VWBASE LTD (trading as WheelLockingKeys)
Last updated: 19 June 2026
VWBASE LTD, trading as WheelLockingKeys, is committed to protecting your privacy and handling your personal information transparently and securely.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit wheellockingkeys.com or purchase products from us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).
If you have any questions about this policy, please contact us at info@wheellockingkeys.com.
1. Who We Are
Data Controller: VWBASE LTD
Trading Name: WheelLockingKeys
Registered Address: 48 Cae ddol, Abergele, Conwy.LL22 8FP
Email: info@wheellockingkeys.com
Website: wheellockingkeys.com
We are responsible for deciding how your personal information is used and stored.
Company Number: 12695891
2. Information We Collect
Information You Provide
When you place an order, create an account, or contact us, we may collect:
- Full name
- Email address
- Telephone number
- Billing address
- Delivery address
- Account username and password (stored securely)
- Order history
- Customer service communications
Payment Information
We do not store your payment card details.
Payments are processed securely by trusted third-party providers including:
- Stripe / WooPayments
- PayPal
- Apple Pay
- Google Pay
We only receive payment confirmations and transaction references necessary to process your order.
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address (where possible anonymised)
- Browser type and version
- Device information
- Operating system
- Pages viewed
- Time spent on pages
- Referring website or search engine
- Approximate location derived from IP address
Vehicle Compatibility Information
Our compatibility tools may collect vehicle information such as:
- Vehicle make
- Vehicle model
- Vehicle year
This information is used solely to identify compatible wheel locking key products.
Uploaded Images
Where you upload images through our website (for example photographs of wheel locking keys, wheel locks, vehicles, or related products), those images may be published in our public gallery and become visible to other visitors to our website.
By uploading an image, you confirm that:
You have the right to upload, share, and grant us permission to display the image.
The image does not contain personal information that you do not wish to make publicly available.
The image does not infringe the intellectual property, privacy, or other rights of any third party.
Uploaded images may be used for product identification, customer support, educational content, website content, marketing purposes, and display within our public gallery.
We recommend that you do not upload images containing personal information, vehicle registration numbers, faces, addresses, or any other information that could identify an individual unless you are comfortable with that information being publicly visible.
We reserve the right to remove any uploaded image at our discretion where it is unlawful, inappropriate, misleading, offensive, or otherwise unsuitable for publication.
3. How We Use Your Information
| Purpose | Legal Basis | Retention Period |
|---|---|---|
| Process and fulfil orders | Contract | 7 years |
| Manage customer accounts | Contract | Account lifetime + 2 years |
| Send order updates | Contract | 7 years |
| Customer support | Legitimate Interests | 3 years |
| Fraud prevention and security | Legitimate Interests | 2 years |
| Improve website and services | Legitimate Interests | 26 months (anonymised) |
| Marketing communications (where consent is given) | Consent | Until consent withdrawn |
| Personalised advertising (where consent is given) | Consent | According to platform policies |
| Legal and regulatory compliance | Legal Obligation | As required by law |
| Cookie consent records | Legal Obligation | 3 years |
4. Legal Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
Contract
Processing is necessary to fulfil orders, provide products, and manage customer accounts.
Legitimate Interests
Processing is necessary to:
- Prevent fraud
- Maintain website security
- Improve our services
- Respond to customer enquiries
We have assessed that these interests do not override your rights and freedoms.
Legal Obligation
Certain information must be retained to comply with legal requirements, including accounting and tax regulations.
Consent
We rely on consent for:
- Marketing emails
- Analytics cookies
- Advertising and tracking technologies
You may withdraw consent at any time.
5. Who We Share Information With
We do not sell your personal information.
We may share information with trusted service providers where necessary to operate our business, including:
- WooCommerce / Automattic
- WooPayments / Stripe
- PayPal
- Google Analytics
- Meta (Facebook)
- TikTok
- Zoho Mail
- LiteSpeed Technologies
- Octolize (Flexible Shipping)
- WebToffee
- Royal Mail
- UPS
- Evri
- DHL
- Amazon
- Inpost
These providers only receive information necessary to perform their services and are required to protect your data appropriately.
We may also disclose information where required by law or in connection with a business sale, merger, or acquisition.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our website, improve performance, analyse usage and, where consent has been provided, deliver personalised advertising.
For detailed information about the cookies we use, including cookie names, purposes, retention periods and how to manage your preferences, please see our Cookie Policy:
https://wheellockingkeys.com/cookie-policy/
You can change or withdraw your cookie preferences at any time using the cookie settings available on our website.
7. International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place, including:
- UK International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs)
- Other legally approved transfer mechanisms
8. Data Retention
We retain personal data only for as long as necessary.
Typical retention periods include:
- Order and financial records: 7 years
- Customer account information: Account duration plus 2 years
- Support enquiries: 3 years
- Cookie consent records: 3 years
- Analytics data: 26 months
- Marketing consent records: Until withdrawn plus 3 years
- Server logs: 90 days
When data is no longer required, it is securely deleted or anonymised.
9. Security
We use appropriate technical and organisational measures to protect your information, including:
- SSL/TLS encryption
- Secure payment processing
- Login protection measures
- Regular software updates
- Restricted staff access to personal data
- Ongoing security monitoring
While we take reasonable precautions, no method of transmission over the internet can be guaranteed to be completely secure.
10. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict processing
- Receive your data in a portable format
- Object to certain processing activities
- Withdraw consent at any time
To exercise any of these rights, please contact:
We will normally respond within one month.
11. Complaints
If you are unhappy with how we handle your personal information, you have the right to complain to:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
12. Children’s Privacy
Our website and services are not intended for individuals under the age of 18.
We do not knowingly collect personal information from children.
13. Third-Party Websites
Our website may contain links to external websites.
We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology or our business practices.
Any updates will be published on this page with a revised “Last Updated” date.
15. Contact Us
VWBASE LTD (trading as WheelLockingKeys)
48 Cae ddol
Abergele
Conwy
LL22 8FP
Wales
Email: info@wheellockingkeys.com
Website: wheellockingkeys.com
Please also review our Cookie Policy:
https://wheellockingkeys.com/cookie-policy/
