This Privacy Policy explains how GrippaTank Limited ("GrippaTank", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with our business activities, including through our Website, telephone, email, business systems, quotations, orders, products and services. 

We take privacy and security seriously and process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

     1. Definitions and Interpretation 

In this Policy, the following terms shall have the following meanings: 

“Data”  

Means any information that you submit to GrippaTank Limited via the Website and in connection with our business, which may include personal data as defined in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This includes, but is not limited to, information submitted through forms, correspondence, or other means of communication. 

“Cookie” 

Means a small text file that is placed on your device by this Website when you visit certain pages or use specific features. Cookies help improve your experience by enabling the Website to remember your actions and preferences. Details of the Cookies used by this Website are provided in Clause 11 of this Policy. 

“GrippaTank Limited” 

Means GrippaTank Limited, a company registered in England and Wales (07950256) with its registered office at 101c Irthlingborough Road, Finedon, NN95EJ, UK. 

“UK and EU Cookie Law” 

Means the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 and subsequent updates. These regulations sit alongside the UK General Data Protection Regulation (UK GDPR) and govern the use of cookies and similar technologies on websites. 

“User” 

Means any individual or entity who accesses or uses the Website, including visitors, customers, or any other third parties, excluding employees or contractors of GrippaTank Limited acting in the course of their employment. 

“Website” 

Means the website www.grippatank.co.uk and any of its sub-domains, except where a sub-domain operates under its own distinct terms and conditions. 

    2. Scope of this Policy 

This Privacy Policy applies to personal data collected, used, stored or otherwise processed by GrippaTank Limited in connection with our business activities and the products and services we provide. This includes personal data collected through our Website and other channels, whether online, by telephone, email, in person or through our business systems and processes. 

This Privacy Policy does not apply to third-party websites, applications or services that may be accessed through links or integrations provided by us. Those third parties are responsible for their own processing of personal data and may have their own privacy policies, which we recommend you review. 

    3. Data Collected 

Without limitation, any of the following Data may be collected from time to time, where necessary to carry out business: 

​a. Identity Information; such as your name, date of birth, address, and gender. 

​b. Business Information; such as profession, business name, and company contact details. 

​c. Contact information; such as postal addresses, email addresses, and telephone numbers 

​d. Transaction and Order Information; such as credit or debit card information, quotations, orders, purchases, and payments. 

​e. Vehicle Information; such as vehicle registration, vehicle make, model, and other relevant vehicle details in connection with servicing, installations, and other services we provide. 

​f. Technical Information: when you use our Website, we may automatically collect information such as your IP address, web browser type and version, operating system, referring website, pages visited, activity on our Website and the website you visit after leaving our Website. 

    4. Our Use of Data 

4.1 - We do not retain all personal data for the same period. The length of time we retain information depends on the type of information, the purpose for which it was collected, our ongoing relationship with you, and any legal, regulatory or contractual requirements that apply. 

Our retention periods may include the following: 

​a.   Sales, Orders and Accounting: records relating to sales, orders, and quotations that result in a transaction, invoices, payments, and other financial or accounting records will generally be retained for at least 6 years from the end of the relevant financial year, or longer where required by law. 

​b.   GrippaCare and Servicing: records relating to GrippaCare, servicing, maintenance, repairs and warranty work may be retained for the duration of the relevant service or warranty relationship and for an appropriate period afterwards. This may be necessary to maintain an accurate history of work carried out, manage future servicing, deal with warranty claims, resolve disputes and meet legal or contractual obligations. 

​c.   Enquiries that do not lead to a transaction; where you make an enquiry but do not subsequently purchase a product or service from us, we will retain your personal Data for a maximum of 12 months, after which it will be securely deleted or anonymised unless there is a legitimate reason or legal requirement to retain it for longer. 

Where a specific retention period is not stated above, we will retain personal data only for as long as it is reasonably necessary for the purpose for which it was collected, taking into account our legal, accounting, tax, contractual and legitimate business requirements. 

When personal data is no longer required, we will securely delete, destroy or anonymise it where appropriate. 

