Privacy notice

Who we are

Custom Solutions UK. We decide how your details are used (the "controller"). Questions or requests: jamescustomsolutions@gmail.com, 07730437555.

What we keep

• Your account: your name, email and password (kept only in a scrambled form we can't read), when you signed up and confirmed your email, and when you last signed in.
• When you save a design: your phone number, your van's details and the measurements you give us, and the design itself with its pictures (kept 30 days unless it goes to checkout; we email you a week before it is deleted).
• When you order: your delivery address, quotes, orders and payments. Card details go straight to Stripe; we never see or keep them.
• For security: a record of sign-ins (time, internet address, browser) and a small cookie that recognises your browser, to stop people guessing passwords and to warn about strange sign-ins.
• If you turn on two-factor: the key for your authenticator app and your backup codes (scrambled).

Why (the legal reasons)

• To give you your account, quotes and orders: a contract with you, or steps you ask for before one.
• To keep accounts safe and stop misuse: our legitimate interest in security.
• To keep orders and invoices: a legal duty (tax records).

We don't sell your details, don't use them for advertising, and only email you about your account, quotes and orders.

Who helps us

Only services that run the site for us, each only with what it needs: Render (hosting the site, Frankfurt, Germany), Neon (the database, Frankfurt, Germany), Postmark (sending our emails), Stripe (card payments) and Cloudflare (the check that you are a person on sign-up). The makers of your order may see your name, address and design to make and deliver it.

How long we keep it

• A sign-up whose email isn't confirmed: deleted after 7 days.
• A saved design that doesn't go to checkout: deleted after 30 days.
• An account with no orders that isn't used for 2 years: deleted (we email you a month before; signing in keeps it).
• Orders and invoices: 6 years, as the law needs, even if the account is deleted.
• Sign-in records: as long as they're needed for security.

Your rights

You can see and download what we hold (Your account > Download my data), correct it (Your details), delete your account (Delete my account), and object to or ask us to limit how we use your details. Ask us about anything else. If you're not happy with how we handle your details, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

Only the ones the site needs to work and stay safe: one that keeps you signed in, one that recognises your browser for security, and (if you use two-factor) one that remembers it for 30 days. No tracking or advertising cookies.