Last updated: 9 November 2026
This policy explains how Classic Car Oil London (“we”, “us”, “our”) collects and uses your personal data when you visit classiccaroillondon.com, buy from our shop, book one of our services or get in touch with us. It also explains the cookies our website uses and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Classic Car Oil London is the data controller for the personal data described in this policy.
- Business name: Classic Car Oil London Ltd
- Company number: 09641662
- Address: 70 Wood Street, London, E17 3HT
- Email: info@classiccaroillondon.com
- ICO registration number: TBC
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. The personal data we collect
We collect the following personal data:
- Order and account details: your name, billing and delivery address, email address, phone number, the products you order, your order history and, if you create one, your account login.
- Payment details: payments are processed by our payment provider (see section 5). We do not see or store your full card number.
- Service bookings: if you book valeting, auction preparation or pre-sale work, we keep details of the vehicle, where it is collected from or delivered to, and our correspondence with you.
- Enquiries: anything you send us through our contact form, by email, by phone or by message.
- Comments: if you leave a comment on our website, your name, email address, website (if given), the comment itself, your IP address and browser details, which help us detect spam.
- Website usage data: information collected through cookies, such as the pages you visit, how you arrived at our site, your device and browser type and your IP address. See section 8.
We do not knowingly collect special category data (such as health information), and our website is not intended for children.
3. How we use your data and our lawful bases
We only use your personal data when the law allows it. The two main lawful bases we rely on are contract and legitimate interests.
Contract
We need to use your personal data to perform a contract with you, or to take steps you have asked for before entering into one. If you do not provide this data, we cannot complete your order or service.
| What we do | Data used |
|---|---|
| Process your order, take payment and send order confirmations | Name, contact details, billing address, order details |
| Deliver your order personally in London, or by courier across the UK and Europe | Name, delivery address, phone number |
| Quote for, arrange and carry out valeting, auction preparation and pre-sale work, including collecting and returning vehicles | Name, contact details, vehicle details, collection and delivery addresses |
| Handle returns, refunds, faulty goods and after-sales questions | Name, contact details, order details, correspondence |
| Create and manage your customer account, if you choose to have one | Name, email address, password (encrypted), addresses, order history |
Legitimate interests
We use your data where it is necessary for our legitimate interests as a business, and those interests are not overridden by your rights and interests. We have weighed these interests against your rights and consider the uses below to be reasonable and expected.
| What we do | Our legitimate interest |
|---|---|
| Reply to general enquiries that are not about an order or booking | Answering questions from people interested in our products and services |
| Keep our website, shop and systems secure, and detect fraud and spam (including spam comments) | Protecting our business, our customers and our website |
| Publish and moderate comments left on our website | Running an open, spam-free comment section |
| Keep records of orders, bookings and correspondence | Dealing with customer queries and complaints, and improving our service |
| Establish, exercise or defend legal claims | Protecting our legal position |
You have the right to object to any processing based on legitimate interests (see section 7).
Other lawful bases
- Legal obligation: we keep financial records of sales, including customer names and order details, because tax law requires it.
- Consent: we only set analytics and statistics cookies if you agree to them through our cookie banner. You can withdraw your consent at any time (see section 8).
4. Who we share your data with
We never sell your personal data. We share it only with the service providers who help us run our business, and only as far as they need it to provide their service.
5. Our data processors
Data processors act on our instructions and under a written contract that requires them to keep your data secure and use it only for the service they provide to us.
| Processor | What they do for us | Data involved | Location and safeguards |
|---|---|---|---|
| Google Ireland Limited (Google Analytics) | Website statistics: how visitors use our site | Usage data, device and browser details, approximate location from your IP address. Only collected if you accept statistics cookies. | Ireland and the USA. Transfers to Google LLC are covered by the UK–US data bridge and Google’s data processing terms. Google’s privacy policy |
| 123-reg.co.uk | Hosts our website, shop and customer database | All data held on our website, including orders, accounts, comments and contact form messages | See https://www.123-reg.co.uk/terms/privacy/ |
| Stripe Payments UK Ltd / WooPayments / Paypal | Processes card payments, including Apple Pay and Google Pay | Name, billing address, email address, payment card details, order amount | Payment providers also act as independent controllers for fraud prevention and their own legal obligations. Policies: https://stripe.com/gb/privacy, https://www.paypal.com/uk/legalhub/paypal/privacy-full |
| Krystal Hosting Ltd | Our business email | Your email address and the content of emails you exchange with us | UK-based provider, privacy policy: https://krystal.io/legal/privacy-policy |
| Courier(s), e.g. Royal Mail, DPD, etc. | Deliver orders outside our local London delivery area | Name, delivery address, phone number, email address (for delivery updates) | Various |
Our shop runs on WordPress and WooCommerce on our own hosting. WooCommerce’s order attribution feature and our cookie consent tool (WPConsent) store their data on our own website. They do not send it to a third party.
Our website links to our Instagram page. If you follow that link, Meta’s privacy policy applies to anything you do on Instagram.
We may also disclose personal data where the law requires it, for example to HMRC or the police, or if our business is sold or restructured.
6. How long we keep your data
| Data | How long we keep it |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the financial year they relate to, as required for tax purposes |
| Service booking records | 6 years after the work is completed, in case of claims |
| Customer accounts | Until you ask us to close your account |
| General enquiries | up to 6 years after our last contact with you |
| Comments | For as long as the comment is published on our website |
| Google Analytics data | Up to 14 months, then deleted automatically |
| Cookies | See the durations in section 8 |
7. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased, where we no longer have a valid reason to keep it
- Restrict how we use your data
- Object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds, or need the data for legal claims
- Data portability: receive the data you gave us in a commonly used format, where we process it on the basis of contract or consent
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email us at info@classiccaroillondon.com. We will respond within one month and normally won’t charge a fee. We may need to confirm your identity first.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
8. Cookies
Cookies are small text files placed on your device when you visit a website. We use them to make our shop work and, if you agree, to understand how visitors use our site.
When you first visit, our cookie banner asks whether you accept statistics cookies. Essential cookies are always set because the site cannot work without them. You can change your choice at any time using the floating “Cookie preferences” gear icon, or by blocking or deleting cookies in your browser settings.
9. How we keep your data secure
Our website uses encrypted (HTTPS) connections. Access to customer data is limited to people who need it to run the business, and we use reputable providers who protect your data with appropriate security measures.
10. Changes to this policy
We may update this policy from time to time, for example when we start using a new service provider. The latest version will always be on this page, with the date it was last updated at the top.