4.2 - We may share personal data with trusted third parties where necessary to operate our business, provide our products and services, process payments, arrange deliveries, provide servicing or warranty support, facilitate finance introductions, maintain our IT and business systems, or meet our legal and regulatory obligations. We will only share information where there is an appropriate lawful basis for doing so and only to the extent reasonably necessary. 

4.3 - All personal Data is stored securely in accordance with the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For more details on security, see Clause 9. 

4.4 - Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following purposes: 

​a. Internal record keeping. 

​b. Responding to enquiries and providing quotations. Processing orders, payments, deliveries and collections. 

​c. Providing products, installations, servicing, repairs and warranty support, including GrippaCare. Managing vehicle sales, trade-ins and related services. 

​d. Improving our products and services. 

​e. Sending promotional or marketing materials where permitted by law and in accordance with your preferences. Conducting market research and obtaining customer feedback. 

​f. Complying with our legal, accounting and regulatory obligations. 

4.5 - We process your personal Data under one or more of the following lawful bases, as appropriate: 

​a. Your Consent. 

​b. The performance of a contract with you. 

​c. Compliance with a legal obligation. 

​d. Our legitimate interests. We may process your personal data where it is necessary for the purposes of our legitimate interests, provided that those interests are not overridden by your rights and freedoms under data protection laws. 

Where we rely on our legitimate interests, these may include improving our services, maintaining website security, and promoting related services to existing customers. See Clause 4.4 for examples of the purposes for which we process data. 

    5. Third Party Websites and Services, Links to Other Websites 

5.1 - GrippaTank Limited may, from time to time, employ the services of third parties to assist with functions such as, but are not limited to, payment processing, delivery of purchased items, search engine facilities, advertising, and marketing. These service providers may have access to certain personal Data provided by Users of this Website, strictly to the extent necessary to perform their services and subject to confidentiality obligations.  

5.2 - Some of our third-party providers may process your data outside the UK and EEA. GrippaTank Limited uses Microsoft 365 for email, document storage, and internal communications. Microsoft may store or process personal data in secure data centres located within the UK, the EEA, and other jurisdictions. Where such transfers occur outside the UK or EEA, they are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO) and other mechanisms in compliance with the UK GDPR. 

5.3 - Any Data used by such parties will be processed only to the extent required to perform the services requested by GrippaTank Limited. We require our service providers to process personal data only as necessary to provide their services to us and in accordance with applicable data protection law and their contractual obligations.  

5.4 - This Website may, from time to time, provide links to other websites. GrippaTank Limited has no control over such websites and is not responsible for their content or privacy practices. This Policy does not extend to your use of those websites. Users are advised to read the privacy policies or statements of any third-party websites before using them. 

    6. Changes of Business, Ownership, and Control 

6.1 - GrippaTank Limited may, from time to time, expand or reduce its business, which may involve the sale or transfer of control of all or part of the company. In such cases, any Data provided by Users that is relevant to the part of the business being transferred will also be transferred. The new owner or controlling party will be bound by the terms of this Policy and permitted to use the Data only for the purposes for which it was originally supplied. 

6.2 - In the event that any Data submitted by Users is to be transferred in such a manner, you will be contacted in advance and informed of the changes. You will be given the choice to have your Data deleted or withheld from the new owner or controller. 

    7. Controlling Use of Your Data 

7.1 - Whenever you are required to submit Data, you will be given options to restrict our use of that Data. This may include the following: 

​a. Restricting the use of Data for direct marketing purposes. 

​b. Restricting the sharing of Data with third parties. 

    8. Your Right to Withhold Information and Accessing your own Data 

8.1 - You may access certain areas of the Website without providing any Data. However, to use all features and functions available on the Website, you may be required to submit certain Data. 

8.2 - You may restrict your internet browser’s use of Cookies. For more information see Clause 11. 

