safeguards including the UK International Data Transfer Agreement or UK Addendum, as applicable.

If you order goods for delivery outside the UK, your name, address, telephone number, email address and shipment information may also be provided to carriers, customs authorities and other organisations in the destination or transit countries where necessary to deliver and clear the shipment.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security and dispute-resolution requirements.

  • Orders, invoices and accounting records are normally retained for at least the period required by UK tax and accounting law, generally six years.
  • Order, checkout and transaction evidence may be retained for as long as reasonably necessary to deal with returns, warranties, complaints, payment disputes, chargebacks and legal claims.
  • Customer accounts are retained while required to provide the account and for a reasonable period afterwards where records remain relevant to previous transactions.
  • Customer-service correspondence and call recordings, where applicable, are retained for only as long as reasonably necessary for customer service, security, evidence or dispute handling.
  • Security and server logs are retained for a limited period according to operational, security and provider requirements, unless they are required for investigation of a specific incident.
  • Marketing information is retained until you unsubscribe or it is no longer required. We may retain a minimal suppression record afterwards so that we can continue to respect your opt-out.
  • Cookie and consent records are retained according to the settings and retention periods of the relevant consent and website systems.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information in certain circumstances;
  • ask us to restrict how information is used in certain circumstances;
  • receive certain information in a portable format;
  • object to certain processing based on legitimate interests; and
  • withdraw consent where processing is based on consent.

You can exercise your rights by emailing [email protected]. We may need to verify your identity before acting on a request.

We will respond without undue delay and normally within one calendar month, subject to any extension permitted by data-protection law.

Data-protection complaints

If you have a complaint about how Twinwoods 4×4 has handled your personal information, please contact us at [email protected]. Please make it clear that your message concerns a data-protection complaint.

We will acknowledge a data-protection complaint within 30 days of receiving it. We will take appropriate steps to investigate it without undue delay, keep you informed where necessary, and tell you the outcome once our investigation is complete.

If you remain dissatisfied, you can complain to the UK Information Commissioner’s Office: ico.org.uk .

Cookies and similar technologies

We use cookies and similar technologies to operate the website, maintain baskets and checkout sessions, provide payment and security functions, remember preferences and, where permitted, understand how the website is used.

Some cookies are necessary for the website to function. Optional cookies and similar technologies are used only where permitted and, where required, with your consent.

Services used on the site may include:

  • Google Tag Manager for managing website tags;
  • Google Analytics for website analytics where enabled;
  • Google reCAPTCHA or similar services for spam and bot protection;
  • Trustpilot services for displaying reviews;
  • YouTube embeds for video content; and
  • payment-provider technologies required to offer secure payment methods.

You can review or change your optional cookie choices using the cookie settings available on our website.

Disabling optional cookies may affect analytics or third-party embedded features, but necessary checkout and security functions may still use essential cookies or similar technologies.

Security

We use appropriate technical and organisational measures designed to protect personal information, including HTTPS/TLS encryption, access controls, security monitoring, backups and payment providers operating appropriate payment-security controls.

We do not ask customers to send full card details to us by email, WhatsApp or other messaging services, and we do not store full card numbers on our website.

Customers outside the United Kingdom

We sell and deliver internationally. If you are outside the United Kingdom, local data-protection law may give you additional rights. Nothing in this policy is intended to limit rights that apply to you under mandatory local law.

You can contact us at [email protected] about a privacy or data-protection matter regardless of where you are located.

Contact for privacy matters

Data protection contact:
The Directors
Twinwoods 4×4 Ltd
Unit 7, Three Oaks Farm
Park Lane
Sharnbrook
Bedfordshire MK44 1LS
United Kingdom

Email: [email protected]

Changes to this Privacy Policy

We may update this policy when our services, suppliers, systems or legal obligations change. The current version will always be published on this page and the date at the top will be updated.