Privacy, Cookie & Security Policy

Last updated: 6 October 2025

This page explains how OFM4x4 UK LTD trading as www.ofm4x4.co.uk (“we”, “us”, “our”) collects, uses and protects your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR 2003).

1. Controller & Contact

Controller: OFM4x4 UK LTD (Company No. 14281109) 84 Balmoral Road, Watford, WD24 4ET, United Kingdom.
Email: privacy@ofm4x4.co.uk • Phone: 02045770208.

2. What data do we collect

Identity & contact details (name, email, phone, addresses)
Order information & payment references (processed via Revolut)
Account login details (if registered)
Support messages & correspondence
Technical data (IP, browser, pages visited, device type)
Cookie data and tracking preferences (see section 8)

3. How we use your data & lawful bases

To process and deliver orders (Performance of Contract)
To provide customer service and returns (Legal Obligation & Contract)
To improve our website and products (Legitimate Interest)
To prevent fraud and secure payments (Legal Obligation & Legitimate Interest)
To send marketing emails (Consent – only if you opt in)

4. Data sharing & recipients

We share necessary data only with trusted processors:

Payment processing – Revolut Ltd
Couriers – DPD, DHL and other major/private carriers
Analytics – Google Analytics 4 (anonymous usage stats)
Hosting & security – cloud providers with UK/EU servers

We never sell personal data.

5. International transfers

As we ship worldwide, some data (e.g., delivery addresses) may transfer outside the UK. We use adequacy decisions or standard contractual clauses to ensure equivalent protection.

6. Data retention

Order and invoice records are kept for 7 years for accounting purposes. Inactive accounts are deleted after 3 years. Emails and support tickets are retained for up to 24 months.

7. Your rights

Access your data (a copy of what we hold)
Rectify inaccurate data
Erase data (where no legal reason to keep it)
Restrict or object to processing
Data portability
Withdraw consent (for marketing or cookies)

To exercise rights, email privacy@ofm4x4.co.uk. If unresolved, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookie Policy & consent

We use cookies and similar technologies to make our site work and to analyse traffic. You can accept or reject non-essential cookies via the cookie banner on your first visit or by adjusting browser settings.

Cookie categories & purposes

Type	Purpose	Typical Duration
Strictly Necessary	Enable core functions (basket, checkout, login)	Session only
Performance / Analytics	Measure traffic (Google Analytics 4)	1 – 24 months
Functional	Remember preferences (language, region)	Up to 12 months
Advertising / Pixels	Track ad performance (Meta Pixel etc.)	1 – 6 months

You can delete cookies at any time via browser settings. Blocking some cookies may affect site functionality.

9. Security Policy (merged)

We use SSL/TLS encryption for all pages. Data is stored on secure servers behind firewalls. Payments are processed by Revolut through PCI-DSS compliant systems. We regularly review our security measures and staff training.

We do not accept PayPal payments to keep prices competitive and reduce fees.