Privacy Policy

ToxicTuning International (“ToxicTuning”, “we”, “us”, “our”) is an online ECU remapping and automotive performance-tuning company operating globally. We provide custom ECU remap files, tuning services and related digital products through our website at www.toxictuning.com.

For all privacy matters, contact us at: admin@toxictuning.com

We collect personal data only when you actively provide it or when it is generated automatically through your use of our site.

Information you give us:

• Contact & enquiry data — name, email address, vehicle make/model/year, and any message content submitted via our contact form or email.
• Order & billing data — when purchasing services or products, your payment details are processed directly by our payment provider (we do not store card numbers).
• Account data — email address if you register for dealer access or a customer account.
• Newsletter subscription — email address if you opt in to marketing communications.

Data collected automatically:

• Technical data — IP address, browser type and version, time zone, operating system, device type.
• Usage data — pages visited, referral source, time on site, click paths.
• Cookies & similar technologies — see our Cookie Policy for full details.

We do not knowingly collect data from children under the age of 16.

We use personal data for the following purposes:

• To fulfil orders and deliver services you have requested.
• To respond to enquiries and provide customer support.
• To send transactional emails (order confirmations, delivery updates).
• To send marketing communications only where you have given explicit consent.
• To improve and optimise our website through aggregate analytics.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal and regulatory obligations.

We will never sell, rent or trade your personal data to third parties for their own marketing purposes.

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Contract performance — processing necessary to fulfil a service or product you have ordered.
• Legitimate interests — site security, fraud prevention, and improving our services, where your interests do not override ours.
• Consent — marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we must retain or share data to comply with applicable law.

We share your data only with trusted third parties required to operate our business:

• Payment processors — to securely handle transactions. They are bound by PCI-DSS compliance.
• Email service providers — to send transactional and marketing emails on our behalf.
• Hosting & infrastructure providers — our website and databases are hosted on services that maintain appropriate security standards.
• Analytics providers — aggregated, anonymised usage data only.
• Authorised dealers — if you contact or purchase through a ToxicTuning authorised dealer, they act as an independent data controller for their own records.

All third-party processors are contractually required to handle your data securely and only as instructed by us.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal and accounting requirements.

• Transaction records — retained for 7 years for tax and accounting purposes.
• Support & enquiry records — retained for 3 years after the last interaction.
• Marketing data — until you unsubscribe or withdraw consent.
• Analytics data — aggregated and anonymised after 26 months.

When data is no longer needed we securely delete or anonymise it.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where there is no compelling reason for its continued processing.
• Restriction — ask us to suspend processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email admin@toxictuning.com. We will respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with the relevant data protection authority in your country.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include TLS encryption in transit, restricted access controls, and regular security reviews.

No transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please read our Cookie Policy.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our site after changes are posted constitutes acceptance of the revised policy.

For any questions, concerns or requests relating to this Privacy Policy or our data practices, please contact us at admin@toxictuning.com.