8.3 - You have the right to obtain confirmation as to whether GrippaTank Limited is processing your personal Data, and, where that is the case, to request access to the personal Data we hold about you. To make such a request, please contact us using the details provided in Clause 13. We may require proof of identity to verify your request. Subject to compliance with applicable laws, we will respond to your request without undue delay and in any event within one calendar month of receipt. This period may be extended by a further two months where necessary, considering the complexity and number of requests, in which case you will be informed of any such extension within one month of receipt of the request. Where permitted by applicable data protection law, we may charge a reasonable fee to cover administrative costs where a request is manifestly unfounded or excessive, or where additional copies of personal data are requested. 

8.4 - Under applicable data protection law, you may have the following rights: 

​a. The right to access personal data we hold about you. 

​b. The right to have inaccurate or incomplete data rectified. 

​c. The right to erasure (also known as the “right to be forgotten”). 

​d. The right to restrict our processing of your data. 

​e. The right to data portability. 

​f. The right to object to our use of your data. 

​g. Rights in relation to automated decision-making and profiling. 

​h. The right to lodge a complaint with the ICO. 

To exercise any of these rights, please contact us using the details in Clause 13. 

    9. Security 

9.1 - Data security is of paramount importance to GrippaTank Limited. To protect your Data, we have implemented appropriate physical, electronic, and managerial safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction of your personal information collected through this Website. 

9.2 - Where applicable, we use secure and PCI DSS-compliant payment processing systems and other appropriate security measures to protect your personal data. 

    10. Marketing Communications 

10.1 - We may send you information about our products and services that we believe may be of interest to you. We will only send you marketing communications by email if: 

​a. You have given us your explicit consent. 

​b. You are an existing customer, and we are promoting similar products or services that may be relevant to you. 

10.2 - You can opt out of receiving marketing communications at any time by contacting us directly using the information laid out in clause 13.1. Opting out will not affect your access to our products or services. 

    11. Cookies 

11.1 - Our Website uses Cookies and similar technologies to enable the Website to function, remember preferences, provide certain features and, where permitted, understand how visitors use our Website. 

11.2 - Cookies are categorised as either strictly necessary or non-essential. Strictly necessary Cookies are required for the operation and security of the Website and do not require consent. Non-essential Cookies, including analytics and certain functional Cookies, will only be used where we have obtained your consent or where an applicable legal exemption applies. 

11.3 - Where consent is required, you will be given a clear choice to accept or reject non-essential Cookies, or to manage your preferences. You can change or withdraw your Cookie choices at any time through our Cookie settings. 

11.4 - The Cookies used on our Website may include Cookies provided by Odoo, Google, Moneypenny and other service providers. The specific Cookies, their purposes, categories and retention periods are set out in our Cookie Schedule. 

11.5 - We may use analytics Cookies to help us understand how visitors use our Website and improve our products and services. These Cookies will only be used without consent where they meet the requirements of an applicable legal exemption. 

11.6 - You can also manage or delete Cookies through your browser settings. Disabling certain Cookies may affect the functionality of the Website. 

11.7 - It is recommended that you ensure your internet browser is kept up to date and that you consult the help section or guidance provided by your browser's developer if you are unsure about how to manage your privacy and Cookie settings. 

    12. Changes to this Policy 

12.1 - GrippaTank Limited reserves the right to update or amend this Policy at any time, as we deem necessary or as required by law. Any changes will be posted on this Website, and we recommend that you review this policy periodically to remain informed. 

    13. Contacting Us 

13.1 - If you have any questions about this Privacy Policy, would like to exercise your rights, or wish to make a complaint, please contact:  

GrippaTank Limited, 101c Irthlingborough Road, Finedon, NN95EJ, UK 

Email: cst@grippatank.co.uk 

Phone: 01223790049 

13.2 - GrippaTank Limited does not currently appoint a Data Protection Officer (DPO). However, for any data protection queries, including exercising your rights under the UK GDPR, please contact us via the above details in Clause 13.1. 

13.3 - If you are not satisfied with our response, or believe we are not handling your personal data in accordance with the law, you have the right to lodge a complaint with the UK’s supervisory authority: 

Information Commissioner’s Office (ICO) 

Website: https://ico.org.uk 

Phone: 0303 123 1113 

Last Reviewed – 15th September 2026